Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
File: SUKa2sRAwGNzIEXa68w9kVLjXLs.mft (raw, json)
Hash identifier: gYlA25iim9Aj9IPAVe8zVTpTaEz2uX7Mn2fhd5CIiIA=
Subject key identifier: 21:37:D0:87:3D:7C:27:EF:DC:20:A6:E7:4F:3C:6F:26:ED:66:75:C7
Authority key identifier: 49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
Certificate issuer: /CN=49429adac440c063732045daebcc3d9152e35cbb
Certificate serial: 0194BBCE2387FA0802BD91780CC3B4239AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
Manifest number: 03D4
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 2Z60rEkhlp09_ejUrPkSUI9lUFw.roa (hash: +bXD21iT/XI3+GJvUcwQNZYpPoFPkVKzm99vXQeAUD0=)
2: SUKa2sRAwGNzIEXa68w9kVLjXLs.crl (hash: a+xfLS0zDi0zkMB4M02REkqbIRzbEmnmsIUcq5KarXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:23:87:fa:08:02:bd:91:78:0c:c3:b4:23:9a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49429adac440c063732045daebcc3d9152e35cbb
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=2137d0873d7c27efdc20a6e74f3c6f26ed6675c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:20:0b:92:5c:ab:16:09:13:07:20:b8:9c:
d5:21:01:84:10:a7:a7:fd:b4:95:cf:9b:95:2d:ab:
72:7c:e1:e0:4d:2a:b7:b2:d6:ab:3f:4a:10:2d:8f:
9a:3c:2a:a8:05:85:84:2e:96:f9:7f:f0:cf:2d:ee:
b8:2c:5b:de:64:53:df:81:c6:49:b7:7f:25:b5:67:
8a:5b:b8:2f:a1:95:27:3a:d6:ce:99:4c:7b:6d:94:
9f:e6:ac:a8:31:80:b7:c2:22:ee:bc:8c:a1:fb:b1:
eb:05:04:e4:e9:fa:ed:b3:76:72:ba:b7:26:32:ef:
81:e8:c8:18:73:4f:0d:80:e3:c0:e3:2c:e5:33:06:
ac:64:b9:d9:67:da:96:57:29:32:ee:ad:03:a7:44:
79:37:6c:87:92:ab:c8:e7:1e:56:98:89:7d:cb:cf:
eb:53:7f:22:98:58:69:75:bb:56:80:a5:26:aa:e8:
56:d0:27:fd:ca:92:d3:a2:48:27:56:8b:97:58:95:
3d:c4:57:f8:b4:6a:de:9e:bc:0f:34:50:32:db:8c:
a6:20:9d:ef:4b:cd:6e:db:49:9c:ff:32:5f:f9:66:
da:70:5d:1e:7f:8b:8b:d7:f6:9c:06:c1:04:06:82:
dc:26:1b:4a:5b:bf:3e:6d:88:49:10:be:0c:27:22:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:D0:87:3D:7C:27:EF:DC:20:A6:E7:4F:3C:6F:26:ED:66:75:C7
X509v3 Authority Key Identifier:
keyid:49:42:9A:DA:C4:40:C0:63:73:20:45:DA:EB:CC:3D:91:52:E3:5C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUKa2sRAwGNzIEXa68w9kVLjXLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4808d7-8efb-4219-8fe3-ea945d604b0e/1/SUKa2sRAwGNzIEXa68w9kVLjXLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:10:42:f2:34:54:45:a7:af:e8:0e:bf:20:11:c0:28:ae:9d:
05:1c:3d:0e:e1:17:cd:99:87:c0:2c:bf:4c:64:d5:98:69:45:
b3:57:1a:a0:3d:4c:62:d2:41:15:3e:b4:d9:79:14:fb:67:5a:
41:2d:da:38:3e:2e:0e:3a:dc:65:b4:13:f7:4d:40:dd:af:15:
64:5f:9b:98:82:7a:04:1b:b1:21:ae:62:d8:d0:15:48:17:4f:
2d:b9:a4:4d:34:69:5e:64:08:ff:d9:47:5a:87:40:6f:42:f1:
2e:4d:87:20:ec:4a:e0:11:b6:f8:9d:65:0c:5d:0f:63:ef:26:
92:aa:33:1e:91:08:9f:3a:14:6c:48:cc:4a:ad:07:f6:b5:3d:
03:d7:46:ff:a9:7d:0b:1b:1f:f5:6a:5f:d2:84:94:de:33:db:
11:82:4b:18:25:58:4e:0e:59:70:c4:fd:08:33:90:09:4c:f6:
d5:37:e4:2f:e0:d7:2b:fb:ad:19:f7:c6:96:b8:95:bc:63:67:
e6:3e:c1:60:e3:96:18:22:9c:b8:2f:b8:fc:d9:50:b1:b2:50:
f1:ff:00:40:ee:46:eb:91:57:42:d4:a0:0d:8c:18:d6:5e:a6:
2d:1a:72:5a:aa:6b:d6:f7:36:12:5a:be:1d:2b:9a:4a:51:a4:
a3:11:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:36 2025 by rpki-client