Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier: utweqhBSYJXmru778tpnKQamKT2rxb3BitMmKxddm0s=
Subject key identifier: 60:2B:EC:D7:D5:DE:19:29:6B:08:82:37:A1:72:DD:89:A5:E0:5A:C1
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 0194BCAA0228F9022DD3538E7930033D923B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa (hash: 9DLeiprUkEPr3xfx5ncHn6G4kT050WW6ahOVAnuzCHg=)
2: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: bozI1DTyHMYyLEWk2T4Xgzm42MgB/OxeJSRTNF2OdhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:28:f9:02:2d:d3:53:8e:79:30:03:3d:92:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=602becd7d5de19296b088237a172dd89a5e05ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:31:5b:d7:fc:dc:90:dc:ff:17:0d:35:0a:
81:31:42:9d:96:5b:ef:01:85:4b:a0:25:93:a0:b0:
50:6e:39:82:62:23:35:15:23:77:e5:ae:2c:44:12:
94:90:da:66:f2:21:65:b6:0c:63:39:d5:ac:9b:96:
bd:85:39:f3:69:9d:87:6f:14:d3:20:9f:2a:aa:ff:
8e:52:d5:0b:ea:40:63:cc:2d:43:79:f8:43:9a:9c:
70:65:f4:83:41:bf:36:e2:51:cc:21:f9:9d:2a:d0:
13:7c:f7:47:62:79:6b:17:40:50:46:91:4e:0f:1a:
a2:28:a9:09:f7:eb:21:54:ec:2a:43:36:7f:7b:8f:
21:d2:37:1d:63:26:ad:c3:73:84:99:27:4f:84:44:
14:98:b8:1e:16:3f:68:c9:1a:54:91:c8:24:70:ee:
35:e9:87:08:b3:ea:e8:de:0a:79:ba:fa:b8:43:bb:
71:4b:6b:b8:60:94:f8:59:be:ce:49:59:61:a8:d1:
ed:cf:50:04:5d:33:5d:30:fc:13:67:e9:ca:07:4c:
97:e1:14:1f:4e:86:30:97:05:5d:df:44:da:86:cc:
d1:a3:d2:8e:29:ed:d1:57:de:85:59:08:93:81:26:
73:6a:e4:22:9e:67:36:00:f8:88:dd:2b:1a:92:8f:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:EC:D7:D5:DE:19:29:6B:08:82:37:A1:72:DD:89:A5:E0:5A:C1
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6d:ef:c6:92:65:50:f6:eb:a3:10:48:7d:06:c5:5c:cd:ed:
c4:99:93:ca:31:4f:e2:fe:70:69:c7:1c:da:0d:d9:00:f1:ae:
f0:76:89:ab:9b:30:ce:87:39:14:8a:15:51:0a:5d:05:43:51:
ff:d4:a1:e7:59:9e:b5:0a:9e:36:ec:38:cc:91:50:8a:c3:ab:
9d:55:90:9c:45:56:d1:8e:8e:a2:da:09:f2:4d:89:64:fd:40:
42:e8:1b:ed:b9:a4:32:96:ba:6f:8e:63:26:18:8c:ef:17:9d:
f0:30:84:9f:04:69:71:39:73:a7:c6:a0:1e:99:3e:97:4a:68:
d7:7e:7a:32:5c:3c:a4:23:9a:51:81:e5:24:87:24:df:2f:dc:
8f:fd:ad:2c:8a:87:fd:a5:52:58:53:b8:08:2d:84:af:b9:49:
3c:23:25:b1:f6:34:10:e9:20:d2:7e:7d:35:f9:31:1d:43:df:
d1:e3:56:ea:b8:fe:fb:c1:69:1e:a5:45:5b:03:14:63:e8:01:
e6:21:2c:06:26:10:ca:22:cd:60:ca:38:52:fe:23:1d:0d:74:
f2:af:86:52:d6:1c:bd:b5:9c:02:ae:30:ad:c0:95:5a:06:f7:
d2:f3:65:6a:f9:d8:fd:6b:6a:ea:c8:e8:4e:5f:a8:bf:20:07:
f5:c0:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:18 2025 by rpki-client