Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: //X940SoS7vhw775b6X7WrL57gweUN6cNqZdROOUaUA=
Subject key identifier: B4:7C:5D:AF:EA:66:7A:66:71:64:4A:B1:53:91:02:2A:28:A2:43:07
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 0194BBCE752A2468E7DF5D39C17571A4FBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 1247
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: cHuhxlxf92/vOrHZuA2my7jFGWjQla2pgERphiTtPrw=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:75:2a:24:68:e7:df:5d:39:c1:75:71:a4:fb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=b47c5dafea667a6671644ab15391022a28a24307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:5c:56:12:ba:9e:58:ee:a6:f0:ce:68:a1:
9e:7e:96:52:7b:0f:6c:6b:74:5e:79:60:4e:ad:b4:
95:b6:66:68:f1:b5:27:58:19:a2:1f:c5:95:c7:29:
49:ae:4f:a9:9c:9f:36:e1:0d:20:99:6c:d2:09:1a:
25:3d:85:95:19:c4:5d:38:a8:72:02:22:55:2e:a6:
df:85:c2:f5:16:a7:3c:9d:69:eb:8f:23:8b:ce:94:
a5:6d:97:36:fd:2e:2a:b8:81:55:9d:23:53:1f:ec:
ce:e4:23:5f:47:27:49:81:7c:ee:46:09:fd:69:0f:
23:2c:91:b1:33:11:ee:db:56:74:51:c5:36:7f:03:
dc:8e:2a:bb:7b:d8:25:85:6a:0e:d5:0f:8d:90:62:
b6:ca:4a:d3:cc:85:fb:c8:ea:52:4a:0e:7d:fa:b6:
8b:0c:c6:9a:8b:10:bc:2f:9f:a8:60:b9:5b:d9:45:
32:77:d0:d6:71:cb:aa:f2:10:4e:4d:57:24:79:5f:
9c:8d:64:15:54:d2:9b:16:85:5f:4a:d9:df:5e:c6:
ed:63:ab:96:a7:34:f2:1c:c0:e4:81:72:11:23:4f:
f1:77:4e:7d:b0:56:e8:40:0e:c6:5e:e2:d1:08:8c:
3a:c0:3d:90:07:f0:e0:92:3d:b8:b0:7c:80:b6:61:
aa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7C:5D:AF:EA:66:7A:66:71:64:4A:B1:53:91:02:2A:28:A2:43:07
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b4:93:21:17:85:5d:af:ab:12:e4:d3:2b:aa:fd:3f:13:e2:
5c:3e:b2:8c:3f:83:7f:3d:d4:5e:ee:da:76:d5:08:4f:20:a5:
bf:53:7b:1b:a6:03:dc:03:55:14:7b:ab:2e:33:14:76:8e:77:
c8:7d:15:6a:33:57:e6:08:eb:e3:59:8a:e4:9e:ee:2c:de:4b:
c9:8f:57:83:d0:41:22:46:6f:04:db:fd:23:58:b2:ae:af:c7:
d8:d9:76:b0:8d:c3:08:32:3b:b2:42:6e:a1:34:39:1f:e5:f5:
4f:dc:a8:37:a7:c6:07:7b:70:cb:b9:88:3e:92:cd:d3:ce:6d:
7c:ff:81:ec:c9:42:be:38:8c:fe:9f:7b:0a:b9:c4:c9:44:2b:
e2:18:89:c4:ee:ba:e0:6e:3c:96:d3:e3:ab:76:a3:30:20:dd:
35:12:0f:01:2a:88:6d:94:96:77:24:bb:96:24:d2:19:48:a9:
a5:4b:1f:59:25:85:18:af:1c:06:bb:3d:73:b9:38:ff:cf:b5:
56:1c:9f:11:73:09:84:2e:e9:b5:69:68:74:c9:5c:ff:1b:de:
a2:3b:5e:c6:22:ee:be:d8:ea:fb:32:95:57:f8:02:64:70:bb:
55:35:36:e7:d0:c6:6c:91:12:e4:91:4e:1c:d7:b5:7a:a8:0b:
2c:36:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:57 2025 by rpki-client