Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: HfMVeHFKc7lZDeVVsVGU0nVGB0lcIEJOHgb+BWvOTHc=
Subject key identifier: A7:E1:D9:7D:BF:7C:B1:F8:36:53:F8:94:E5:C0:0F:66:8F:EB:2D:5A
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 0194BCE0D9A9079DB27392B4A73DEDB34F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 0140
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: 1li9LT4nn21A5dqwffakGCUp6O7SVMz3dP1rMyhez+k=)
2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d9:a9:07:9d:b2:73:92:b4:a7:3d:ed:b3:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=a7e1d97dbf7cb1f83653f894e5c00f668feb2d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:74:16:c3:ee:18:45:c4:1d:eb:d3:50:c3:
c7:c5:f0:7e:fb:f7:9b:27:15:41:bf:25:e7:13:6b:
49:c5:73:d0:7a:a7:f4:a6:4b:e5:6e:95:94:a0:d8:
76:06:f7:70:fc:f7:c0:b8:cb:f1:8b:95:33:98:82:
79:45:1f:5f:fc:b2:43:78:fc:c9:c2:02:7c:65:92:
af:65:a5:4e:fb:35:63:42:de:26:11:7c:c0:08:44:
10:a3:43:1a:a7:1f:ad:a1:3d:3d:a5:76:51:ae:60:
51:8a:36:c4:62:f7:ce:8b:a1:46:fb:10:a7:b5:c8:
cb:de:5a:a3:6f:7c:78:82:86:04:14:6f:60:95:6f:
90:9d:76:9f:89:fe:ea:41:5e:57:7d:31:28:b2:ad:
ad:5a:13:42:6e:71:02:b3:87:d3:89:c1:73:e0:8d:
05:6c:0e:28:e1:44:b2:aa:4c:b3:ad:0d:eb:95:37:
da:5e:62:f1:df:62:0e:48:60:53:72:c5:ff:bf:be:
d7:47:68:81:33:ee:84:fe:1c:cf:f2:43:46:60:34:
05:cc:9d:26:39:ca:6b:89:f9:c0:6c:54:30:a8:4f:
f5:24:84:0d:8b:7a:1e:d1:51:80:e4:41:7f:a6:ea:
9e:49:86:ee:af:28:be:96:1e:27:ea:60:be:6e:17:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:D9:7D:BF:7C:B1:F8:36:53:F8:94:E5:C0:0F:66:8F:EB:2D:5A
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:04:56:bd:d7:45:d9:75:ae:26:67:f0:bf:f9:95:24:cf:
ac:d9:f3:96:9a:2f:ca:fc:73:9f:bb:fe:2b:c6:4a:6d:f7:e7:
16:b4:9d:6e:6b:07:95:e1:8d:2a:78:1e:3d:40:34:ff:4e:8a:
01:62:3b:eb:ee:55:80:8a:38:39:1d:2f:db:20:6f:40:a9:45:
f8:74:9e:86:4d:59:ed:a1:4d:91:6c:51:f5:bf:65:b5:bf:7a:
05:25:e6:41:df:28:86:dc:1f:82:4e:b3:65:af:72:aa:55:b9:
e9:b2:26:af:86:23:ee:99:0f:1b:37:ca:7e:64:3a:1d:63:98:
3f:6e:ce:42:73:16:e2:2d:ec:79:5c:0f:9e:07:a0:71:01:5e:
62:64:4b:c0:e6:00:fd:9f:80:e1:d0:51:36:d6:6f:4b:27:80:
0b:32:de:b2:e0:69:b1:e0:a9:8f:0e:f4:a2:1d:84:5d:d7:43:
5f:27:fa:2f:2b:ea:90:02:96:e6:e5:80:2b:49:91:5e:85:49:
d4:97:4b:84:08:bc:c5:00:4e:2a:50:45:58:1b:0c:6e:f3:74:
3b:67:3d:61:4b:de:a1:09:ae:fd:0e:d6:b5:49:25:1d:3c:b2:
80:06:24:fc:3c:df:21:ee:a6:6a:6b:41:c8:30:dd:ca:49:d7:
22:3f:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:51 2025 by rpki-client