Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: J34suEdVT+gJI0aqILer5vfGs85Zf/cBhlmJFkjL9Ts=
Subject key identifier: 5B:C7:33:26:0B:61:77:30:5A:57:53:13:2D:8E:18:62:D7:B5:34:BB
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 0194BBCE91007ABFC6EC1273DD8EEAD83F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 140C
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: ByQZQwAuTHo1JJek+xzdeJvwpeQOeFdvqToRaVaUmjQ=)
2: WSqfYF0o_2MY8iXoAQ6LcMj2LjQ.roa (hash: nuyZOzY7bMRC2v/YnYG+WMrpV9UWVB2dFhkYTUc112E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:91:00:7a:bf:c6:ec:12:73:dd:8e:ea:d8:3f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=5bc733260b6177305a5753132d8e1862d7b534bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:77:b9:8a:f2:0a:bc:43:dc:66:2f:bb:26:
9f:78:7f:8a:03:f0:bd:d1:cc:21:81:a7:8f:13:a9:
bd:6f:d7:33:73:ef:5a:32:b1:3a:c9:52:1c:22:a1:
93:13:d3:50:34:05:a4:78:c6:53:ab:80:ba:a9:98:
98:44:92:64:ed:e9:73:4d:f1:00:54:6e:9f:2e:fb:
f9:5f:2b:a8:02:a3:f5:44:ac:78:9b:f6:dc:b1:d8:
35:0b:6b:6e:25:75:93:3f:7b:92:79:5a:0a:1a:6a:
0a:7d:34:f5:67:19:4c:fb:6f:15:c0:9b:60:da:95:
ad:f6:0e:be:e8:74:18:31:e6:39:cb:d0:95:57:3e:
26:96:2d:de:ec:c7:c1:86:43:95:2f:df:7b:04:34:
c7:12:6f:da:55:7d:ac:c7:93:93:23:e2:8e:7e:03:
79:d7:c5:da:6b:db:b8:e8:bc:c0:8d:49:7e:a3:b6:
b5:28:16:e9:e3:c0:5d:69:23:64:98:ac:51:2c:5d:
26:72:a6:6a:7c:e8:45:d7:b3:fa:24:c6:f8:e7:3c:
38:56:52:43:b5:1d:39:af:12:51:09:30:00:6f:5d:
f9:31:6f:e5:46:51:29:6d:ae:ae:ff:a1:d8:09:18:
be:90:ed:f4:fb:c4:7e:99:34:ac:0a:fb:ca:e2:7f:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:33:26:0B:61:77:30:5A:57:53:13:2D:8E:18:62:D7:B5:34:BB
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:11:ce:ec:aa:60:08:34:9f:c2:2f:45:b0:44:9e:b9:ac:d0:
39:1f:4b:cf:85:d5:6b:06:b0:67:97:57:00:af:49:2b:c9:d5:
5e:e2:a3:5e:0d:5c:98:7d:52:44:e4:bf:eb:5c:4d:54:28:00:
a3:27:ee:5c:29:d2:f9:19:6b:91:a0:bf:c4:98:e3:23:e0:6b:
b5:40:33:cb:76:d6:6c:ca:cf:ca:51:fc:01:87:6e:dc:7e:7b:
87:a2:75:a3:03:a9:16:a7:50:d8:81:3b:92:77:e7:4f:d9:64:
c7:db:0d:2d:ef:97:13:7a:d0:ed:89:89:af:f6:57:d7:d8:73:
61:64:7b:44:5c:8c:19:c4:1e:6a:e3:16:39:d6:b0:52:d7:0b:
f1:2c:a0:00:a7:f3:b8:67:a5:6b:8d:53:77:9d:70:f6:7c:6c:
99:ff:4c:be:43:f3:44:46:3e:91:11:14:46:84:10:74:46:1f:
33:b0:38:1a:8c:3d:d2:59:f6:02:2d:cc:53:06:b8:10:24:60:
07:bb:1e:e4:d6:a0:19:af:1e:32:7b:68:16:c2:ab:c6:00:5f:
50:3a:60:94:05:e9:8b:27:dd:b5:a2:17:ba:dd:ae:77:0e:9c:
d9:d4:7c:34:c6:24:94:4a:06:db:ce:9c:ef:b0:66:99:19:83:
b8:41:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:09 2025 by rpki-client