Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: 7UU8Enlu44smmNfvdldCmnyqix7R8k8hpQ2wbq5DWPg=
Subject key identifier: 21:13:C5:51:23:AD:30:0A:58:6D:32:DB:78:64:61:66:8B:F2:62:DC
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 0194BD8542C732AF8139566CF89B97CB0116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: NApugC31V5WK63Ny4-racw1twJY.roa (hash: bVtlfHYisvNWIzitGovNgNsC2+/TaBl7fpGIvEq6gaQ=)
2: OI4m2d90B9xfmwLaDwu0RLIhyHI.roa (hash: 1tPpSMdOXEc4uC4QEVA58ahEFZcfSMXztb+GTkRhAk8=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: QhztIQV2xCzE0aaR0Qum16QySECtHw19fbpn6meGSUI=)
4: i4v6AZ8AjCY-DaijxXBLxpCWr-o.roa (hash: IzqUiUJUiq+h6Lhm9373nMFr5yy8oOrsxUoRI4smlK0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:42:c7:32:af:81:39:56:6c:f8:9b:97:cb:01:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=2113c55123ad300a586d32db786461668bf262dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:74:2c:cc:47:1c:3c:51:f5:75:56:f8:8d:
16:fd:9a:77:3a:67:eb:37:bb:ca:2c:68:32:c8:73:
5d:21:0f:07:f2:5b:bf:34:c0:7f:b2:6a:bd:e2:fa:
db:dd:28:fa:cb:c5:d5:9d:f9:80:d6:dd:ea:f5:2e:
b9:a2:9c:63:1d:fe:95:ee:f2:58:ad:94:03:a8:56:
b0:e5:bc:a4:ca:28:25:0e:aa:1d:4a:36:53:de:f4:
7e:83:bd:09:ad:5b:ef:0e:80:20:23:6a:12:76:94:
2c:d6:53:95:88:94:7d:99:bb:a9:36:1e:c9:3d:5d:
26:d0:08:68:31:01:4e:44:03:97:07:fc:e4:33:81:
1b:46:8c:f7:1b:25:e9:22:2e:11:89:4e:a1:b3:a2:
a4:6e:e8:a5:08:1e:4c:12:5f:c0:45:2a:5c:0c:7c:
2e:9c:70:b8:ed:34:cb:b3:8b:ed:b4:56:bc:1f:9e:
ea:c3:2d:c4:d3:47:74:74:2a:d9:22:7b:76:e8:3a:
d0:79:55:e1:f6:30:d4:33:2c:d6:2b:15:e5:74:67:
05:6b:b9:d8:29:5f:66:27:07:eb:1d:a9:40:8f:83:
3e:33:af:95:75:42:c3:01:59:4b:d5:f9:16:51:2d:
0f:04:e0:5d:d0:03:26:7b:3b:97:15:86:7c:3f:0a:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:C5:51:23:AD:30:0A:58:6D:32:DB:78:64:61:66:8B:F2:62:DC
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:55:09:6e:cf:84:ad:28:fb:ec:1c:8d:78:94:6e:1f:36:68:
9e:98:52:81:ef:4b:23:11:32:db:6f:12:41:34:42:55:0c:c3:
af:13:bc:e9:ba:c8:43:f2:e2:82:97:e5:87:49:bd:37:6a:a2:
96:b6:45:a4:3e:8b:00:7f:bb:5e:56:56:17:3b:8e:34:11:37:
ce:57:0c:6a:9f:f2:78:87:8b:3c:d1:93:b4:63:87:b0:07:55:
f0:c5:5d:52:d4:8b:86:78:eb:88:ee:60:7b:31:78:1a:a5:af:
a4:49:74:af:da:3c:10:5b:00:65:4c:e0:4e:7d:1c:91:66:19:
eb:09:cd:c4:59:2c:62:b9:93:c9:b9:47:56:d1:20:77:e4:e1:
0c:98:53:b6:e1:90:9e:7c:cc:d7:19:8b:91:bd:70:e1:0c:e1:
1f:ee:7c:24:f0:fd:fd:da:4e:85:48:91:f6:7e:e8:03:33:c2:
7b:9b:de:a6:dc:bd:66:92:8c:38:3d:9c:b6:2b:d5:5b:e1:8b:
69:66:00:93:79:ce:d3:96:ef:08:8f:3c:84:9a:a0:51:cf:6e:
61:de:e7:65:43:48:1c:02:ca:49:c0:e5:4a:06:78:80:f1:a6:
ca:98:9a:2e:84:45:c9:1a:25:77:35:c0:82:73:bc:07:89:1e:
cd:99:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:34 2025 by rpki-client