Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: map7JCLY+krC531ZCgok45JLqle2PKQC1s3pQRo5954=
Subject key identifier: E5:A8:5A:44:93:EF:19:43:3D:A7:E3:82:50:B9:B2:D0:BF:74:88:49
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 0194BC3C3D2002B598F1B71DF785C8C9063A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: bw/RACkrp1IjiCfrnm45o3pw54+cof+FcmL4VmcF0qg=)
3: g1hDqJ-TaUw9KmfKx4pghTOqN8w.roa (hash: P6L61VQSrZ18hNQNNuDfiezNuYmPmeZrYiK86nbR/xY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:20:02:b5:98:f1:b7:1d:f7:85:c8:c9:06:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=e5a85a4493ef19433da7e38250b9b2d0bf748849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:40:9f:d2:36:48:26:5c:82:87:39:f2:20:
28:18:a8:16:cd:f7:a4:6e:22:62:3a:00:c4:16:17:
a3:6e:67:bb:91:8c:8e:89:49:91:42:f8:eb:24:d7:
70:2f:cf:4d:c1:af:fd:09:47:46:2f:f4:5e:cb:31:
30:9b:1d:88:53:95:87:39:cf:d3:85:98:aa:11:c6:
a4:25:9e:a1:ec:ab:85:ba:bc:38:05:05:d5:5f:99:
0e:29:06:b2:03:40:e4:68:68:19:5f:a7:7d:46:15:
0f:41:27:c8:bd:09:7d:93:b3:11:08:3f:2b:21:f5:
0c:7f:32:4e:18:b4:69:1e:8d:a9:b0:f2:47:ae:35:
03:d7:b4:41:bf:f2:3f:8c:a4:c4:ae:0e:75:d7:49:
a9:59:c3:fb:c5:9d:b8:31:6f:76:13:81:fe:6a:19:
42:f3:17:f1:15:c2:ab:68:4b:41:58:66:65:a4:f9:
77:11:90:87:21:a7:fc:d4:2a:06:94:04:11:93:38:
f7:0c:33:9f:af:bc:37:5d:db:38:23:1a:db:74:07:
5b:0d:15:02:c2:38:7d:e5:0e:e4:70:5f:50:be:34:
52:90:c5:eb:c9:d7:7b:cc:d1:c6:02:72:3c:61:11:
62:50:f9:d6:e8:84:0e:b9:2c:63:30:20:d6:62:67:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:5A:44:93:EF:19:43:3D:A7:E3:82:50:B9:B2:D0:BF:74:88:49
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:83:df:b5:be:24:0a:2d:5f:87:09:09:1c:ac:23:80:ad:48:
9f:88:6b:fc:f8:58:e5:79:71:44:89:23:eb:c9:0e:d8:66:54:
65:d5:fb:3c:f4:01:73:9a:67:cb:b9:77:59:51:7c:0d:51:34:
02:ed:11:9a:1e:ed:00:31:ab:41:cc:45:de:f1:14:e7:21:12:
6b:cd:f6:cf:4b:13:a5:45:c4:ba:91:8c:20:11:e0:b5:cb:cc:
ee:78:5b:9c:e5:67:da:f4:d0:4c:35:bc:b2:cd:41:0d:df:41:
62:17:46:4c:92:0f:65:f1:6f:0e:e1:ea:70:32:3d:36:d1:a0:
13:43:ac:75:4d:8a:0f:ac:32:f8:f8:01:75:cf:fd:7b:32:27:
5f:20:ad:30:c7:41:be:62:90:a4:8e:9a:7c:16:f3:cd:25:cd:
25:bc:b7:38:05:3a:49:eb:06:75:f4:53:ac:95:00:ab:df:b4:
e0:ca:5f:66:79:f5:ec:51:26:05:98:43:f5:f1:ac:2b:15:cd:
b1:aa:d3:a8:d8:49:b2:9e:9b:dc:95:f0:c1:9e:55:54:7d:26:
f4:d5:18:8d:11:5c:f7:67:6c:bd:f6:27:8d:80:26:38:33:5e:
c4:22:4f:ac:8c:46:dd:91:40:cb:08:83:50:2f:45:7f:e1:29:
8b:c4:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:06 2025 by rpki-client