Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: ooo7s2759wIVs8UDtr1k316u4Mdgel/CpCI2aAZn+Oc=
Subject key identifier: 88:67:B8:2C:8A:E5:34:23:59:7B:F9:3C:7A:6C:F7:8A:31:6F:F0:94
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 0194BBCDB49B9D129181052668E3879A5FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 107D
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: X99wDARocN4xqLcrp87CtnBPdJe2OJLkBmzia5CD32E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b4:9b:9d:12:91:81:05:26:68:e3:87:9a:5f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=8867b82c8ae53423597bf93c7a6cf78a316ff094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:6c:a1:bd:62:7a:e7:34:a8:2d:ae:40:56:
8e:d5:1b:83:dd:83:0b:05:6e:60:f4:1d:d1:6c:9b:
7e:dd:55:6f:1b:48:34:23:52:ff:0d:f8:22:a7:83:
c1:bd:29:8b:51:d2:c8:c1:ff:aa:0f:92:67:80:52:
70:bb:73:f1:d0:1c:77:d1:99:4f:b0:97:53:5e:88:
97:f2:dc:d3:fc:10:69:ce:25:75:35:4a:bb:d5:af:
29:67:1a:c7:bc:3c:b6:35:50:01:af:95:9c:dd:ab:
ad:da:54:f6:d2:69:d9:93:f9:7a:23:0d:8f:ca:ab:
83:5e:6b:cf:60:6f:89:f5:ed:60:e1:90:8a:16:28:
2a:ef:d9:c8:49:e2:83:cd:82:c4:e5:c4:21:d2:fb:
91:ed:ff:b9:47:3c:12:44:79:b4:06:6b:71:8a:74:
07:af:39:d8:6e:1a:73:67:60:f9:d8:f8:76:79:f5:
85:a3:c4:03:8f:79:49:8a:30:dc:3c:29:bb:6a:38:
5f:00:18:94:d6:40:e1:43:26:71:97:00:8c:14:5e:
99:ce:bf:dc:ed:ae:4b:93:63:56:f6:d4:74:3c:f0:
f2:33:d3:0a:9d:df:56:29:73:0d:85:2b:e7:8a:e0:
3f:97:5d:7c:66:b5:18:79:43:41:89:42:90:1c:ff:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:B8:2C:8A:E5:34:23:59:7B:F9:3C:7A:6C:F7:8A:31:6F:F0:94
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:64:a3:a5:f0:e9:3c:37:b7:db:1e:1f:be:e7:fa:31:2c:06:
d1:60:49:6a:3f:ae:1b:6f:24:b2:f2:af:1a:98:2b:e5:e3:67:
b7:6b:63:16:8b:4c:59:dd:ce:86:82:86:46:b1:21:4c:ad:0c:
90:65:8e:74:34:20:11:98:1a:76:fb:a6:99:25:b1:44:70:59:
53:be:4f:06:6e:59:6b:0d:ab:2f:94:36:71:01:77:9b:47:5e:
a1:fc:fc:8b:43:8e:5b:c3:ed:7b:6c:39:92:e8:18:7b:74:d7:
9e:01:b4:69:48:4c:ab:a9:31:a8:ac:51:bc:41:04:f2:41:08:
10:1d:da:7b:5f:4b:58:ce:ee:c6:d3:9d:4c:41:34:35:73:82:
cc:6e:b4:28:2c:b7:e9:f5:94:bb:5b:62:0b:a0:36:88:56:90:
46:a5:e4:26:49:99:55:0d:d2:89:28:b9:e2:b0:60:2f:fe:bf:
eb:e4:70:c1:f0:b2:4d:8b:c4:71:ba:f2:c6:68:e4:a4:67:34:
4e:02:2f:3b:9f:99:dd:cd:83:ae:b1:6d:2b:3d:66:77:ee:6a:
70:76:18:e1:e1:ec:40:6d:43:0c:66:61:08:27:34:17:f3:f6:
ac:d8:67:f0:96:d4:60:94:1b:ee:ad:98:be:9c:b3:8e:3c:f9:
86:f2:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:07 2025 by rpki-client