Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier: bK7HSt0TzMp4uxb9xBD+qTSYzQVkC63mepBvNUbxBVI=
Subject key identifier: 86:0C:3E:22:5E:34:04:FA:AA:F7:8B:39:25:F5:79:29:64:90:1D:F5
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial: 0194BCA9F2C3E380F89DBC4ECF22945C8D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number: 0662
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: bDCA+9j8pgz8NZOB5x6LRRgC4R0ABA2Hhu0RfAtu48E=)
2: yPI4iRYmm1fwcu2gPm48e2JKRd8.roa (hash: BDXqRGsDwDyhjpTf6VKbLY0k53gndOvrvWCUreaVIQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f2:c3:e3:80:f8:9d:bc:4e:cf:22:94:5c:8d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=860c3e225e3404faaaf78b3925f5792964901df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:f6:29:b6:01:06:73:f4:7e:fc:48:b8:25:
0d:12:5b:de:e7:87:54:2e:fd:66:22:17:bb:33:38:
de:ca:8b:3f:4c:17:53:f2:1b:4f:45:03:be:ab:57:
9d:31:3f:38:39:0c:ec:43:26:2b:5b:7f:2d:9c:0a:
d4:92:3d:b6:1e:16:8e:26:5c:6b:08:90:6f:98:cf:
2a:bd:f6:31:5f:33:f6:b3:27:4b:e8:1e:93:62:36:
1d:42:18:63:27:28:d4:c1:a5:b0:f5:2c:06:f4:5e:
89:0d:b3:c0:a1:13:5f:e0:f4:f0:f6:cd:6d:39:e5:
6e:ba:b4:5f:3c:da:98:eb:54:8d:1a:2d:11:0b:39:
8c:f9:ff:49:5a:f1:c8:fb:a1:4f:47:d1:74:32:37:
46:dc:a1:7b:67:47:0b:eb:a5:d7:7b:18:8f:62:9d:
0e:5b:c7:41:07:74:eb:4a:3d:a2:44:f5:b9:67:f7:
46:be:34:ef:2b:b0:2e:e9:2e:be:d8:ff:c3:8f:1c:
3a:de:f6:73:be:65:2e:aa:ed:2a:d1:ad:20:ef:58:
2f:e5:ab:2e:d7:61:d2:da:a5:dc:86:d7:54:a5:cb:
08:38:cd:75:64:39:15:80:83:8c:c9:17:41:b2:f0:
32:00:3a:e8:b5:50:08:06:9e:e0:30:1a:44:49:58:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0C:3E:22:5E:34:04:FA:AA:F7:8B:39:25:F5:79:29:64:90:1D:F5
X509v3 Authority Key Identifier:
keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b0:11:8b:64:5c:ba:9d:da:e8:a4:70:4a:69:bd:97:1d:c3:
a1:85:c4:9c:2f:eb:cb:ba:d9:4c:6f:08:ea:3f:11:64:01:f1:
33:cf:b2:4f:0e:b7:5d:2e:20:0f:dd:7a:9d:03:78:45:a2:e4:
f1:6f:58:5e:f5:f0:d3:13:87:ae:69:a8:6f:c4:05:85:ef:81:
de:fe:4e:04:32:63:d8:ac:6a:8a:8e:be:37:c2:c6:ae:cb:77:
b6:1f:bd:18:ee:19:9d:39:be:d8:8e:6c:21:f2:5a:74:2a:77:
bd:a5:02:7f:94:07:44:bd:ea:fe:bd:5d:8b:5f:09:d3:2f:cb:
d7:7c:1c:d1:d1:95:3a:d1:b5:d5:e9:17:b1:9b:a1:3e:f1:22:
35:55:3c:4c:e3:be:5b:35:c3:21:9b:ce:6e:57:24:65:5b:aa:
f8:72:b2:2d:cc:15:56:8d:6b:2d:0f:9f:e1:2c:d3:a8:dc:e2:
54:b3:9a:44:0b:c8:7c:41:d4:b4:15:08:e6:81:dc:2c:76:4a:
e5:40:b4:91:55:a3:5c:34:f7:76:dd:3c:0d:eb:9e:3b:1d:66:
c7:50:94:e3:35:fe:13:16:27:cb:49:24:b2:e7:19:b7:85:f6:
d7:25:fd:09:00:ec:d2:bd:a6:ed:a4:38:70:c4:f3:71:db:83:
5d:cb:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:17 2025 by rpki-client