Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier: ZGfR65dOUK3301QIgzRZa9vRfryN9qnX/3hrZPqs41g=
Subject key identifier: A2:6A:91:C1:6A:6E:F2:F0:EB:03:E4:72:7A:FD:8F:B3:BE:72:29:41
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 0194BC72F469D78ABC994F9C253DAF7AC276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: ZkcKtlN0KM1o4u4O5EvaETQymLTxKWlWFO/Wmzc06vM=)
2: yzTNOCEQUyiIncYM071wY64qAlg.roa (hash: hLDsFeTn5OhhHpxN9Rt6KZxw/jMGMbLdQEqz1BHAxCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f4:69:d7:8a:bc:99:4f:9c:25:3d:af:7a:c2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=a26a91c16a6ef2f0eb03e4727afd8fb3be722941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:76:a8:64:3b:28:58:f0:36:9b:9e:90:87:
e5:46:1c:50:36:7f:17:83:85:ba:5b:45:06:58:8b:
bc:b2:d4:77:72:c1:80:13:49:18:33:28:bf:2d:7e:
18:a4:7b:de:c7:a5:4d:a9:e2:b8:50:d8:ba:5f:b2:
da:f3:65:15:1f:cd:7f:36:a9:f3:5f:68:00:03:b1:
e2:aa:48:f5:5b:23:8d:34:43:47:e1:21:6e:70:9d:
71:c2:c0:14:cf:95:15:23:28:06:64:c0:8b:57:86:
c9:2a:e8:63:72:60:33:5d:2a:38:9c:78:28:9f:16:
ae:ba:4a:da:21:8b:6b:be:d8:c5:21:0a:44:95:e7:
ee:ae:6d:b5:67:d9:1a:51:49:38:9a:f0:eb:08:6b:
7a:c7:60:5c:bb:89:83:22:bb:88:1e:88:4f:80:0f:
46:79:2c:a0:e0:9d:30:5c:e4:4a:65:9b:8c:c0:3a:
9f:e3:76:58:5f:7d:3a:64:99:29:fe:9d:fa:a8:02:
43:69:19:64:4a:d8:78:3a:c2:a1:59:b6:c6:4e:b9:
08:2a:77:d4:fd:93:8e:ea:d3:ac:4e:04:4e:69:46:
0d:d9:50:c9:26:60:4d:52:a2:8c:1a:8e:5f:0b:16:
88:78:8c:c3:77:35:86:36:1f:9b:f9:67:bf:02:46:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6A:91:C1:6A:6E:F2:F0:EB:03:E4:72:7A:FD:8F:B3:BE:72:29:41
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:77:1a:b7:38:77:41:dd:5c:54:56:2c:89:9c:8c:6e:49:36:
a2:cf:c9:46:29:26:72:3a:af:bf:6a:a3:38:c6:2b:6c:c7:76:
c8:b5:be:49:dc:cb:4d:b9:0f:7a:87:5e:3b:a5:83:b5:9d:68:
7f:28:37:05:5a:69:de:7a:d0:20:0e:86:0c:06:b9:69:84:7e:
9e:13:e4:49:28:33:8e:97:a0:18:9d:0e:82:b1:cb:07:d6:71:
0d:f5:e8:d7:15:8b:85:3c:2a:2d:7e:26:b4:3c:53:b5:0c:68:
68:1b:bd:bf:15:2c:da:20:e4:a1:4d:0d:4e:9a:a8:38:94:c9:
ef:42:53:4d:ce:ce:de:e3:7e:aa:60:ff:a1:ca:d6:dd:47:99:
73:54:91:47:b0:8e:a1:b9:06:db:b7:7e:4a:35:bb:c8:ef:29:
f6:59:d3:aa:48:de:43:27:a4:a5:cc:15:40:a0:f9:74:34:9e:
d5:1e:80:31:c5:6f:02:73:de:3d:ac:53:a8:94:7a:60:3d:e8:
88:79:4b:c0:9d:c0:e4:c2:21:e4:34:f7:b1:52:49:6c:22:25:
34:57:e7:73:8a:a7:43:69:40:9d:0d:9c:92:c5:0f:3a:ea:25:
90:d5:a0:64:cf:75:ea:66:09:c1:73:c9:0b:26:97:2b:51:43:
c2:24:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:59 2025 by rpki-client