Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: PUWQMmXFQrU8KIT220PVyCBbSdNAiSqwViA+vRNfquY=
Subject key identifier: D1:6E:AB:5D:D7:69:6E:F0:C6:E3:E9:AD:FD:DF:1B:1D:B5:72:6A:38
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 0194BD4E6D81D5A177F7CC0AF956044A800F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: nAIu6BL/WTX1EgmnixCSdZybOv3bjUif6ZGEj0S1MaQ=)
2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6d:81:d5:a1:77:f7:cc:0a:f9:56:04:4a:80:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=d16eab5dd7696ef0c6e3e9adfddf1b1db5726a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:63:0c:95:ad:99:8a:a4:08:73:a7:0c:32:
71:1f:3f:03:86:72:09:e9:d5:a2:e4:1a:4a:9a:46:
83:77:20:99:be:f9:6c:ae:cc:f2:7b:88:48:46:50:
29:64:e9:57:b4:12:c8:67:ea:a5:5f:21:68:e1:72:
9c:b2:dd:74:62:87:a1:aa:38:50:85:8f:8f:c6:90:
b9:ae:df:93:62:7c:dd:7c:e0:c7:9c:39:03:c3:43:
66:f3:c9:bb:c7:57:dc:f4:a2:14:6d:a1:d8:b7:7a:
eb:58:7e:7d:c7:0d:7f:46:f4:c3:ed:88:13:57:c8:
0a:b2:cf:5a:e6:1d:b7:29:61:f8:45:27:3c:88:f5:
11:8d:64:5c:17:53:b0:2e:fe:5b:26:d9:98:bc:40:
07:4a:4d:f8:2c:4a:1b:99:7f:71:1f:9a:c3:19:3b:
8d:75:63:8e:8c:24:99:a4:8d:19:3c:44:9f:0f:52:
6f:33:89:cf:ef:1d:26:41:1d:cc:cc:af:cc:e7:77:
52:9d:e3:4f:6e:80:e4:bc:86:6f:33:12:0c:93:d2:
9f:05:f3:9e:2d:19:6b:15:05:a7:2f:45:41:db:fb:
8d:dd:4f:af:10:91:0b:37:ee:eb:88:1a:7d:a6:7b:
b6:ba:96:f2:dc:70:0a:9f:df:7b:2e:e4:52:c1:88:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:AB:5D:D7:69:6E:F0:C6:E3:E9:AD:FD:DF:1B:1D:B5:72:6A:38
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:19:5e:2a:cb:a9:5b:dd:07:33:e5:5b:83:4d:6b:5e:b5:72:
88:fe:d5:5e:a2:75:68:00:38:db:0a:4d:88:b7:b2:77:5d:95:
9d:bb:d7:43:65:66:6d:ef:a7:c5:44:a6:a7:10:d4:32:01:f6:
fe:1d:63:48:5c:4f:40:20:cf:7c:75:e9:8d:45:58:fc:6a:17:
31:01:10:92:13:8f:7d:73:df:fc:55:1d:6d:8d:bc:67:53:51:
f3:e5:cc:41:2e:88:11:0e:ec:fc:ea:c5:2c:7d:a9:2b:3e:c0:
4e:4b:c1:9c:6e:76:53:99:cc:7f:56:e0:07:2c:06:27:05:84:
40:69:70:46:9b:3e:93:39:51:65:52:54:c6:d8:21:b4:80:97:
c9:29:67:3d:0c:a4:2d:1d:dd:13:ed:f2:bc:e5:a1:52:06:86:
e1:dc:50:fb:a3:e7:fd:ce:b2:1b:a6:56:1d:81:71:33:28:6f:
5a:79:05:17:a3:a5:c7:40:38:97:a6:35:b1:e6:77:c7:13:6d:
b9:78:16:16:f2:69:70:28:d4:34:ce:8b:87:f7:6a:65:4c:fc:
cf:96:70:6e:de:fc:ea:71:46:59:c7:19:a4:60:1a:f9:be:e3:
0f:31:26:5b:85:a4:77:67:98:48:e8:cd:7f:59:ee:39:a7:af:
18:49:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:44 2025 by rpki-client