Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
File: S8K4kvLb729UtFNg_rD4QUpahQQ.mft (raw, json)
Hash identifier: 2uhiLDeWhRrmUcX3TnPnFY3lFELyMMw+JCZQ96weOWQ=
Subject key identifier: 55:06:13:03:F3:78:6C:7F:7F:14:38:78:64:10:E5:0F:5F:86:88:F3
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial: 0194BC3C431D144CBF5086F7F9C03A2A5D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: 8XxbJK1GWPrtjat_Lpe2HKly_9k.roa (hash: 1REGOqOGYIsLrmhSt5pZG4EmBpaR7Cf++uPRynahll8=)
2: S8K4kvLb729UtFNg_rD4QUpahQQ.crl (hash: Ei5qnlk5pQoiRoLRqyIcUxcrqAGpSKLgL0FuvfV/1bU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:43:1d:14:4c:bf:50:86:f7:f9:c0:3a:2a:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=55061303f3786c7f7f1438786410e50f5f8688f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:2d:16:92:32:75:5c:fb:23:de:cb:74:c3:
94:78:9c:66:94:4d:cb:76:3f:f6:a1:93:b0:c1:7a:
2a:f6:0f:ba:ac:9b:4f:59:c6:dc:3f:f8:36:08:48:
e3:fb:ca:b6:45:62:59:96:6c:d6:7f:b9:71:96:a5:
6d:17:c6:e3:97:87:a0:96:b7:23:9b:38:7d:c3:68:
ff:37:ae:fa:8c:1e:45:36:ec:7c:c4:1c:e5:6b:11:
16:81:70:1c:d9:61:17:31:a9:06:47:65:c5:bc:93:
eb:23:94:d9:7d:fa:59:03:74:98:a0:18:01:e1:58:
ef:aa:ba:ba:f2:99:b7:82:dd:25:b9:20:12:c9:be:
85:cc:ed:56:f8:23:ce:94:6c:de:b2:0c:5d:de:bf:
9f:c4:fa:f9:8e:81:3e:f7:1d:82:03:fd:8a:d1:8c:
aa:04:da:de:a8:8e:7c:7c:b0:79:77:1b:e3:ca:55:
4a:3d:58:13:c0:29:a6:95:fa:89:94:0b:03:fe:96:
5e:6d:19:c8:b8:f7:cc:1d:af:05:56:83:04:a8:a8:
b3:9f:03:b6:a0:76:61:d7:70:d9:49:e4:d3:d0:6a:
2a:68:74:6f:cc:db:17:c3:7f:46:2c:40:37:c4:51:
f1:4f:ce:83:47:3e:6c:28:13:9e:4b:8e:d3:f3:5f:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:13:03:F3:78:6C:7F:7F:14:38:78:64:10:E5:0F:5F:86:88:F3
X509v3 Authority Key Identifier:
keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:de:9f:5a:90:79:17:7e:5e:dc:18:64:ba:c4:0f:c1:77:
cc:a8:ad:50:13:87:92:51:cb:f3:84:10:48:fe:0c:81:4a:1f:
83:71:20:73:b5:4d:2e:59:e2:95:81:2c:2b:6e:95:34:ba:8a:
1a:5c:40:1b:54:1d:40:6e:54:ff:50:a2:50:7c:eb:69:86:be:
72:69:70:e3:a0:ea:33:a8:5a:c0:bf:04:1b:c6:f7:4e:93:4b:
f7:96:ab:72:16:30:80:89:db:0c:ad:2d:c5:c4:13:c3:67:1f:
c6:24:5e:6c:c1:b5:e9:13:f1:6e:a0:6b:c4:00:fc:7b:a7:28:
3d:e0:63:a2:8f:5e:9b:76:b1:58:19:ac:ec:e7:1d:12:cc:c5:
10:0e:06:a7:c0:ff:7c:2c:30:0e:d4:ed:f3:ee:8e:9a:cb:5a:
1d:55:c9:71:43:cd:b2:d6:7a:93:e5:cf:dc:c6:ad:62:41:7a:
12:93:a2:72:38:18:00:48:7a:09:74:c0:36:f8:5c:fd:af:b4:
e6:2b:42:47:50:6d:2a:6a:0b:51:eb:d3:02:ad:51:b4:d0:69:
0c:af:59:91:0c:11:01:d6:26:b7:e2:40:40:ca:6f:91:ba:33:
6d:b2:9a:f4:db:bd:ee:a6:c0:63:c5:82:80:2a:16:7a:a1:c8:
46:10:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:10 2025 by rpki-client