Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
File: SujQiQnRha9B0KDDvl6ijDUvAiY.mft (raw, json)
Hash identifier: sZbeiNNi5eCPuekeUyu6qyZbFkX1QWN+mPk1m/Z2S9g=
Subject key identifier: 69:83:60:ED:DC:19:09:5F:8F:F9:D4:47:8F:92:01:B1:41:36:50:93
Authority key identifier: 4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
Certificate issuer: /CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Certificate serial: 0194BCA9E68D3891D6AF7BB45EAA3397B214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
Manifest number: 12A9
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: SujQiQnRha9B0KDDvl6ijDUvAiY.crl (hash: yfGM1EiZUkWELxeBN6zXy16LWUEkNzKhNNqpmoHfd0Q=)
2: nP21AC5prEFloL4b-rvpds4zVIk.roa (hash: uwmza4+iHSYo9L5fLNkaMpr9S0IJA2DNF48xVtFHmFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e6:8d:38:91:d6:af:7b:b4:5e:aa:33:97:b2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae8d08909d185af41d0a0c3be5ea28c352f0226
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=698360eddc19095f8ff9d4478f9201b141365093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:d5:3a:48:dd:4b:68:56:1c:08:24:2e:10:
b3:a7:c2:d1:13:6b:db:63:b6:fc:a6:cf:60:62:42:
83:a5:e3:57:13:6a:56:5d:d4:89:83:e3:83:6c:5f:
5a:7d:9b:61:05:20:9c:ed:8a:94:1c:03:05:2d:8c:
30:70:4e:f6:a0:07:c3:5e:84:3a:b1:09:cd:85:73:
3c:91:09:f0:1b:5f:e9:dc:f4:8b:49:01:65:0a:66:
31:68:92:73:44:db:f0:ea:65:bd:77:7f:93:ac:2f:
4f:9f:e2:bf:87:05:a1:e9:8b:39:84:54:53:5d:1b:
ff:31:8d:4b:b3:5f:d1:2e:2a:c3:d7:2e:b6:b6:e4:
ca:8c:87:21:d5:45:ca:52:1e:14:3e:62:e7:6c:8f:
da:28:80:65:2b:54:63:e5:f0:a0:a8:c0:c9:f1:45:
08:37:f1:3d:3b:da:d1:7a:d2:26:07:e2:bd:7b:15:
16:3c:30:c5:89:d1:99:94:f9:60:ae:20:24:28:6a:
ac:6f:d2:c6:72:97:9a:b5:45:48:ec:e7:75:14:9e:
b4:4f:ab:2c:30:f7:89:cc:85:5a:e7:9c:14:f8:c5:
51:d2:46:0c:45:bf:e2:62:9a:74:e4:41:a4:f6:e9:
b8:3a:18:7c:0a:95:e1:8b:c7:a8:99:96:38:70:61:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:60:ED:DC:19:09:5F:8F:F9:D4:47:8F:92:01:B1:41:36:50:93
X509v3 Authority Key Identifier:
keyid:4A:E8:D0:89:09:D1:85:AF:41:D0:A0:C3:BE:5E:A2:8C:35:2F:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SujQiQnRha9B0KDDvl6ijDUvAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/41446b-e49a-4ae7-81e5-9425856ec542/1/SujQiQnRha9B0KDDvl6ijDUvAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e8:5b:91:77:8e:25:0e:f2:b1:13:af:2f:40:9f:77:ba:f5:
1f:c3:3b:fa:f7:cd:23:9b:4e:db:ff:d7:67:03:6e:19:e3:4f:
2f:37:d2:80:57:34:f8:ec:aa:c7:41:32:de:d0:97:98:d6:82:
c4:44:86:fd:6a:3e:68:f3:34:6f:25:70:01:d3:f6:e8:d2:67:
bf:11:e2:ce:d2:4f:6a:36:f0:77:5b:58:be:31:41:22:2f:b2:
a1:7d:d0:45:f3:fd:9b:c2:8a:3d:28:6f:e2:cc:cb:e0:e8:ef:
7b:12:e2:2c:29:20:1d:51:d5:10:8c:17:3a:51:d8:dd:60:46:
65:e1:6c:81:d7:d8:b9:a1:84:8c:90:34:22:78:3f:0c:d5:aa:
05:71:24:f6:18:ff:15:16:ac:96:a8:2e:d0:95:15:f1:c9:a4:
24:8a:a9:3d:63:16:f6:44:2c:98:56:16:fc:55:b0:a2:2f:c8:
d6:e4:5e:51:65:b7:a6:ea:f8:c9:a5:9b:4b:ec:1e:e3:1a:49:
26:4b:79:db:d8:a6:3e:35:95:6b:5a:19:17:58:02:16:92:02:
3a:19:ff:f6:94:8e:35:2f:64:de:11:3a:f6:56:8a:68:59:5b:
c7:28:a7:2b:a9:3f:f1:62:7e:e4:a9:e7:7c:12:0d:c4:f6:cc:
5f:f5:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:26 2025 by rpki-client