Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: ujQ0oOZuSKzd+py3G3N7y/dQfI6PPJ6zIKXXD/HNV48=
Subject key identifier: 1D:6E:5E:06:99:4B:F4:32:6D:2F:28:2A:46:FB:A9:B1:C0:10:F8:A3
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 0194BCE0E07BC9FC67111F99A0036B589457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 08AA
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: hzPcsRqqqYDa7zbaW7hUr4cEPibpHD9i/ga+ReDe3bw=)
2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:7b:c9:fc:67:11:1f:99:a0:03:6b:58:94:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=1d6e5e06994bf4326d2f282a46fba9b1c010f8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:2c:57:a6:4f:b7:c2:3f:eb:26:d6:ad:08:
2b:38:66:1e:ea:c8:d3:2d:20:c8:74:ee:2c:ad:a1:
8f:9c:52:e6:79:bb:36:70:fd:93:c4:83:bd:8b:db:
0e:4e:86:3f:ae:be:09:ab:64:01:a0:ce:ca:b9:79:
a5:3f:33:ce:e2:76:29:57:e1:e3:37:9d:80:4d:1d:
b9:6d:14:5c:c4:ce:f6:09:00:ee:f2:2e:69:67:2b:
e7:ab:0b:d5:42:7a:87:6a:dc:9e:e0:5e:88:17:c8:
f0:72:8b:4e:26:12:dc:4a:0c:fc:81:ab:3c:a7:a8:
98:81:e3:ae:22:93:5a:85:8e:c7:00:c7:67:90:44:
75:77:ac:be:27:0b:2d:f2:29:2b:5c:7f:f9:2e:92:
cc:34:b4:60:cd:53:fb:06:ea:9b:5c:45:fd:79:14:
ea:aa:aa:64:1f:7b:33:e6:08:a6:65:0e:66:8e:18:
ca:3e:8d:bd:c5:72:fc:43:c7:e8:ad:6c:02:c1:49:
8b:49:b5:cf:0c:3a:cc:00:2f:26:35:0f:03:7e:bc:
7f:31:fd:d5:cb:c7:fd:01:68:ba:27:50:05:b9:e1:
1e:a9:ba:7d:b4:93:f1:3d:7c:21:f9:4b:b9:f3:4e:
7b:be:a3:a5:91:50:a1:1c:f5:80:7b:b2:79:98:9a:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6E:5E:06:99:4B:F4:32:6D:2F:28:2A:46:FB:A9:B1:C0:10:F8:A3
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:32:e5:79:94:de:29:45:56:7e:6d:46:10:5d:1f:2d:37:74:
90:70:52:41:d8:74:1e:f5:dc:65:e3:b3:6e:12:29:ec:4a:1e:
7b:12:da:f8:51:e3:07:06:60:c5:28:4d:51:97:42:11:f7:17:
9a:3b:f8:ca:12:79:1f:2d:96:fe:cb:77:f8:2f:6d:b3:0a:2c:
5e:11:63:9e:32:06:40:6b:ff:96:7c:f7:8d:34:b9:a3:31:fb:
3e:26:91:71:e7:29:7d:cd:d5:e9:0b:85:7a:c4:e3:a8:4b:dd:
e2:c8:ea:72:da:13:35:f9:90:7b:c1:72:5c:a0:45:01:4a:e2:
73:f0:42:8c:4c:05:9f:b8:19:82:f4:dd:eb:8a:0c:07:47:4d:
93:d8:39:4e:1b:f3:06:89:43:ab:65:21:58:a3:64:41:95:0a:
59:7f:ba:10:49:73:bd:15:8b:6f:0a:12:ac:7d:e8:2e:ab:6b:
09:21:6d:3d:ae:e4:56:10:e5:ca:23:78:0f:17:51:69:ee:43:
dd:6c:85:8c:52:47:a7:58:dc:97:79:d3:39:3a:18:7f:e7:41:
30:b1:9d:91:32:8d:0e:57:0f:c7:b2:70:c8:95:e4:28:48:58:
24:96:02:0c:80:77:6e:ad:53:ce:41:27:38:48:56:cc:97:6d:
98:e0:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:35 2025 by rpki-client