Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File: SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier: 7LJmby6fgOE6x3WvP5I9PEvqr/VzwTKT31d3Hnd5TOU=
Subject key identifier: 8C:5C:84:08:F5:AE:47:73:D3:D4:E3:94:9D:DF:A0:E4:BA:7C:67:2C
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 0194BC731141A5685BA8B30AE4088C36CFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: M6pYVSPeRii26Fe6-xA2oF6TOhY.roa (hash: ALWsaRUrnNv1Osi/17oum/JvXg9TackTfLVpB/IG6ok=)
2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: hBmznGNjmy0gcLPhkZvNYviilgz3u2Xi39sh0A8/VJY=)
3: o_-CPWekkGbizNj3OifTY4NJDPc.roa (hash: uwNEErvUsdFhNjQ3+JpAmIUn/dDzO0Gs7xJ0LsO1aD4=)
4: xR8JRniMXIcnxz5B1H7wwKMwL8E.roa (hash: U8VTiajHorcJU61emonuHN7kXOWFA3+lZIhrr1YC8IY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:11:41:a5:68:5b:a8:b3:0a:e4:08:8c:36:cf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=8c5c8408f5ae4773d3d4e3949ddfa0e4ba7c672c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:48:e9:4c:b7:17:3a:18:38:fd:e5:c4:11:
25:b3:7e:5c:63:85:4c:eb:35:a9:ec:ec:c7:4d:62:
24:9f:28:4e:73:06:21:2f:2e:62:60:74:91:f7:21:
94:38:b3:55:9b:d6:9e:d3:ef:f6:d4:dc:45:05:05:
7c:20:1b:a5:30:78:25:fb:a8:46:da:ae:86:7a:64:
8a:60:c2:71:6a:9c:ef:ea:3a:9a:f5:6a:13:d7:cc:
64:c0:fb:b4:0c:78:60:26:cb:69:b7:cf:47:a9:28:
fb:fd:ba:ef:1a:83:1d:5f:1e:6c:c9:cf:b0:a8:d3:
bf:fe:2d:ee:47:30:19:54:30:35:67:bd:81:a3:88:
d3:09:9d:30:14:bd:5c:86:8c:c4:c7:9d:f5:f1:8e:
43:47:b8:f3:0f:2c:a8:47:6d:b3:5e:be:e4:18:d2:
aa:b6:46:b5:38:81:0d:9a:e3:78:1d:eb:a8:2e:4b:
45:6b:cd:ac:c0:6b:57:bf:5b:0d:0b:c2:a3:9f:11:
8f:1d:97:10:26:17:41:97:79:d7:6f:a8:87:1e:47:
e7:97:fb:b7:cb:00:4c:49:ed:2c:a1:7d:e7:75:8b:
86:21:27:1d:03:98:75:a1:1a:ea:6b:7c:03:29:a1:
e4:10:30:26:7e:5c:43:92:33:a8:28:2a:1f:4d:a2:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:84:08:F5:AE:47:73:D3:D4:E3:94:9D:DF:A0:E4:BA:7C:67:2C
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:06:bb:58:9d:7a:cf:01:e4:66:44:22:18:a3:81:79:29:87:
9e:b4:62:58:b5:69:01:25:05:31:0c:3f:b6:75:6e:76:a0:cb:
d6:c4:64:72:45:24:eb:5a:dc:96:66:ab:72:22:53:6a:d0:e2:
ee:c6:42:46:3c:aa:fa:6a:31:e9:3a:37:06:f6:b4:8a:e6:60:
1d:b9:52:da:89:16:27:2c:a8:46:ef:c7:24:07:66:69:5d:a5:
3b:c3:5e:1a:d4:28:77:ac:2f:5e:d2:47:a2:78:23:5d:8d:d9:
7c:e6:f2:e1:49:af:be:70:21:1d:c6:78:06:62:f4:4a:2c:6a:
94:57:68:68:ff:57:e3:5a:d5:1a:12:bf:6c:8f:28:3e:7a:03:
bb:86:9c:65:89:aa:67:45:b2:55:a9:74:72:90:87:1c:9c:05:
8d:ed:5f:9a:8e:1b:bb:3f:61:bc:fb:e2:12:75:19:56:18:55:
1d:dd:0d:d0:ce:5a:84:7a:01:6c:d1:58:96:78:f9:41:25:62:
b8:98:95:f2:af:78:da:9c:6d:c7:d6:27:e1:d1:d4:f9:0b:e9:
39:7b:1f:64:32:7f:24:64:fa:e3:13:51:c5:b6:b9:fb:51:76:
4a:1a:65:ed:5c:68:ef:b4:88:60:cc:d1:89:3b:a1:82:33:fe:
f2:67:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:57 2025 by rpki-client