Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: ikIkhUnSeGB8taaAIkrbstzF4nN/EV+MUh6SFuG+fOA=
Subject key identifier: 67:6F:77:E8:B0:15:93:0D:86:16:F4:99:F7:30:D3:D6:B0:EB:ED:B2
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 0194BCA98204B14B342841BB4241C32F6619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 13E2
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: ZaLXoiLC0Zl45lbw5f0RjNGjT5PKI3csXhmDhrTdAR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:82:04:b1:4b:34:28:41:bb:42:41:c3:2f:66:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=676f77e8b015930d8616f499f730d3d6b0ebedb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:c9:92:e4:f7:f5:0d:27:92:18:f4:27:b5:
2b:b0:d3:8b:0f:59:e8:62:1c:40:5a:85:42:91:e5:
22:e9:24:20:92:b7:9b:1f:db:bb:29:6c:d2:5a:01:
6d:3a:76:01:7d:3e:24:b4:4e:56:3b:bc:67:f0:22:
25:6c:49:75:2a:fa:f0:a8:d1:9b:1a:fe:3b:38:56:
c9:03:5b:9d:e8:56:70:a8:50:97:27:32:47:a5:4f:
65:34:dd:12:72:e4:f0:cf:0c:17:30:3c:84:62:f4:
37:5c:56:84:4c:b6:ff:2c:c4:15:f3:a8:f9:33:fc:
7f:77:9c:46:74:94:a1:c4:1f:7c:61:06:99:cd:83:
c0:57:22:29:c6:ac:ba:5c:e0:e9:8b:5d:5d:ef:dc:
26:be:76:70:ca:d8:0d:b4:5c:ef:0d:26:00:8b:c9:
13:6e:38:b9:b7:37:5b:54:42:59:5a:cc:69:69:0e:
e1:65:0a:52:cf:9b:11:45:32:7b:d8:a6:bb:1c:47:
0a:3a:73:2e:0f:1b:f7:eb:c0:64:25:04:3b:d9:1b:
1c:76:53:9a:20:99:57:b5:84:5d:3d:0b:67:86:a2:
e0:ae:af:89:b4:67:2b:da:61:98:bd:e4:14:60:90:
68:d5:d2:61:9c:16:0f:26:34:56:54:3e:22:9d:52:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6F:77:E8:B0:15:93:0D:86:16:F4:99:F7:30:D3:D6:B0:EB:ED:B2
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d8:23:88:52:50:a5:b6:98:95:ed:c6:62:40:c1:28:69:84:
9a:d7:0c:b9:75:27:99:d5:ef:ec:71:94:af:2d:58:ac:f1:03:
b0:ad:a4:eb:db:64:bf:60:49:5e:38:35:e0:c2:ce:07:2f:64:
14:1e:3b:24:e6:0c:7b:e2:d3:f8:76:5a:bf:7f:6c:10:96:f9:
a0:7f:4c:b5:43:5e:c1:9f:ff:81:97:2b:c5:41:d2:42:1e:b1:
8e:4f:14:9b:7c:3c:46:ca:08:f7:c1:53:f9:86:31:eb:90:17:
41:50:b3:40:6c:b3:dc:52:ef:58:b0:d4:fe:b9:59:82:20:5f:
81:bf:3a:5f:9a:67:7c:df:75:d7:6d:02:e2:ad:7a:e8:f8:49:
30:35:23:23:7e:a1:d9:99:e0:74:af:5c:09:83:48:d5:b0:17:
c5:ad:52:f7:4f:af:e0:ae:71:62:ff:87:00:0a:f4:8c:8d:b4:
b6:bf:32:a0:59:06:29:00:03:4e:75:fc:ab:77:cf:92:40:a1:
e6:ea:f3:70:ea:c0:53:09:be:84:4e:a4:e6:a0:64:5a:9e:ed:
cc:ad:11:93:b6:52:fa:8c:2b:73:fd:ea:65:e4:b8:0a:ee:51:
78:f6:cb:63:ae:aa:c0:d2:07:74:ea:b3:55:93:3c:e8:6f:d9:
34:6b:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:10 2025 by rpki-client