Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier: /9pCopF3I6+5Ctd/06XIDgYHc0f5gdKg3ma6d0eQ3z0=
Subject key identifier: 3F:5A:2F:04:3C:9C:DB:9C:1A:B0:D8:35:FA:CB:8C:77:D4:82:C6:2D
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 0194BCA9EA9F18EC10033B4AC66E33138A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number: 0340
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: N2y6-GMHKdnhwHw2qI2S6D9db-A.roa (hash: 3FLdtIoRp74dNi1D23oUnkHCD3n8shdafvj6sD2pzxY=)
2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: 0zl5SHVI3VpIASNlU1N+XI7LNgUM3jMUuevV8HwOALc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ea:9f:18:ec:10:03:3b:4a:c6:6e:33:13:8a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=3f5a2f043c9cdb9c1ab0d835facb8c77d482c62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:83:ac:cb:8b:1e:ac:3c:a5:c8:0d:49:53:
c0:a8:9f:cf:08:6b:2c:ed:30:41:4c:42:d5:47:9a:
1e:46:f9:32:da:ed:ef:fc:be:d3:21:f1:da:e4:d0:
53:d0:51:9e:ed:85:7c:06:9e:28:3d:37:00:ad:77:
b6:84:8c:bb:85:4f:35:4d:58:cd:40:12:30:ba:de:
ae:6e:84:e6:56:f8:b3:8b:90:41:fa:9b:dd:13:80:
2c:0c:ee:24:e2:28:f1:a3:62:f4:fd:f8:57:51:f2:
0a:cf:97:41:b8:3c:18:7f:c9:42:b3:c9:87:ce:4e:
25:92:18:f7:3d:01:22:dd:b4:5e:f4:45:cf:07:54:
db:9e:8f:27:e0:04:8d:c8:f4:c5:2b:69:2a:5a:84:
4d:1c:a9:f1:2f:08:83:e1:02:c6:22:eb:2e:eb:b0:
7a:c7:b8:23:7b:ee:a1:3a:fb:a4:1d:17:2b:89:66:
48:24:4a:82:56:85:28:18:45:07:26:c0:34:22:fd:
e0:47:a8:29:98:5f:bb:a8:22:54:76:7c:12:b2:0c:
0e:e8:bd:e1:46:2d:be:bf:2d:bc:4a:2d:b0:6a:5a:
4c:23:1f:5e:86:4b:63:72:c7:28:cc:67:47:61:0a:
5e:bc:b1:e0:d0:57:6d:22:04:fa:2f:fb:7e:00:75:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5A:2F:04:3C:9C:DB:9C:1A:B0:D8:35:FA:CB:8C:77:D4:82:C6:2D
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bc:4d:c4:43:42:42:e9:7d:05:ee:7c:ff:f8:70:45:3b:5f:
a7:be:c2:83:70:8e:da:cf:a6:1c:7c:89:a8:da:de:ff:00:db:
57:70:ec:a5:21:02:5a:51:60:4e:3d:e1:a9:82:09:16:a4:ce:
ac:f8:d3:81:0b:88:65:e3:80:3b:49:6e:38:27:5a:cc:45:6e:
f3:e7:af:af:5d:7d:99:d4:13:b6:4e:18:b6:69:fe:3a:c9:03:
37:44:5d:9c:14:f9:3d:9d:64:3f:d9:5b:71:4b:61:a2:c3:0d:
41:56:1e:f0:99:54:06:92:f1:f9:d4:66:a5:44:81:f1:e1:90:
c2:1b:51:8b:80:53:85:2f:8a:34:84:5c:ab:d5:a1:7e:a6:de:
10:f1:6a:39:17:2c:98:15:1e:dc:51:25:12:08:f1:87:de:bf:
77:91:16:5e:18:28:9c:f7:9f:92:4c:6f:b8:9e:fb:0d:ab:6e:
70:55:60:e7:3a:81:15:95:1d:6e:0c:0d:8a:09:bc:eb:15:f3:
56:4f:52:8e:1f:fa:c3:6d:2a:29:6e:fc:09:2d:ba:5e:6d:30:
c0:b9:b7:69:50:d2:cc:be:cd:16:18:c0:2b:e0:c0:d5:39:08:
58:a7:35:f8:03:30:cd:95:a4:31:71:ed:da:52:e6:83:a3:65:
87:42:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:37 2025 by rpki-client