Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: uR9885g5GUyE7/FNpc1rNuih28WNDcHKyQxwmzxLLD8=
Subject key identifier: A1:E0:94:89:1D:C3:32:B8:38:B6:D0:11:BB:75:99:D7:52:CB:FC:8F
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 0194BC3C8ADDFEB8A485111CEF10136BB6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: BOpj3VjKyesBPZWuVaoW1Xxyz8zhNfZ0yM0TaDAoxng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:dd:fe:b8:a4:85:11:1c:ef:10:13:6b:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=a1e094891dc332b838b6d011bb7599d752cbfc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:50:26:2c:1f:0f:74:7f:16:e9:fd:14:2b:
73:bb:74:40:9c:ba:59:ba:5e:44:f5:39:0e:56:d2:
fd:ee:ba:38:1c:1f:b5:ce:0a:11:7c:ec:73:e6:c2:
fa:62:d5:c2:56:2e:6b:a8:f1:0e:9d:b0:68:36:3d:
f0:f8:e0:3c:78:f5:f1:33:d9:22:bc:69:2b:b0:2b:
33:0a:5c:25:0e:72:f5:c4:ff:22:27:d7:52:7c:03:
d4:a2:61:b1:05:b8:74:0a:9f:18:0f:ed:0a:38:0f:
64:83:de:ed:79:8c:a3:0c:4f:af:61:e1:d2:8a:22:
71:8f:ac:37:fa:69:d5:8b:e4:b1:7e:fe:ec:00:5a:
e7:66:11:3d:1f:e5:05:75:bf:51:6f:d7:3b:ba:08:
b0:16:56:7a:8f:4b:ab:4c:9a:c4:9f:c3:a0:91:1e:
66:03:a5:2e:23:70:91:12:53:95:b0:34:89:88:3d:
05:21:c7:42:cb:e3:c6:d3:d1:01:fc:89:f5:39:80:
7f:37:d4:cc:da:88:72:94:e2:d7:c0:27:77:91:d4:
97:1d:85:4c:3d:47:25:c6:cf:f1:74:9e:1c:00:b0:
7d:d6:f9:cb:62:d6:e8:d6:2c:18:dc:9a:26:b0:9b:
28:30:17:ec:b4:65:23:43:96:83:54:e0:9f:7a:12:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E0:94:89:1D:C3:32:B8:38:B6:D0:11:BB:75:99:D7:52:CB:FC:8F
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:78:e0:05:93:5b:8d:9b:3c:99:da:12:fc:a3:61:2d:1f:5a:
a8:7d:02:65:b6:f7:ba:60:6e:06:7a:e1:91:98:f8:ad:83:ed:
31:d8:20:a5:5f:e4:09:81:2d:ed:16:70:10:f1:0f:06:cc:47:
ae:7d:1d:9b:d6:ef:db:7a:d8:19:31:95:4f:b3:8f:6a:95:ee:
18:0b:23:89:2b:47:28:1e:1b:91:f6:f2:b3:75:fb:63:08:14:
74:5e:7c:72:a4:b7:98:38:58:ee:a6:f1:62:b4:20:5a:3f:af:
ee:6e:62:eb:d7:87:88:df:01:ab:13:5b:01:8c:c3:3f:8b:c0:
c1:9c:e5:df:d3:4e:54:0e:c8:60:c4:52:7f:d9:e0:65:75:d6:
6c:91:9b:b1:e9:13:3a:98:ab:41:80:3a:d7:ee:e6:02:35:5e:
23:3b:03:4a:40:30:c3:2a:c8:32:6d:9d:4e:99:ca:dc:b7:14:
37:39:ca:3a:50:34:ed:53:60:a6:03:e6:6c:17:4f:f9:3d:f6:
66:3b:a8:ec:7e:9e:87:e2:e7:d3:73:77:84:d1:04:39:0a:c7:
27:86:cf:b8:81:73:85:e7:6e:2e:91:51:ab:68:88:9e:57:b4:
22:85:9f:ca:9b:33:50:02:28:61:0b:ac:10:b4:44:41:b0:cc:
0d:a3:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:19:50 2025 by rpki-client