Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: OXLWItH+6XzfhNtpCB0hUOA5250ClT+qsJD8eZ6Zz4U=
Subject key identifier: ED:51:44:25:AF:C2:20:6E:0D:EF:F0:22:65:A4:48:FA:55:02:00:5E
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 0194BBCDB5A192E7E2A212FFA35015728013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: 7MtM04j_v2k1Wph2OgnR4TG2Sv8.roa (hash: 4itzuX/fQ15qNQ7YFYgNHc2z9oC3AqKBZmDxx9ZMouE=)
2: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: 12r1ndfJXFuMxLJKTS5FRXZVM5PzMfFEO0G9sDuSasM=)
3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b5:a1:92:e7:e2:a2:12:ff:a3:50:15:72:80:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=ed514425afc2206e0deff02265a448fa5502005e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:68:2f:41:0f:e6:9a:96:18:9e:4b:22:51:
0f:83:c6:0f:04:9f:5d:7d:1e:b9:70:1c:44:2b:a2:
35:9a:7d:d3:64:56:b0:a3:97:f3:dc:27:3d:7d:11:
c1:70:ef:7b:2d:77:37:ed:c6:8b:99:54:69:b6:ab:
e8:fc:e7:fc:0b:db:0c:95:56:91:b6:32:e2:83:7d:
cd:df:74:b9:cd:c0:44:b4:1e:2c:99:14:39:de:04:
f8:cf:62:5f:e6:ae:84:06:fa:ad:4c:8d:46:e1:7c:
38:30:29:d5:24:20:e5:ad:09:a9:48:54:46:2e:15:
47:91:4f:25:11:1c:60:21:14:ce:c1:1c:b6:2c:14:
f9:b8:1a:17:1c:68:b3:14:03:7d:78:22:7e:3d:99:
ff:ba:7a:19:f1:65:9a:b1:c8:e4:51:33:3c:82:75:
20:b7:9c:2d:a8:37:ef:ee:c6:8c:bc:8a:0b:c9:ca:
ee:5e:87:91:a5:7c:ca:39:67:69:2e:60:c6:bf:fc:
39:a3:b3:f7:4f:d1:61:d9:9c:c4:2f:4a:f6:a7:d7:
28:c0:b5:99:d4:b0:1c:8c:42:7b:70:c2:91:ae:b0:
6c:27:85:9e:b5:cd:f9:65:4d:68:e6:37:19:ec:4d:
9a:89:bb:18:11:81:5c:0b:38:fd:9f:f4:43:eb:73:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:51:44:25:AF:C2:20:6E:0D:EF:F0:22:65:A4:48:FA:55:02:00:5E
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:65:8c:77:a3:da:42:2a:c4:28:40:28:85:99:8e:6a:6c:b9:
56:d9:ea:fb:ec:be:7b:e3:04:63:d9:eb:c9:dc:cb:fa:2c:7a:
05:85:9d:7d:e5:69:c7:ea:b1:51:ab:58:80:77:91:f4:8c:ff:
eb:0f:6c:a7:b2:39:96:ee:fd:a3:f4:7c:20:64:72:a6:4f:6c:
79:a1:55:a6:a5:0a:54:4a:dd:f6:5a:c2:35:f3:f0:d3:28:c3:
9f:41:88:94:71:20:a7:b3:96:7b:70:c1:79:ce:1a:d4:0f:2a:
4b:46:d9:e6:c0:f8:92:a9:50:1e:11:8d:4b:0b:4d:1e:ae:45:
55:2f:9d:14:43:f0:60:90:1e:cb:1a:78:d6:82:a2:d8:f5:da:
f4:ba:9b:d2:ac:2e:b4:e6:5c:74:29:46:6c:b4:a1:1c:1a:be:
1e:66:72:28:b3:62:66:18:be:ad:99:5f:48:ad:c3:e8:e3:12:
4e:86:7e:6d:ea:5a:4e:f5:3c:5d:d7:81:1a:78:80:7a:b1:07:
00:93:36:fe:0f:98:9d:60:96:de:88:29:d2:64:31:73:d8:db:
08:8d:28:a7:58:40:40:83:ba:bf:8d:40:ba:59:2c:28:d5:bc:
f7:61:d2:27:7e:7f:aa:bb:f4:3b:b2:95:d0:7c:63:3a:d3:17:
ef:9b:6b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:45 2025 by rpki-client