Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier: AOYiyBYqLIXyG64mETthRi7uoaaz7r9Yagki4zmJGZw=
Subject key identifier: 48:89:5A:2D:4C:FF:3B:56:DD:4E:B9:5F:E1:82:6E:D2:21:6A:24:C5
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 0194BC72EA5A59D2549EB2602D5717195A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: de5zWLXqClff+pVVp8MVFwgyOyGE6AtvitAg2DXR2FI=)
5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ea:5a:59:d2:54:9e:b2:60:2d:57:17:19:5a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=48895a2d4cff3b56dd4eb95fe1826ed2216a24c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f1:35:2d:3b:81:c7:5f:e3:85:d3:e9:e3:53:
76:6f:c1:f3:16:7e:dd:d0:c5:7d:5a:16:10:87:c5:
1c:07:11:7a:c4:70:fa:f9:00:25:9c:a0:43:10:8b:
b1:31:06:d1:b5:13:0f:e7:fb:42:37:bf:61:01:45:
b1:e9:09:e2:b0:a0:f2:d9:e2:72:52:c8:b7:65:4f:
6a:56:02:c7:a8:a7:bc:8f:f1:a9:92:3c:0d:02:68:
40:8d:a0:3d:83:48:c2:2f:a8:72:60:53:cd:e2:7f:
2b:b2:ed:b9:e4:86:05:07:b0:f9:13:f7:fe:ec:40:
1f:06:e6:40:8a:77:50:12:43:13:ea:d4:2f:5a:58:
21:c2:d0:c4:ad:13:44:9f:c5:a1:86:12:a7:bf:c6:
30:44:ba:d6:8c:5a:11:ff:33:8a:66:d1:2e:82:60:
2b:b9:73:ee:bb:9d:b3:74:d5:c0:8c:7d:65:3d:15:
b9:7a:23:05:52:ec:9b:91:ae:72:f9:a5:c6:07:72:
07:dc:f5:f7:b1:55:bb:38:69:b3:b8:a9:5e:8a:8a:
5e:e7:dd:0b:90:43:49:cb:27:f7:a3:56:e9:57:ce:
02:8f:1a:b1:87:34:01:cc:f3:5c:45:50:0e:0e:13:
0f:0f:1b:af:de:af:19:50:0c:1f:57:78:f6:ff:05:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:5A:2D:4C:FF:3B:56:DD:4E:B9:5F:E1:82:6E:D2:21:6A:24:C5
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:8d:c9:04:06:f2:4b:53:81:44:1a:a3:2a:9b:97:e1:3c:
75:65:1b:86:8e:74:d0:47:bd:e1:3c:c2:44:f8:d8:b1:a5:39:
1d:f0:92:fc:6e:d5:95:8d:7e:a8:4d:b5:54:ad:0e:b3:5b:2c:
86:27:a9:63:df:4b:69:93:00:15:7e:fd:af:0e:ec:f5:fa:cc:
28:0e:22:ac:41:d8:60:ac:77:46:cf:92:fc:e7:92:92:2a:5c:
e8:bc:c0:df:5a:4f:7c:6c:73:12:54:48:ea:c9:fb:4e:ed:0b:
4d:8a:3f:61:0d:2b:34:e9:65:4b:09:60:f0:39:ad:5a:ef:3d:
57:72:f2:6a:46:80:94:39:60:be:81:ba:ab:64:89:0a:90:f7:
3f:25:2d:0e:c2:72:19:59:24:5e:07:96:c0:4a:76:69:cc:72:
03:91:e3:8e:6a:d1:73:9f:5b:0c:ae:df:4b:51:da:a6:86:91:
5b:13:f8:63:b3:27:bc:48:1b:f0:70:fb:53:4a:75:8d:9f:0a:
0c:74:33:95:3d:75:dd:af:b7:1e:a9:5f:7c:6e:df:57:6c:c5:
d6:f3:44:de:af:df:c1:03:90:ab:86:0b:3e:6e:b4:40:48:f5:
f4:63:23:aa:b3:ae:ba:b9:34:64:8d:b3:3d:02:1b:98:cc:80:
77:75:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:31 2025 by rpki-client