Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: jzxB7LdgulicsvVNzb7iCVrSAakgNmV+/8yZ+886Lqc=
Subject key identifier: C6:EF:3A:D1:FD:50:8E:D8:7B:97:A8:94:FC:F5:47:3E:9F:F5:65:95
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 0194BD7BA76D97A8E6221660DA2296915104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 143E
Signing time: Fri 31 Jan 2025 17:49:45 +0000
Manifest this update: Fri 31 Jan 2025 17:49:45 +0000
Manifest next update: Sat 01 Feb 2025 17:49:45 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: MGRHgyHDY72aznlW-t7cwjM_240.roa (hash: z3dVxtPbNQjRzhZVqHNxBYYRYl50/oceD5/vwHPqRbM=)
3: VJGjrq-Vj1UZ-ZdftelI9rBjXrY.roa (hash: M7iLMAib01DXWP3C9KltnfW9CPQAO54/pCYa1IL7qxE=)
4: sQw889xTylScA-T19G2RzpC44HA.crl (hash: 6Bmag4VzsDt06yHxFOSS5nkk1tjROU4nEa3Tdcsj7No=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:7b:a7:6d:97:a8:e6:22:16:60:da:22:96:91:51:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Jan 31 17:49:45 2025 GMT
Not After : Feb 1 17:49:45 2025 GMT
Subject: CN=c6ef3ad1fd508ed87b97a894fcf5473e9ff56595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:3e:64:96:26:42:eb:1a:cf:33:13:9f:da:
36:08:02:19:ae:c9:ef:ae:65:f4:03:f2:51:30:de:
97:43:1b:4c:ee:36:21:df:54:e4:b4:e2:81:ea:2c:
bc:81:8d:47:85:98:e7:b2:cc:c0:97:80:04:cf:8c:
15:7e:27:69:38:0e:6f:7b:c6:71:3f:cb:3e:08:81:
b2:e1:39:70:95:09:f4:ae:f7:6c:c0:26:bb:4e:c6:
f1:12:04:f7:ae:f6:b5:fa:3b:fc:45:66:2e:84:6d:
42:e2:0b:5f:43:78:43:17:67:01:66:c1:d4:19:93:
33:0d:50:1f:cb:ce:b7:b2:e4:02:7b:8f:fd:c1:66:
4a:ff:e4:d2:70:e7:7c:8e:84:9d:9f:cb:f0:33:f7:
cb:82:9b:c1:25:2d:31:60:a2:48:7b:c2:3b:0c:33:
85:37:03:ac:e5:8b:24:89:4a:ba:e6:a5:a1:4e:40:
27:f0:7b:a6:80:8f:1b:61:ca:a9:d7:34:ff:f0:82:
8a:a0:10:b1:cd:f9:d3:96:9a:39:03:36:7b:2b:e0:
0d:9a:57:c9:84:47:b6:0d:a5:63:60:12:b2:56:2b:
0e:4d:ec:de:eb:33:74:98:2e:39:00:e6:8f:b8:e8:
7e:40:e6:58:56:43:a1:e1:66:fb:f5:c9:a0:b9:b3:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EF:3A:D1:FD:50:8E:D8:7B:97:A8:94:FC:F5:47:3E:9F:F5:65:95
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:23:e4:14:97:c0:6a:72:30:12:1d:12:d7:bd:45:5a:ab:d9:
1d:70:fe:d4:9d:30:87:cb:44:1d:d0:28:20:b4:13:dd:d5:e7:
eb:5a:14:5e:df:f0:93:9f:2e:a7:32:12:f5:d5:40:01:d5:36:
3f:69:9c:f4:4b:09:94:9f:dc:a1:6d:5e:9f:74:38:d5:ce:bd:
26:d1:e3:72:15:e1:f0:99:e4:35:1b:65:b1:92:2d:9e:db:f9:
5f:d2:3c:05:52:8a:ca:4d:55:fb:ee:88:36:e3:84:c2:b2:61:
3c:d3:ad:41:d6:92:4f:93:5d:df:a5:b3:74:5f:90:fc:13:af:
25:cd:2d:36:75:3b:87:c2:61:43:95:c0:fc:95:c9:40:aa:dc:
e0:0c:e7:bc:64:34:ac:01:fe:3b:aa:c5:3b:ae:c4:78:a6:f2:
9f:82:0e:aa:6e:ff:9e:be:a2:b2:72:61:6f:63:90:c7:12:13:
fa:d8:be:c6:9a:b4:92:0f:35:05:14:92:09:dc:43:49:92:b1:
2d:22:fe:ac:b5:75:3a:bf:15:22:4a:4c:34:59:94:42:9e:a3:
d2:0f:0b:0e:c8:35:82:70:fd:b9:f2:be:c3:35:32:30:86:81:
a5:37:bd:7b:50:20:ba:92:83:82:19:b7:85:de:20:99:9b:99:
2e:2c:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:30 2025 by rpki-client