Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier: kpk28oLoRh9S60ebHx6B7fNGG+KO/w9gWKcF7yGfQbM=
Subject key identifier: A9:7D:8E:77:5B:33:5B:AC:36:3F:DB:1E:FF:40:C0:92:BB:4D:CC:68
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 0195E04669CCAC5BBB572E01D28508B7D9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 05:01:05 +0000
Manifest this update: Sat 29 Mar 2025 05:01:05 +0000
Manifest next update: Sun 30 Mar 2025 05:01:05 +0000
Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: 7O5OiyOi+jl2iMl94n5ZxankfgYxVuj5mlXySxWI9TI=)
2: ZopMcF1edsiLC5IB_2wqcv1pm7I.roa (hash: 9APA6+f5SQgw2656vPCnPyRgFDtV/KHCNYnrSKLYasE=)
3: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (hash: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=)
4: l38wLN6Gw_epossfbuxRMwnX5sY.roa (hash: EA/nu4qnZGykrdQkMaUMT/48WUqEkVXJbnvFzsWJo70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:69:cc:ac:5b:bb:57:2e:01:d2:85:08:b7:d9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Mar 29 05:01:05 2025 GMT
Not After : Mar 30 05:01:05 2025 GMT
Subject: CN=a97d8e775b335bac363fdb1eff40c092bb4dcc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a3:8b:40:3d:82:85:62:2b:e5:f3:5b:38:bd:
42:c4:0c:7e:d9:72:dc:c9:ef:63:01:0f:9a:11:c1:
a3:e7:d2:c0:91:94:43:b6:cc:a5:26:2f:28:22:53:
2f:da:dd:d4:ed:2c:a7:64:4f:4a:8d:ea:83:7d:1b:
14:92:6d:d0:75:b3:0b:4a:2c:4d:63:28:4a:da:73:
b3:1e:f0:f5:2f:fd:49:92:d9:09:d0:a0:77:5f:36:
9c:67:d1:9a:7a:8a:86:94:a2:e8:7e:7a:39:6f:48:
95:e7:71:a4:13:aa:c7:01:38:0a:18:00:83:3c:0c:
9e:1b:f6:73:a3:ac:57:cc:3a:14:15:09:49:64:7b:
34:1b:d9:b1:d1:8c:f5:af:b4:16:9d:46:9d:80:75:
fc:87:2e:4e:23:fb:9d:ef:0f:c3:6c:54:e0:66:59:
f8:07:5a:68:bc:e6:44:a3:8b:c0:6d:40:11:47:95:
12:29:a8:bc:aa:80:7d:98:a2:25:b9:b3:74:fe:5c:
d0:04:09:53:fd:d0:d2:bf:f8:bd:c9:3a:b4:cf:92:
4e:cc:9f:86:36:7d:f9:81:39:28:bc:27:c0:9a:3b:
61:a9:19:54:f0:7c:84:e1:3f:19:cf:4c:08:93:4b:
0a:91:3b:09:1d:3c:49:3c:44:84:ee:fa:1a:11:14:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7D:8E:77:5B:33:5B:AC:36:3F:DB:1E:FF:40:C0:92:BB:4D:CC:68
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:14:c5:d9:53:4e:d3:12:ba:73:49:50:e0:a0:f7:b2:3e:63:
ca:a3:3e:28:f4:0e:d8:24:b4:7d:28:a1:8d:cc:6a:78:16:11:
38:77:f8:ae:b1:88:ed:35:89:62:b5:79:32:69:de:c2:cb:25:
29:80:16:36:c6:a5:f9:04:7e:d5:df:bd:fc:63:92:1e:63:77:
e2:cd:92:2c:68:26:a6:7d:2f:1d:9d:f3:67:ab:6f:ea:5e:2e:
e0:d3:05:9f:b7:de:e9:18:ee:05:fe:91:5b:44:fc:77:2c:18:
95:37:dd:6d:4b:71:99:3a:56:43:7c:59:c1:11:11:26:de:25:
da:93:bc:09:b3:da:5c:3b:99:81:f7:ef:24:7e:2c:55:78:0d:
c5:c9:0c:1e:c1:0d:1a:a9:b1:b0:4a:f1:75:a8:aa:88:e4:3f:
20:2e:4b:92:2a:f8:72:29:1a:81:f5:bc:cc:31:c1:a3:45:88:
6f:5e:fc:84:c3:f2:1d:8d:92:0b:39:4f:66:89:e4:57:8f:3f:
50:17:08:52:0b:c0:96:d4:7a:a5:e0:73:2a:a7:4b:5e:a1:0c:
d6:24:15:15:b3:24:67:d5:e4:34:9d:a7:87:4a:22:35:01:b6:
7d:ff:19:33:97:20:7a:d9:ef:b5:2a:70:ad:72:4a:bb:dc:b6:
5c:1c:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:25:40 2025 by rpki-client