Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/SAlq0zvrPpUErVGk55A099GEdjM.mft
File: SAlq0zvrPpUErVGk55A099GEdjM.mft (raw, json)
Hash identifier: eCNpmaNQQQPaEnjPcFyrWGyWgYmdhFGy1DEa69cRC6M=
Subject key identifier: A9:C2:58:7D:63:59:A7:27:1E:0E:23:74:88:CF:67:54:62:E0:C5:E9
Authority key identifier: 48:09:6A:D3:3B:EB:3E:95:04:AD:51:A4:E7:90:34:F7:D1:84:76:33
Certificate issuer: /CN=48096ad33beb3e9504ad51a4e79034f7d1847633
Certificate serial: 0193F107A7B2F04C141842394B336087AC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAlq0zvrPpUErVGk55A099GEdjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/SAlq0zvrPpUErVGk55A099GEdjM.mft
Manifest number: 0FA9
Signing time: Mon 23 Dec 2024 01:00:30 +0000
Manifest this update: Mon 23 Dec 2024 01:00:30 +0000
Manifest next update: Tue 24 Dec 2024 01:00:30 +0000
Files and hashes: 1: SAlq0zvrPpUErVGk55A099GEdjM.crl (hash: 2rkNW0aYhL2YJJZBYTTRprXcrAhpbSiMtt+e5bY20Vs=)
2: WJbeEGnHVwzoh27CnV-Llcvad9A.roa (hash: GuNYyTD79nY/6no1a2xjBXpewSjcUAKa0zBYf0Rdnhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:07:a7:b2:f0:4c:14:18:42:39:4b:33:60:87:ac:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48096ad33beb3e9504ad51a4e79034f7d1847633
Validity
Not Before: Dec 23 01:00:30 2024 GMT
Not After : Dec 24 01:00:30 2024 GMT
Subject: CN=a9c2587d6359a7271e0e237488cf675462e0c5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:60:78:59:81:3e:82:d3:3b:73:ac:d3:1d:
d5:58:9d:db:2c:57:ae:d5:50:4b:b4:9a:86:88:77:
ff:9f:01:5a:70:35:7b:b0:7d:8d:25:54:92:a0:83:
e0:42:53:fc:77:41:4c:e8:5e:2e:f7:7b:e1:5a:4f:
15:7d:1c:e0:95:b3:30:e2:b8:65:7c:f3:62:18:ee:
41:4e:b6:95:a6:78:67:dd:51:12:4d:cb:7c:e1:14:
e4:7d:65:7f:7f:74:12:20:11:58:98:c5:7b:08:07:
9a:91:58:b0:a1:05:91:42:52:4f:51:70:0e:36:ff:
d4:e2:64:79:22:5b:35:1a:36:bb:cd:1b:12:a0:7a:
25:b6:e5:18:d9:bf:be:3e:43:73:b1:b5:9d:db:76:
4b:90:45:a1:d5:e9:23:a0:0d:6b:6c:2d:6a:71:f0:
bf:4a:a4:b1:54:a6:5f:fe:30:1f:1d:da:84:51:99:
73:eb:a7:0a:f0:d1:7d:a8:ce:f0:d2:d2:13:76:95:
34:92:0c:82:7d:fc:ad:51:ff:fe:bb:35:20:f6:44:
12:1a:35:b2:e6:f3:ce:0b:16:1d:55:c1:9e:f5:29:
eb:6a:31:e9:48:aa:1f:f9:3a:f6:90:09:ae:7d:36:
db:48:c7:98:57:bd:71:ea:f7:6f:f4:6a:da:5d:f9:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:58:7D:63:59:A7:27:1E:0E:23:74:88:CF:67:54:62:E0:C5:E9
X509v3 Authority Key Identifier:
keyid:48:09:6A:D3:3B:EB:3E:95:04:AD:51:A4:E7:90:34:F7:D1:84:76:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAlq0zvrPpUErVGk55A099GEdjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/SAlq0zvrPpUErVGk55A099GEdjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c143d-e2a3-4314-9a51-a0b9751efa47/1/SAlq0zvrPpUErVGk55A099GEdjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:39:ec:da:35:07:a2:bf:04:4e:46:29:93:13:a1:f6:c4:c5:
92:45:e8:dc:d7:8b:11:67:ba:9b:19:6b:f2:ba:51:51:e3:f9:
a6:79:22:e3:65:a3:0d:c2:9e:ec:99:c0:20:30:bb:66:8f:f3:
6d:26:74:d1:d1:4d:6f:26:ab:27:62:b9:4c:ac:87:df:b4:69:
e6:0c:7b:eb:88:5b:df:70:fe:ee:7c:47:49:8c:23:ea:7c:c6:
db:b3:c6:b3:8e:df:85:41:11:a5:e8:4e:bf:f1:53:12:24:dd:
82:ec:ff:57:1d:72:47:d4:0c:3c:d0:a8:79:b3:14:20:77:0a:
dc:90:fb:63:2d:05:76:9d:21:27:4f:f2:ec:3a:7e:4c:f6:5f:
ac:01:49:a8:44:02:b8:9c:8f:ad:10:cb:c7:d9:4c:4d:bf:2e:
08:22:7b:a4:57:21:38:79:7c:88:c2:b7:f6:9f:5e:d0:c7:6d:
ce:70:91:32:75:a5:1d:e2:72:be:0c:77:17:cf:c5:9e:4f:21:
f1:38:27:04:7a:3e:d9:1b:aa:cd:e7:f5:fb:b8:42:20:80:c7:
f8:98:47:50:a3:5a:dc:6c:40:81:82:d3:ee:ba:29:a5:49:3c:
e4:95:79:c7:a2:f5:ed:22:c4:ce:7b:48:0b:12:a2:53:b4:35:
1f:f7:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:31:06 2025 by rpki-client