Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/Sjui0ze8hw0EOmi_FwqmcB4niA4.mft
File: Sjui0ze8hw0EOmi_FwqmcB4niA4.mft (raw, json)
Hash identifier: O3N+y4KnS5dEQCgGMKtqtLm/sGPPmbSY6c1i2b0jagE=
Subject key identifier: B9:1F:B8:68:78:FC:39:1B:8B:A0:13:84:EA:C0:99:A3:D2:31:B5:8B
Authority key identifier: 4A:3B:A2:D3:37:BC:87:0D:04:3A:68:BF:17:0A:A6:70:1E:27:88:0E
Certificate issuer: /CN=4a3ba2d337bc870d043a68bf170aa6701e27880e
Certificate serial: 01924074487D3A75CB84C48304C16088AC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjui0ze8hw0EOmi_FwqmcB4niA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/Sjui0ze8hw0EOmi_FwqmcB4niA4.mft
Manifest number: 02D3
Signing time: Mon 30 Sep 2024 01:03:35 +0000
Manifest this update: Mon 30 Sep 2024 01:03:35 +0000
Manifest next update: Tue 01 Oct 2024 01:03:35 +0000
Files and hashes: 1: 4or7LQbRm4dXUXkDoqjkVAdWTKo.roa (hash: xixbEi5im5DCmI947JDaOTSW6Rrv410ByH4DhtLy9q4=)
2: Sjui0ze8hw0EOmi_FwqmcB4niA4.crl (hash: nbSjOVHurY3Mtgyz8eWjp6v4Vnw0a0miigMuKjUwMaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:40:74:48:7d:3a:75:cb:84:c4:83:04:c1:60:88:ac:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3ba2d337bc870d043a68bf170aa6701e27880e
Validity
Not Before: Sep 30 01:03:35 2024 GMT
Not After : Oct 1 01:03:35 2024 GMT
Subject: CN=b91fb86878fc391b8ba01384eac099a3d231b58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:4b:d0:8e:00:1a:39:ae:a3:5c:2d:36:cc:
76:e5:4d:df:89:a4:c8:1b:77:36:37:38:03:d6:ae:
f8:61:0d:95:bc:1d:f1:88:ca:ec:d7:b4:8c:13:ec:
54:6a:00:c0:75:ec:eb:c0:9a:72:92:48:31:05:27:
b6:4e:09:0c:bc:b5:22:cc:f0:62:b5:f9:ed:0a:af:
a0:a3:3f:44:d7:de:9f:fd:6c:4d:1c:15:cb:44:a9:
03:aa:3a:c3:4b:5d:d2:b2:47:48:74:75:de:81:47:
fb:29:8b:83:a3:ed:30:68:9f:27:fd:5a:be:3f:1f:
f5:1a:31:a8:d0:d6:9c:fd:53:f9:80:f3:66:17:b2:
db:74:9c:a7:e6:ec:72:c6:42:2f:4f:1b:c0:89:d2:
2d:3c:90:bb:6a:d3:67:65:f9:66:d8:b5:65:b0:76:
df:5d:d0:43:99:78:82:0c:4b:1e:ef:cb:be:3a:97:
d7:9c:8f:a9:b7:f5:d9:c6:43:0f:a2:a1:d3:bc:58:
d4:bc:62:c1:8e:1a:ca:1c:12:cf:32:ec:ac:d6:8d:
8a:8a:40:8b:4d:71:6d:93:1f:d7:8b:8f:21:77:28:
eb:ae:92:85:43:2a:a4:2a:45:d5:73:6a:49:b7:a2:
14:29:6c:24:3f:7c:25:39:f3:c4:a2:b1:ee:79:c7:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:B8:68:78:FC:39:1B:8B:A0:13:84:EA:C0:99:A3:D2:31:B5:8B
X509v3 Authority Key Identifier:
keyid:4A:3B:A2:D3:37:BC:87:0D:04:3A:68:BF:17:0A:A6:70:1E:27:88:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjui0ze8hw0EOmi_FwqmcB4niA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/Sjui0ze8hw0EOmi_FwqmcB4niA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/Sjui0ze8hw0EOmi_FwqmcB4niA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b0:58:39:26:f6:8f:54:d8:24:85:cb:28:6f:04:e7:82:23:
81:44:07:dc:80:f5:48:72:65:31:2f:bf:57:af:d2:8b:03:42:
35:7f:0c:06:4f:cc:2f:4b:dc:3e:b7:d6:f1:28:a5:ec:42:74:
50:06:f1:af:42:e6:20:37:57:76:6f:3c:3e:21:fb:78:57:04:
68:a5:9c:0a:51:22:3f:fb:32:8d:b3:37:83:bf:f7:83:e4:3c:
dd:7d:14:af:b9:84:00:78:c6:1e:bb:66:a3:a7:d1:74:f8:0d:
10:30:f8:87:5d:a4:17:f9:2f:a2:ef:fe:0f:6b:46:f7:78:78:
15:b5:a2:b6:30:21:a2:1f:51:0e:17:92:82:91:ff:91:3a:44:
12:cd:14:6d:47:8e:ec:34:83:46:66:49:ce:29:6c:99:cd:ca:
8b:84:6a:38:01:f8:ec:57:eb:12:a1:07:a4:fa:6f:25:4d:bb:
b5:a9:15:a6:5d:9c:75:8b:91:ad:5d:a1:3b:1c:73:95:b6:19:
87:ff:7a:92:3a:54:c2:f3:d3:0d:69:50:d6:62:c5:f3:e1:9b:
18:42:a4:9c:9b:d6:91:01:27:a3:8d:03:e2:73:c3:d9:8a:8b:
f5:2d:96:1c:6c:95:69:09:bf:04:d9:ea:0c:f8:c2:92:a6:77:
95:a2:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:42 2025 by rpki-client