Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft
File: 49ifjyq45URrTJ4SXKywJ0icp_s.mft (raw, json)
Hash identifier: 4We9KKaCmnipIUHB2s+DyuxpLKdEOnHWQN8E+tbEfMs=
Subject key identifier: 3D:2C:6F:BB:48:55:64:80:C3:3F:BE:2A:F2:DF:3E:14:DF:A0:A8:B7
Authority key identifier: E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB
Certificate issuer: /CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
Certificate serial: 01938BF74B264A3471525925201594C2944B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft
Manifest number: 07B9
Signing time: Tue 03 Dec 2024 10:00:59 +0000
Manifest this update: Tue 03 Dec 2024 10:00:59 +0000
Manifest next update: Wed 04 Dec 2024 10:00:59 +0000
Files and hashes: 1: 49ifjyq45URrTJ4SXKywJ0icp_s.crl (hash: TVFty3QcvyTZ9c1r8ydFaCOz00hJdLTzFJEbGF9fQDw=)
2: _T95pb3fSEz9wIRRNrJ3URoDyA0.roa (hash: b9DXDFtYGSmkdIdbmXbJbKOGmfHzZxo/lkWoAYmkF+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:f7:4b:26:4a:34:71:52:59:25:20:15:94:c2:94:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d89f8f2ab8e5446b4c9e125cacb027489ca7fb
Validity
Not Before: Dec 3 10:00:59 2024 GMT
Not After : Dec 4 10:00:59 2024 GMT
Subject: CN=3d2c6fbb48556480c33fbe2af2df3e14dfa0a8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:8c:3d:bd:ef:c1:38:2c:d1:10:ab:9b:e0:
68:df:b0:cb:45:72:4d:ff:7c:84:d0:52:38:13:68:
58:37:36:29:fb:0c:00:7f:a5:64:df:28:4b:a9:f7:
9c:56:d8:ae:0f:cc:43:ee:65:75:e0:4a:8b:ca:dc:
8e:b9:3d:1b:73:a6:61:5d:c9:9f:5b:16:52:bb:12:
18:c3:2e:8a:c9:9e:4f:a5:62:cf:a8:a4:de:88:b5:
58:7c:aa:c8:2b:15:fd:81:39:15:a9:c8:da:ff:c3:
6d:5e:21:39:7e:98:df:4f:99:36:0e:93:68:06:01:
1b:df:e5:19:be:75:94:a6:a4:b8:04:74:83:07:b9:
5d:10:4a:40:a0:b3:1f:1f:91:b9:c0:ae:77:96:93:
1b:9a:be:7b:ae:df:b2:9c:23:55:78:ec:4e:3b:72:
de:c6:b8:be:60:01:18:e8:d5:63:63:40:35:f5:e9:
9e:de:ac:dc:cb:2b:ec:fe:d5:48:1a:ac:e5:20:85:
f8:b3:75:61:96:9f:24:38:51:9b:1a:7c:7a:b3:24:
60:53:e9:6e:5e:d3:50:95:04:c9:a9:28:1f:05:36:
d3:c0:af:24:22:0d:cf:54:82:4d:5a:ac:d6:e7:a6:
b7:dd:3f:f3:fe:0d:bc:ea:56:dd:f2:35:03:31:78:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2C:6F:BB:48:55:64:80:C3:3F:BE:2A:F2:DF:3E:14:DF:A0:A8:B7
X509v3 Authority Key Identifier:
keyid:E3:D8:9F:8F:2A:B8:E5:44:6B:4C:9E:12:5C:AC:B0:27:48:9C:A7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49ifjyq45URrTJ4SXKywJ0icp_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/975c38-5998-4549-b16a-42f4202b4e52/1/49ifjyq45URrTJ4SXKywJ0icp_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:15:54:1a:a9:e5:ba:03:3e:0d:58:ef:6d:88:b4:0f:48:70:
58:8d:bb:ff:0d:bc:18:ce:24:2d:02:29:3f:ba:1f:23:72:f3:
d9:54:21:30:d1:aa:59:98:5b:80:55:91:d4:05:ce:77:91:d1:
a1:77:ea:79:c3:78:64:c8:63:27:f6:c0:9a:24:b0:77:c1:8b:
01:40:b1:b5:8a:22:01:f3:2a:8b:6d:d3:65:fa:ba:bc:68:21:
3d:5a:b8:c7:83:7a:d0:ea:db:f7:a8:aa:de:6c:04:14:fc:aa:
41:6f:74:1d:f2:2f:05:c6:60:9a:fa:88:08:fd:22:8d:c7:00:
23:b6:22:b3:d3:3e:b3:a3:e7:37:17:c0:cd:c3:da:50:08:69:
b0:29:0b:66:60:02:e8:1d:70:61:2e:fc:2c:0f:8a:af:89:28:
c4:91:fc:4f:f3:d8:4d:34:97:6e:77:6a:9e:e1:58:8f:17:ab:
70:e6:9c:0d:f3:c8:02:00:cf:78:f1:e9:71:4b:ab:ca:3f:be:
b1:66:37:ec:86:1c:3d:60:6d:b8:6f:e7:8b:02:97:92:1c:a3:
64:6f:d5:47:b9:18:b9:f7:5f:1c:d9:f5:49:b7:50:25:33:b8:
16:44:bc:20:04:8c:d7:4b:78:b3:93:47:b8:3f:77:84:02:52:
b8:bb:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:35:40 2025 by rpki-client