Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: nnzWV+ZFgfF6PRQBLnBEaW6m7alxMS5tLtAhMFo9iJo=
Subject key identifier: 7F:56:22:24:C3:FD:16:31:82:31:67:FB:B5:0B:DF:D7:16:53:81:8D
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 0195E07D6E0ACB32724A7694C1BEFCDDBED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 047A
Signing time: Sat 29 Mar 2025 06:01:11 +0000
Manifest this update: Sat 29 Mar 2025 06:01:11 +0000
Manifest next update: Sun 30 Mar 2025 06:01:11 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: AjyyCqBz4E7bpAPSeVy520I6Wj8AxVdeH+yx4H2b2zE=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:6e:0a:cb:32:72:4a:76:94:c1:be:fc:dd:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Mar 29 06:01:11 2025 GMT
Not After : Mar 30 06:01:11 2025 GMT
Subject: CN=7f562224c3fd1631823167fbb50bdfd71653818d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:39:72:7c:43:87:3e:9c:d4:93:6d:c5:c2:
7c:f2:f6:ae:25:26:0d:aa:c8:39:e9:b5:63:c0:ea:
68:78:de:dc:a8:64:86:98:fb:de:52:f6:2b:47:07:
25:95:d9:5e:98:5a:ed:be:fe:21:27:59:81:89:47:
ff:a6:d9:fc:51:43:df:a5:82:10:32:e4:7c:0b:70:
fb:8e:29:81:f2:b4:28:77:15:26:c2:3e:c3:b9:92:
b4:d8:7e:26:89:2b:3e:2f:ed:96:77:a9:49:05:8a:
1d:05:fa:0d:b3:85:e3:d4:f3:ac:59:07:34:53:fb:
78:43:6e:58:f6:4d:40:90:47:57:11:87:d5:ce:88:
a2:26:b2:78:30:5a:42:6e:22:d0:0b:c5:54:f1:5b:
25:4d:ec:e8:f5:5b:72:d1:64:4e:48:db:8d:32:61:
8e:6e:ff:31:e8:0c:89:45:92:a6:f1:fd:58:4b:4b:
a0:75:c7:2f:0e:1b:76:a8:cb:85:2e:f5:ef:f2:da:
89:c2:fa:76:10:94:ec:e4:51:51:4c:23:bf:49:aa:
bb:ca:9b:94:81:d3:d1:fa:b1:20:d3:53:f6:ed:2a:
80:6e:2a:1b:ec:c0:02:7f:4b:45:78:47:89:55:a2:
c4:f0:07:78:c9:24:a6:86:a3:9f:8e:24:74:47:d8:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:56:22:24:C3:FD:16:31:82:31:67:FB:B5:0B:DF:D7:16:53:81:8D
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5a:7b:72:f8:7f:6d:8e:66:54:ec:f0:ec:5f:d9:05:e8:da:
ca:70:29:86:c0:f5:41:bc:d6:14:d1:dc:a3:64:47:f4:82:ad:
a0:ea:fe:05:d1:50:da:e0:4e:f8:1d:2d:40:1e:ae:f6:04:fb:
44:13:70:fa:12:13:c1:b6:63:9e:d8:2b:b5:30:50:06:4b:e4:
1f:a7:97:4d:e6:b8:e5:55:e5:72:4a:fb:0f:dd:55:82:dc:e1:
54:fa:57:32:0d:19:44:5e:ca:96:d7:09:c2:18:4f:7f:d7:7d:
0d:dc:43:b5:17:60:e7:70:79:cc:a7:2e:9f:0a:6e:1f:91:d4:
e4:54:ec:dd:44:2c:5c:dc:26:83:fa:84:4c:39:70:d4:0b:9b:
9c:c7:e5:ba:ad:9c:ee:96:95:d9:6f:3e:a0:8f:a8:16:3b:33:
5c:d0:ea:f5:68:cc:ac:4d:81:53:20:fa:8a:54:57:b4:43:d4:
3b:f2:b6:c3:18:0e:ec:f8:56:18:d3:f0:93:fd:82:1a:22:e1:
c4:88:12:f6:56:8d:30:88:76:f4:0a:d4:68:7c:03:6d:dd:55:
60:80:ef:96:ef:e0:47:86:43:2d:4c:88:4d:63:58:6a:d6:74:
4d:65:6c:fa:a9:ab:f8:de:d2:61:6a:56:9e:24:b9:46:1e:61:
73:d9:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:12 2025 by rpki-client