Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier: Q1ESMu+IJQH54b3HuapphWrVaeYDIz7NEETXbhAHIpw=
Subject key identifier: A5:CD:8C:41:A1:B4:DE:89:4F:0A:2E:04:47:11:23:23:0B:9B:3F:EC
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 0194BC04C60DDA76BA19E51E0299ACCE295B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number: 08E5
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: kOTzmWEDs9XRDfSebA++gLyhITRxyQum7/A3pdY+geQ=)
2: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (hash: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:0d:da:76:ba:19:e5:1e:02:99:ac:ce:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=a5cd8c41a1b4de894f0a2e04471123230b9b3fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:51:e9:9c:7f:b1:ad:6a:fc:0c:dc:74:9b:
c1:69:50:8d:3f:13:81:bc:17:ed:61:77:89:c3:c1:
0e:c9:f9:bf:95:27:58:80:d2:17:9f:39:cd:21:aa:
f6:a0:fe:33:40:fb:52:60:a4:60:7a:a2:88:ef:22:
5c:b2:7a:3d:5e:1c:bb:86:91:a7:48:7a:3b:a1:86:
a8:48:b9:14:a5:51:ac:3e:8d:f7:98:76:29:01:c0:
57:45:4e:fd:82:d6:a2:fa:9b:21:7a:4a:58:4d:cf:
87:ef:a3:7f:cd:3e:27:37:2c:90:47:f7:82:8e:18:
11:4f:d8:17:a1:f2:fc:a1:72:79:24:e8:6f:01:b4:
7a:8e:4d:a0:f0:cf:52:28:52:d3:25:27:92:e7:9a:
23:6f:ff:d2:42:be:ed:d4:d2:5b:d1:42:fa:8a:e5:
f1:99:d9:e1:5e:ce:f0:12:16:87:ac:d5:4d:1e:fa:
0f:63:39:18:77:2a:16:27:db:af:16:3f:eb:a6:25:
9e:7c:ad:a3:44:fd:8d:24:78:68:56:a4:82:c6:34:
d1:21:7a:69:e4:ce:f3:68:08:bb:31:ca:a9:71:b6:
81:63:ca:32:20:71:c3:be:73:b1:8d:95:cc:18:98:
62:bd:20:2d:2a:2a:d1:b5:2a:ba:76:8e:b5:1f:60:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:8C:41:A1:B4:DE:89:4F:0A:2E:04:47:11:23:23:0B:9B:3F:EC
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:a6:d4:e0:85:73:55:14:8f:4b:81:98:0a:f2:21:4d:56:
0e:b1:27:c3:31:d0:9f:29:76:42:83:8a:2d:06:5d:0e:56:49:
52:db:55:ae:30:6a:26:3a:06:2a:e3:a5:77:9f:58:56:e2:29:
22:ee:d5:17:8c:26:7d:a7:3e:37:b5:20:4b:8d:c3:fa:8c:66:
6b:b1:0a:0b:53:b1:6a:82:a2:b6:a6:bd:63:76:c6:15:7f:44:
d6:68:d5:0a:88:78:4d:2f:cd:5a:0b:8d:ec:67:03:3e:3b:55:
1b:32:1d:91:95:b0:0f:ee:d0:af:71:2f:20:e3:6a:60:2e:d1:
19:bb:d4:2b:ce:73:ab:fe:a8:6f:16:c4:79:2c:8a:33:b7:42:
5d:89:82:fe:2e:d0:1f:78:1d:f2:9c:b5:2c:3d:47:4b:af:09:
37:b7:a4:13:a2:4d:26:2a:38:26:91:67:4a:1a:cc:fb:bf:f9:
7c:b9:b1:ab:0c:7c:eb:9a:98:55:60:94:54:02:e7:55:e4:d1:
3c:55:bd:31:2d:59:30:42:e3:b0:5e:5c:39:5b:2c:cb:20:9a:
76:3f:3d:d2:95:13:fb:08:f7:d2:2c:90:c1:a5:23:6a:c7:29:
1d:21:f1:c6:7e:93:24:1b:f4:58:d1:bd:b4:44:0c:b7:65:7c:
b9:ed:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:45 2025 by rpki-client