Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier: Q0/Ub+K0Hms9RlDyaBr0kdc+2/F8CotzGVoqckMFiGw=
Subject key identifier: 67:B8:E3:50:FB:91:6A:9D:87:EA:E5:6D:22:30:97:85:AB:7A:90:32
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial: 0194BBCEB14DAEF8A753B75C18B0D9A13038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number: 1392
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: UkWKB7R6wSYKBpsuiwwV880UfCk.roa (hash: pQhrMKgkx/zqcMJYjMVoXY14ZtF5KkWfSepRK8YAXxs=)
2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: YQS89ZG7JRehlYVymYAXnOIjmSOEsAuElOuhN4Ma+uU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b1:4d:ae:f8:a7:53:b7:5c:18:b0:d9:a1:30:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=67b8e350fb916a9d87eae56d22309785ab7a9032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:34:57:34:0a:74:08:27:79:97:5f:38:1f:
3c:89:f8:54:a7:b9:ee:49:d2:ac:50:91:6c:56:77:
12:9d:3a:6a:ec:e1:f5:1d:04:94:1d:b9:6d:ab:f4:
0a:d2:84:54:4a:c9:08:74:8f:42:14:bf:75:18:bb:
93:d9:04:1f:d4:70:84:13:f2:b4:e8:62:0f:5c:b2:
d4:ab:ab:f5:30:05:ff:f0:19:37:57:ef:e6:23:24:
1b:7d:d4:53:17:7b:fe:29:30:e3:ca:c9:4b:be:ae:
f9:ae:95:10:99:e9:04:0d:72:3f:e1:31:46:f3:d8:
f3:bb:51:e8:42:0a:39:8f:e4:e6:68:d1:6b:72:64:
9e:79:65:e9:71:fc:78:df:da:6e:b0:5f:3b:66:6d:
26:8a:9c:a4:29:ce:e4:66:4a:fe:a7:e9:5a:72:3d:
94:d9:0d:fe:e2:38:02:42:03:2a:89:c5:b7:4c:16:
e4:cc:19:01:bb:ce:a6:51:fa:d1:e4:13:41:83:6b:
ff:30:6e:76:bb:30:b8:69:4f:ef:87:ac:1c:7a:14:
e8:24:ef:f9:83:89:65:3d:47:f9:fc:29:34:e0:21:
39:48:38:e6:30:a8:b4:7c:c2:b0:ef:4e:56:e5:bb:
54:39:bb:86:4a:3e:55:9a:1c:ad:f3:06:46:0d:d0:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B8:E3:50:FB:91:6A:9D:87:EA:E5:6D:22:30:97:85:AB:7A:90:32
X509v3 Authority Key Identifier:
keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ca:30:cc:ba:46:ff:4c:ba:72:84:68:92:97:3b:16:7b:54:
80:7e:e7:9e:3c:db:a2:4c:c5:8f:10:81:64:d8:14:e8:1f:be:
66:3e:2d:4a:f8:00:91:8b:d5:dd:ba:3c:61:c8:98:7e:a5:a1:
41:be:c8:bd:c9:c8:f4:02:e4:02:1d:79:b3:76:c6:58:ad:38:
dc:dc:85:57:1c:07:d4:3a:4a:77:67:43:21:ad:0d:47:81:d5:
0d:1d:9d:df:58:55:34:a3:d8:e8:01:94:cd:98:21:0c:95:e4:
88:79:16:e9:27:18:7b:90:0b:75:f7:ea:cd:dc:a4:b7:a0:1e:
ba:51:cf:39:6a:0c:57:98:3e:51:61:2b:50:4f:93:51:42:4e:
9c:d8:7b:af:63:67:bd:6e:07:81:34:dc:8a:0e:c4:57:63:1e:
70:26:cc:de:9c:77:c2:1a:e4:61:a7:d6:78:e5:6f:97:62:ed:
e5:43:d5:cd:f9:47:53:52:9d:a8:33:f2:77:52:38:0b:28:e6:
4c:93:67:9b:2a:3c:ab:de:ca:49:dd:49:bd:4d:0e:52:5d:f6:
1b:af:8c:75:da:a9:68:3a:7d:0f:b8:df:36:cd:3e:d4:54:eb:
18:98:8d:1f:8e:b7:6a:e2:18:37:70:7d:fa:e7:cf:cd:e9:1f:
9b:15:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:22 2025 by rpki-client