Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File: 52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier: WuvrBeICxrQFHNqrxcSighXAsBRJzp5nAoE9bIZ/L+Q=
Subject key identifier: 3E:FA:64:AC:EB:0E:B9:D9:72:F2:FB:58:A3:D9:1A:C5:B1:10:CD:8F
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer: /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial: 0194BBCE79B04FEE48669438269117F3F433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number: 03D2
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: ma67sU3TMcJdcDpkQHVHTACXYXS6kToM7ogEFotWFbI=)
2: rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa (hash: GqgeMXx+9CHaMaMRbd16hQlhBApo1up4EaH0YwEA5E8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:b0:4f:ee:48:66:94:38:26:91:17:f3:f4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=3efa64aceb0eb9d972f2fb58a3d91ac5b110cd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:c4:7b:2c:e6:ab:24:24:32:40:8f:69:b0:
83:d0:46:dd:76:ac:7a:0c:a2:21:38:6d:b1:6d:b9:
f9:26:20:6a:26:f7:a1:28:a1:cf:93:ca:15:2a:3a:
b3:4f:de:1a:20:ca:88:d5:72:7e:a8:2e:4b:81:9a:
b3:65:c5:31:b7:fe:66:0f:e6:cc:3e:71:c7:b4:1a:
2d:d0:ad:f8:72:9e:be:d3:b8:38:e3:76:bc:3a:8b:
ec:a1:a3:6e:a4:65:64:22:e6:14:dc:a9:33:82:21:
2e:67:bb:ca:b0:e9:b3:4b:bc:ac:4d:ea:36:5e:4e:
73:e2:c0:be:e2:e2:db:27:57:22:50:23:f4:3b:5b:
b9:25:ee:9a:f2:d6:f6:cb:ea:8f:48:7d:93:e6:55:
8d:b0:84:97:20:6f:06:dd:18:e5:39:33:f8:d8:f5:
96:4e:37:bb:44:31:2c:03:66:7f:92:1c:88:d4:1e:
da:2e:be:43:a1:ff:b0:9e:29:7a:75:3a:1e:25:16:
a2:ee:49:5c:37:50:c9:3b:de:aa:a4:a4:aa:b4:bc:
de:41:c3:e6:fa:9c:e8:7f:4f:49:c5:1a:08:eb:4e:
fb:fb:f0:d2:1b:df:08:4b:0f:48:ff:11:0c:be:47:
96:f8:d3:1b:53:fb:0f:46:83:25:be:43:92:14:68:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FA:64:AC:EB:0E:B9:D9:72:F2:FB:58:A3:D9:1A:C5:B1:10:CD:8F
X509v3 Authority Key Identifier:
keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ca:e8:de:3c:f2:18:16:7e:ab:95:d8:ce:03:f6:78:6d:44:
57:6c:48:62:56:b9:bb:fb:c5:fa:2f:b0:5d:8c:3f:36:7d:17:
b8:f2:7e:6c:c6:8c:7a:23:95:40:2b:ff:9a:c3:8e:2e:65:ab:
00:45:9b:ac:11:6d:3e:75:d2:8d:0f:61:14:b1:58:93:63:54:
a7:36:41:b6:24:83:e6:c0:e7:cf:11:d9:a1:47:de:0f:d2:01:
40:44:39:8b:79:2e:4f:3f:48:fd:d3:c1:35:9b:8e:b5:e5:54:
e8:3f:e5:7e:43:60:9c:55:af:b1:21:e1:73:52:e1:f0:af:88:
5e:59:b9:96:04:40:42:73:ca:14:f7:b6:6b:26:40:9d:ba:fc:
07:b0:fe:eb:14:c4:3f:46:fa:76:5e:57:0f:7f:b8:f6:24:d2:
2f:85:13:89:95:67:91:0a:06:a0:22:da:ec:e6:37:78:25:51:
65:c2:83:11:76:b5:0e:cf:df:f9:d1:b4:16:ec:ae:ee:f8:74:
4f:58:f2:10:7f:69:2d:0b:4c:18:b8:ca:a2:76:f7:96:72:1f:
f7:48:be:89:57:f9:bd:37:08:fe:1d:38:2d:f9:e9:0b:00:45:
3e:e7:4d:30:fd:27:c2:7a:51:69:fa:0c:ae:8c:97:31:69:0d:
34:14:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:43 2025 by rpki-client