Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: +fVmwGakIBe2A/IfSK+MA5wAxChWGL+C1rwQWrCrKFk=
Subject key identifier: 69:B2:31:43:C3:29:77:11:FA:4D:99:72:AA:24:DF:6F:20:5A:BD:D5
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 0194BC04CA6DF6CABBF1EA5086D00D6B34FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0985
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: CojfFLrgSMG68RE9uCoHemO13ZILVVx9ZbyeupB8wFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ca:6d:f6:ca:bb:f1:ea:50:86:d0:0d:6b:34:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=69b23143c3297711fa4d9972aa24df6f205abdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:c4:48:2e:03:a1:42:a5:74:9f:8e:16:6b:
dc:fe:17:5f:e6:f7:bd:9f:71:d0:bb:7a:92:6b:a2:
86:b5:b3:c3:46:80:57:e0:33:b2:74:dc:62:ad:95:
ac:b1:93:5b:7b:6b:ea:93:71:bb:f4:4d:cc:33:f2:
52:7d:07:3d:07:f0:1b:91:f2:d8:31:2d:08:e2:e0:
86:39:7f:28:28:7c:1b:57:8a:ee:c0:ae:1a:55:48:
c4:db:32:5e:a9:c9:85:e5:49:15:bd:c7:66:32:9a:
39:78:18:57:06:22:45:cb:a1:9e:7f:de:37:bd:5a:
97:10:93:ef:9b:de:1e:48:e7:c8:cb:c7:de:ac:68:
af:a1:f8:bf:b8:cd:0a:63:0b:aa:e0:f1:fd:99:b3:
cc:80:79:ce:41:cc:02:63:a5:8d:0a:9d:01:9e:23:
0b:57:d3:ea:7c:24:cd:77:e9:0a:5b:f9:d5:b6:c5:
19:c7:89:ed:60:3b:a4:ae:c1:88:1f:09:7f:7b:ee:
ba:59:de:c9:c8:af:ad:ea:e1:81:63:f0:b9:61:94:
e6:42:77:25:2e:75:66:7c:88:5f:22:cb:30:85:82:
da:38:d3:ee:41:f2:01:68:db:0e:9a:c2:41:c1:98:
9e:3e:d7:31:5e:9a:e6:02:7d:3b:7e:39:55:65:3c:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:31:43:C3:29:77:11:FA:4D:99:72:AA:24:DF:6F:20:5A:BD:D5
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:c0:97:a1:f0:32:1c:32:01:7f:76:6f:82:e8:1d:b7:8e:
75:cf:80:3c:f4:9f:e7:5c:c4:46:e1:3d:d4:04:32:ee:78:9c:
5b:52:11:e6:c5:ee:8f:32:6a:d9:79:95:de:8a:40:d6:41:c9:
10:9c:0b:7d:04:12:ca:5a:71:ed:6b:0b:e5:41:82:b1:e3:f5:
58:09:35:44:0f:d6:56:fd:9c:86:80:6d:94:1a:98:da:60:aa:
71:04:40:bb:c5:a8:3b:0a:f8:4d:24:3c:c7:45:8f:bb:60:43:
56:4b:f5:50:39:c7:9d:f3:b7:a9:bf:d5:18:7a:cf:04:29:7c:
1a:00:66:82:9c:63:a5:ca:fd:3f:83:c7:d3:fd:b3:91:f0:cc:
c9:d8:14:4b:63:73:b9:7b:49:42:75:0c:26:e5:6f:c8:1e:7b:
04:af:4b:b8:eb:4a:5a:04:21:ab:41:0f:c6:51:b1:9f:b1:dc:
ea:7a:25:17:f8:cf:49:d6:08:34:8f:f1:a6:24:54:d0:0c:8d:
a7:c5:c3:ec:f2:c6:ea:da:b0:3c:26:ed:d5:29:c1:fb:e6:5e:
46:29:3b:43:63:25:a3:ce:0a:b5:e1:e0:c1:d7:b1:2a:a7:d7:
0b:92:6c:1d:be:93:5c:e1:b0:44:84:d5:17:32:21:82:e2:42:
77:31:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:20 2025 by rpki-client