Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
File: sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft (raw, json)
Hash identifier: rAPxXZ0vAN3esHqWdYDcAKdDhhJ2IcaoRG2IMzLEQBE=
Subject key identifier: 53:BC:A5:C9:9C:4D:D5:92:40:26:38:86:61:4A:DB:91:46:33:0D:74
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 0194BC728546F53DCF7A1A90096D3A451EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
Manifest number: 0AF2
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: 3G57Mp_drTm5LQIAsR9YRotKRjc.roa (hash: HSVN82yBur/E/Dw74kBhlHPkX2Db70c/6OEvRpUq+xk=)
2: ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa (hash: Gt/XD54HF++DivzLiOI9eyUVujLtao+p/hKCG9urNc0=)
3: sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl (hash: 2XmJdaYW4+pMGX1kwoW1R941F5d2rawd8Rmoy5mmntg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:85:46:f5:3d:cf:7a:1a:90:09:6d:3a:45:1e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=53bca5c99c4dd59240263886614adb9146330d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:57:3c:2d:ad:7e:52:7a:54:fe:c6:7b:1c:
62:c7:61:59:ec:da:0c:b4:78:52:9f:8d:37:24:db:
04:20:8d:1b:d9:11:af:6c:fc:a3:5d:46:9f:85:1d:
d7:c0:62:a2:6f:a3:1b:1f:0e:f7:ce:61:a4:e0:03:
52:81:d6:3c:68:b9:39:d9:e7:9d:79:ed:79:8a:9a:
48:e9:17:31:b9:0c:6f:58:78:fb:0f:fe:46:c9:01:
a3:13:93:fa:8f:22:26:b7:db:58:d3:d9:df:6d:cc:
42:6c:3c:1a:92:cf:d6:f6:03:c3:41:ac:91:28:57:
2c:64:6c:02:f5:b5:8d:66:53:be:4f:b3:61:66:91:
fe:d3:8f:32:b3:5b:15:32:a7:ee:90:2f:a9:90:8b:
20:ff:27:82:ad:10:15:60:c8:e6:19:a6:04:73:46:
62:b1:49:99:ff:be:30:6b:6c:1f:c8:b1:09:0d:cf:
d0:b9:9e:0e:45:28:5b:f6:5f:5e:53:6d:0f:59:7e:
24:8f:8f:60:0d:da:2a:8d:47:d6:3b:d8:a1:38:03:
66:5c:cb:a4:b3:86:86:b9:b8:d2:e2:24:ff:aa:76:
a5:66:ae:9a:41:c8:12:4a:c6:48:4e:8b:c5:d1:5e:
92:34:62:65:ab:e5:f0:18:be:06:f3:67:63:94:a1:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:A5:C9:9C:4D:D5:92:40:26:38:86:61:4A:DB:91:46:33:0D:74
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f2:ed:2c:4d:e4:52:d6:66:39:c2:9c:31:3a:c1:e4:67:cd:
3c:9b:97:ce:f1:94:31:92:54:ed:a6:d5:a1:f6:42:85:c1:4d:
79:1b:7d:b3:a6:46:69:88:69:fa:3a:d4:ba:d0:11:be:79:77:
b0:c8:33:72:ce:29:f9:24:4b:e5:ef:16:80:21:87:8f:4b:e7:
5d:1a:72:c9:39:6a:9e:b5:9c:35:aa:67:93:4e:32:35:40:cd:
ba:aa:71:10:ef:dc:1e:26:ac:ed:70:5d:38:0c:f5:31:a1:b7:
70:3d:02:ca:25:23:26:a2:88:b2:a3:2d:57:0e:47:67:dd:56:
7f:d5:ec:4c:8c:c5:40:80:e6:1d:f9:93:1f:07:a0:6d:96:e1:
b0:68:00:17:d7:c4:a3:72:07:a8:dd:da:16:ac:5d:16:07:e3:
3b:ea:e2:9d:cc:51:c1:11:be:e7:84:80:f4:bf:16:32:a2:96:
07:47:fa:07:d8:c9:0c:b5:7a:8f:17:6e:50:b3:cb:9d:bd:c4:
76:0c:e8:a6:4e:93:9b:52:95:64:3f:40:cc:db:13:da:67:33:
56:2b:dc:85:2e:dc:8c:30:bc:ef:b8:6a:09:01:c8:f0:93:3b:
06:7c:83:87:e5:19:52:2a:8e:a1:21:70:cd:1a:ce:81:37:c5:
0e:de:6e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:57 2025 by rpki-client