Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: 0bX/V3wOuqpE+T2670tf6XiP1RlqW7RGX3EfoLu6AGA=
Subject key identifier: E3:A5:18:DD:E9:0A:31:99:22:5F:AE:3D:1D:5F:22:67:46:7E:83:F5
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 0194BBCE25717364CD164BCF31CF777F3DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0723
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 0O73PaTyLOlo4DtC-zfVh-so0po.roa (hash: 8d52pgK7PtxKWsBsAJptabjpB2sUfgsDROP6Cr/a/W0=)
2: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: EaGvbxGTR4VmvApF1YAobC7noXLbm9leAwhe/Ps+kVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:25:71:73:64:cd:16:4b:cf:31:cf:77:7f:3d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=e3a518dde90a3199225fae3d1d5f2267467e83f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:52:6d:e9:1e:ef:8d:a5:4d:23:e9:50:c7:
3a:da:72:8f:1c:98:e6:41:4c:c4:55:cd:3c:ca:39:
9e:b9:5e:0a:ea:6e:e4:9e:23:ff:7f:21:6d:89:50:
6c:00:5a:ba:89:42:b8:79:9e:b8:db:3d:c2:fc:7f:
d4:34:50:84:fa:c5:21:03:c0:42:a7:01:c5:5f:53:
92:57:90:d0:45:ba:01:aa:d4:50:d4:af:43:95:74:
7e:11:3d:4a:32:67:91:23:0d:87:c1:f0:d5:21:cb:
10:7a:21:76:88:bc:50:b6:f0:24:3e:51:ee:46:ff:
04:d4:7e:ec:5e:30:58:fe:0e:4d:ec:c7:16:9b:33:
dd:27:bc:ec:bb:14:19:73:72:de:8d:c6:d3:5f:e9:
42:70:fb:85:29:5d:0d:79:33:7a:72:6a:91:cc:90:
3d:59:c9:eb:9e:b6:f5:74:a9:32:91:e6:4d:56:57:
c6:19:35:a2:68:1d:15:0e:a1:d5:ee:8f:f1:54:e7:
6a:b8:90:ba:cf:52:3a:04:3b:49:e7:17:3c:43:08:
a2:be:f7:ad:56:17:e1:96:2b:b0:85:b7:7a:34:d2:
32:9d:ba:a0:30:cb:a7:a2:2a:ca:08:79:5b:76:02:
6b:a9:d8:51:ba:9c:98:06:f7:80:06:48:ce:d6:62:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:18:DD:E9:0A:31:99:22:5F:AE:3D:1D:5F:22:67:46:7E:83:F5
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4d:f8:46:cf:04:24:24:7f:42:66:10:a1:64:6e:c9:05:de:
b5:bc:9a:f9:a3:74:6b:c2:7f:f8:76:6d:f5:8f:51:88:7a:60:
69:4b:76:be:5b:42:41:3b:c5:01:93:79:a3:2c:42:29:76:c1:
87:e4:b0:38:91:ce:55:92:60:b0:6a:13:9a:42:2c:4f:46:ac:
02:ec:0b:a8:7d:70:b8:e4:79:ee:48:d5:61:86:7e:eb:e0:5a:
4d:59:b3:33:76:9d:bd:08:b9:a1:64:fd:b3:b0:e7:8b:39:da:
65:52:28:b5:76:31:64:5b:a8:d5:e4:03:d5:97:bd:6f:9c:03:
68:3f:9a:48:ad:0e:39:aa:94:f1:89:32:dd:f0:58:d3:98:b1:
36:7d:6b:c0:27:56:a3:5a:4c:ae:74:fd:90:d4:ce:85:cf:5e:
1b:2d:4b:88:cd:f7:f5:ea:7c:e8:76:b0:eb:a2:05:18:64:65:
0a:5c:af:e0:7e:77:46:66:d7:d6:66:90:8d:e9:c5:e9:44:10:
49:0b:e3:b8:50:36:c6:63:24:9d:8c:3a:60:15:c7:74:0e:64:
f1:f2:27:92:0d:b5:e9:82:8a:77:c4:c0:bb:88:06:29:c9:9f:
3c:ef:dd:9c:e6:a6:29:03:fa:df:0c:c7:d3:e3:51:d5:66:ea:
72:66:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:26 2025 by rpki-client