Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: Cw/R0GQ03MCMZON9PeuDjgPVV7jJinBtMdCJfH9KkCs=
Subject key identifier: 2B:8A:3D:04:0F:27:3E:F3:2E:82:FE:C9:C1:50:77:90:BF:92:43:7E
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 0194BD1774FF2D563ABFD17A9263549D473B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (hash: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=)
2: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (hash: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=)
3: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: vPiyIP61PYnapd3HLRXiFmnGFL+eoIBqUFk6bAyKOKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:74:ff:2d:56:3a:bf:d1:7a:92:63:54:9d:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=2b8a3d040f273ef32e82fec9c1507790bf92437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:ec:a3:2f:27:a4:95:50:2b:57:b1:84:ec:
92:a1:ad:d4:14:fb:d6:7f:c9:69:15:5d:8e:7e:a2:
65:68:a1:38:32:ee:d4:4e:be:f7:39:aa:1b:f8:15:
f3:56:eb:2c:da:a3:8c:f9:73:26:63:4e:0b:5d:2d:
dc:5c:25:0f:b0:39:ae:46:3a:ab:6a:f3:67:33:52:
d1:25:08:4e:ff:0a:ad:79:87:c7:f8:f2:ef:7a:0d:
8d:34:9f:76:8d:f4:5f:39:e3:44:5c:4f:ef:7e:43:
fc:63:df:0f:66:fd:4d:df:62:e0:c5:8e:98:9e:18:
bb:da:85:55:7a:32:31:48:73:43:25:e0:fa:df:3e:
ff:8d:09:77:45:cc:b6:e2:12:4b:5f:72:78:01:cc:
71:1e:f1:f8:ac:e6:13:2e:a4:fc:7e:95:0b:f8:2e:
a2:e2:8e:15:95:3b:8c:e1:3b:24:d6:c8:f0:cd:20:
41:49:f3:03:fc:df:3e:42:bd:03:d3:4d:5e:3f:9a:
f9:8a:0b:a7:0f:75:f8:ca:0c:cf:4f:bc:27:30:21:
d2:35:48:f1:e0:79:5e:89:31:cd:4b:cb:19:22:99:
ed:7c:2e:c0:ff:ab:3f:20:51:bd:cf:69:d9:0e:8b:
90:1a:4c:ca:ed:15:8a:ab:65:6f:47:d9:25:e7:04:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:3D:04:0F:27:3E:F3:2E:82:FE:C9:C1:50:77:90:BF:92:43:7E
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:29:7f:ab:5f:ea:b0:66:98:80:59:e7:5c:76:92:0f:b2:60:
18:af:a8:61:c5:06:4b:49:b5:bc:e4:39:40:23:37:41:1a:24:
b3:b6:d7:6a:1e:b5:af:4a:4c:28:8c:d2:36:3b:7e:5c:f5:e1:
59:8e:27:85:16:49:f5:ce:0c:d4:43:cd:41:bf:a3:9f:94:1f:
d7:6b:72:fb:b4:08:91:72:c0:c9:96:59:41:79:79:c7:8e:2f:
03:26:0d:ad:a0:c5:54:7f:1a:e5:d0:ea:bb:42:53:7c:36:f4:
83:3d:7a:8a:5b:a5:cc:de:e6:c0:64:58:fb:7b:8d:01:23:11:
dd:a7:58:53:f2:80:0f:c4:fe:5b:c3:f6:f5:61:6c:7c:e9:3d:
54:ef:2b:e6:e0:df:17:05:ab:c4:3e:00:91:fb:d1:63:c9:8e:
1a:db:a4:f3:86:4b:89:33:97:b0:32:64:0e:89:d9:bb:39:97:
64:70:99:d5:3c:f6:3c:96:d7:19:01:52:2f:05:67:67:f2:6a:
60:5e:3c:86:1e:fd:06:37:f4:82:24:84:70:ac:f2:7a:09:82:
ab:81:7c:13:10:07:59:4e:f1:80:95:88:3c:08:18:30:50:5e:
0c:5d:a1:cb:2d:3d:f5:da:25:30:b9:0c:91:74:07:62:4a:b3:
e9:bf:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:53 2025 by rpki-client