Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
File: shna0BUe3wUqLxyX34hKWoeotfU.mft (raw, json)
Hash identifier: ToWRVMDbJ6tNedvdprpepaGzzzLL/UV/3FedzMn7lw0=
Subject key identifier: 54:E9:15:B7:02:7D:B5:86:B1:B5:D8:4C:18:11:11:8A:9D:05:A3:4E
Authority key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Certificate issuer: /CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Certificate serial: 0194BCA9CD8A2E5F106A3BF9A9E8B8E3DB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
Manifest number: 05CE
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: shna0BUe3wUqLxyX34hKWoeotfU.crl (hash: lX8UvRrgz9FRMWb0DUp3apiEA6XcISpkQqq6rnSxYsc=)
2: yqdi2I4mvyqmB4-2BzPkMkJ3hIY.roa (hash: oTSjwH5eKf8we68+dtERfn9uiSN2W5Nb5pDWgRrwsxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cd:8a:2e:5f:10:6a:3b:f9:a9:e8:b8:e3:db:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=54e915b7027db586b1b5d84c1811118a9d05a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:29:4d:c2:4a:10:54:07:b6:bf:b9:ee:3d:
2c:fa:fc:69:a2:d5:56:5f:50:ee:ea:c2:d0:a5:1b:
af:7b:ed:03:b0:9b:7d:0c:95:86:00:7c:4e:f0:68:
8e:59:99:fd:e2:16:39:d4:7c:9c:21:b4:bf:68:f1:
a0:bd:9a:8e:fb:b2:26:56:da:af:78:92:1d:0f:71:
78:b0:9a:93:d3:db:81:c5:4d:e6:59:1e:3b:fe:72:
75:69:9c:4e:3b:fd:af:b9:69:90:c2:88:9b:2c:46:
c4:6a:41:80:2b:93:0b:9e:dd:de:f2:bc:5b:a3:82:
2e:38:80:9a:22:6b:25:11:86:96:96:b3:da:c9:90:
fe:e5:30:c9:dc:3f:99:b6:cc:10:8f:8b:4d:74:3d:
1d:a4:b0:5e:19:47:8d:49:83:78:da:14:df:67:55:
15:79:3a:10:26:ae:da:bc:9c:dc:a7:12:69:4f:79:
26:b7:e0:09:81:0d:ee:3e:61:03:ec:0e:ac:4a:38:
3b:da:84:67:2b:cf:e3:98:68:d2:c5:a5:09:6d:7b:
16:46:cb:30:a5:2d:19:85:2e:ef:1a:43:82:19:a0:
32:24:b0:ff:fa:4e:8b:0b:31:8b:5f:98:ab:dd:1c:
d9:43:e5:a8:44:5e:9e:bf:ca:5f:6e:61:92:75:d7:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E9:15:B7:02:7D:B5:86:B1:B5:D8:4C:18:11:11:8A:9D:05:A3:4E
X509v3 Authority Key Identifier:
keyid:B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5e:9d:75:aa:e9:8d:ac:23:fc:49:bd:32:c1:0b:36:c2:c4:
cc:b5:d6:60:81:fe:14:18:b2:cd:99:3c:1c:b3:fd:1f:64:97:
27:13:ad:3d:29:06:a1:24:6e:ed:c2:6b:49:14:1e:95:e3:15:
50:36:42:94:08:bd:02:c2:9f:6a:f6:70:e4:13:ec:e7:c7:3d:
7d:07:16:9c:ac:24:c8:82:0f:f5:b5:53:f2:8c:68:c4:00:40:
e6:3d:02:5f:e9:22:2a:85:8d:b2:32:b3:bc:75:fc:5c:90:a1:
9a:d4:da:48:3b:43:98:35:c1:71:98:79:1b:51:53:92:f8:5e:
04:36:6f:de:62:a9:a9:ad:9d:61:07:4a:42:a5:41:a3:89:7e:
7d:1f:84:c0:d1:f1:73:83:96:d8:d2:29:41:d6:f0:32:67:23:
f1:7f:48:c1:2d:60:c4:c9:9f:58:4e:21:f8:74:48:8e:28:eb:
b5:90:0e:0e:b7:93:09:a0:2f:27:b6:f6:b6:97:92:b7:5d:af:
1c:82:2d:13:2d:d7:2f:4e:ef:c0:1e:1a:1f:6d:9f:57:f1:86:
9b:7c:8f:81:b5:72:19:3d:90:e2:d8:c8:82:5c:46:5a:59:cd:
5f:e6:eb:28:71:d9:d7:f3:53:73:ef:83:2e:87:96:70:1e:48:
b4:35:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:45 2025 by rpki-client