Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: 2u06wjZ+Zb+tvw8iv4MZkXGo3PjOcilqkeT0/Qc+bJI=
Subject key identifier: 7C:DD:03:C2:D9:DB:17:7D:73:62:3E:9F:52:96:01:1A:85:E1:72:6C
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 0194BC3C3874888D9CCC4803E2BC658214D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 03DF
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: Y6XguoASkuj117zapWikDdhsOwE.roa (hash: cYRIxVqFr0BZZuT1yz+/1pm1CRjn1QkJKZ6Frd8lRoI=)
2: rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa (hash: 0/AMhBxslSHnkSz/7atutBB8j75xjJ93LSUDUChOOQk=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: SW/YzoSpcLn7XSs+X5SFVgMcG0MBvU4QtqEjsmBosJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:38:74:88:8d:9c:cc:48:03:e2:bc:65:82:14:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=7cdd03c2d9db177d73623e9f5296011a85e1726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:9b:04:e1:cf:ff:10:f9:36:27:34:af:87:
c2:01:d0:ce:6f:5d:fd:2c:9e:1b:a5:a1:16:50:0c:
0e:9d:17:bd:79:3c:3f:fb:36:17:04:3d:da:ca:01:
4c:c3:b4:ad:1b:79:60:cf:eb:20:88:34:1d:ab:2f:
ee:58:02:f8:cd:fd:93:8b:c7:69:66:c0:af:c6:f6:
10:4a:87:3a:09:cd:17:3f:67:c9:eb:18:20:e6:5b:
4d:13:af:2f:d6:4d:67:e4:02:4b:1c:09:ee:ee:79:
2c:13:05:d1:ca:ac:2e:fe:58:e5:53:15:f0:b8:c0:
59:31:78:4e:ac:d4:85:09:c6:65:54:db:e6:82:28:
a4:9f:18:a2:be:3f:c3:a4:fc:16:7a:a4:29:32:a1:
27:85:67:24:3e:11:65:57:a9:5a:86:ac:8f:66:fa:
6e:5d:a6:42:63:d2:03:ae:27:9e:ba:ca:d8:dc:8c:
f3:37:fe:f2:4b:9d:53:63:5e:97:4e:1b:df:32:35:
cd:7a:ad:cb:4c:7e:8e:8a:0b:fe:c8:f1:5c:02:3d:
1f:49:37:cf:35:2f:b0:5d:f5:55:b8:74:f3:12:70:
f3:0b:01:21:bd:8d:e0:f2:79:82:f1:e6:c6:e5:d2:
9a:a7:d0:db:e9:7d:60:c5:1e:4d:16:b9:06:25:58:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DD:03:C2:D9:DB:17:7D:73:62:3E:9F:52:96:01:1A:85:E1:72:6C
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:02:cc:59:25:fc:2f:b4:df:32:0b:37:1f:60:16:e0:39:58:
43:82:8d:0e:d6:b3:00:4c:bf:f2:e8:b2:05:1d:d2:1d:a1:e1:
1c:d7:39:a7:5b:47:23:32:cf:b8:68:9b:03:82:39:8f:d1:fa:
44:7a:7e:c3:cf:18:b9:f5:ee:34:d1:3f:21:b1:75:fe:00:66:
cc:08:1b:ba:9a:c1:4b:85:a5:0e:8f:97:93:1a:45:e8:af:72:
cc:0a:1c:31:db:06:57:cb:b0:a5:77:a9:aa:8e:f1:1c:fc:fc:
aa:d1:45:94:17:5c:bf:f6:37:df:1a:04:7f:d2:73:21:b2:0a:
bc:6f:cc:43:f8:b0:ea:a8:9d:ba:1e:92:04:2d:5a:a4:6f:ec:
f3:2e:cf:5f:2e:02:bd:87:12:6c:b0:2b:cf:5a:85:0f:79:25:
d8:2c:2f:3f:3a:7f:42:84:11:2b:1f:6b:4c:c5:61:72:6e:09:
02:6c:b7:d6:04:93:11:69:53:72:43:8f:d4:c6:b4:30:e2:c7:
fc:56:d5:66:f8:28:d1:12:69:f5:ca:63:14:e3:30:38:7a:5a:
f1:88:c9:07:39:2e:c2:a9:3c:0e:19:7f:94:54:89:6e:04:2c:
7f:6c:1e:c9:dd:d3:ca:56:f3:f7:cb:3e:9a:d5:74:47:26:3b:
af:0a:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:46 2025 by rpki-client