Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: b6CbcS1TKoM8aXwqUEQ3X01nvKkA7MtsuWit9fLqH0c=
Subject key identifier: F6:99:6C:A6:3D:D0:14:BD:31:37:24:F6:C1:DC:A5:03:5D:3A:52:3A
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 0194BBCE95F8367A41F69848529ED06AE5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 03CC
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: 8EsiFKxnGSpUnSWG6Xj/Gl1ov2wqs4Lc8Df2V0XB6ZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:95:f8:36:7a:41:f6:98:48:52:9e:d0:6a:e5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=f6996ca63dd014bd313724f6c1dca5035d3a523a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:05:06:c7:6d:1c:0a:59:5f:c5:25:7f:03:29:
d8:70:ef:a8:59:69:60:cb:52:02:cf:69:fb:7d:24:
53:bb:75:5a:79:a5:67:7b:65:6e:07:e4:69:68:a9:
c1:fe:b4:ab:c5:eb:02:54:b8:ac:31:9f:a7:a4:47:
92:d0:bb:da:65:5a:cb:52:01:f2:68:ce:9b:9b:26:
04:72:e4:df:3d:bc:22:41:46:19:7d:82:8f:e5:1f:
7c:6c:7a:5f:81:8f:c2:3e:11:af:4c:d4:22:d0:8f:
45:8d:52:39:e8:97:11:9d:4c:f3:38:d7:ff:22:9e:
f1:87:72:b2:b2:cf:94:63:97:48:20:84:a9:8d:3b:
09:8b:52:1e:04:f7:e0:93:6d:63:45:4b:ae:97:18:
e8:30:1f:6d:81:a1:75:c6:f2:ac:01:bc:a6:be:b9:
07:97:bb:c6:22:15:df:c5:6f:70:6c:40:ae:7b:9b:
ae:e9:94:93:4d:44:10:2d:6c:ac:86:85:c2:47:ee:
c5:ad:45:30:7b:a7:3a:0e:90:91:ea:51:6d:6c:52:
4e:20:05:4d:92:f7:26:d0:53:3c:7b:41:1c:5e:66:
59:da:7f:ab:d6:a3:01:32:2e:e4:40:67:90:69:8c:
97:fd:40:7a:34:55:34:2c:5c:0f:e6:03:21:b4:45:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:99:6C:A6:3D:D0:14:BD:31:37:24:F6:C1:DC:A5:03:5D:3A:52:3A
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:05:d6:a0:fb:83:3d:f6:6f:ff:9d:9c:d3:f5:f8:bf:42:
4c:76:94:fa:08:db:e6:ba:96:02:23:92:52:60:c2:4a:20:b9:
0a:af:5d:a3:e7:b1:16:71:4b:a5:e4:be:c9:65:95:47:c1:a7:
b0:d3:9d:71:b7:16:30:bb:ce:2a:ed:16:9c:65:7e:d8:d3:03:
7c:92:2e:6c:24:49:2a:f9:19:24:c9:f0:27:10:45:b5:10:eb:
2d:24:bd:43:59:57:e2:dc:a1:7b:36:ac:12:9f:0c:33:bd:3d:
10:e5:39:e6:ce:8a:95:8f:01:8a:e9:f4:0f:54:6f:bf:9c:83:
ea:95:19:d4:ce:24:8a:90:ba:22:07:04:4f:f6:0e:10:2b:bc:
c7:f1:2d:07:aa:e5:d0:ef:fa:50:8b:f2:ee:b5:bf:af:9e:11:
04:60:27:1f:eb:98:9a:43:62:91:c9:1f:74:d8:77:eb:60:8e:
87:78:0a:ac:0f:ea:65:4e:f3:8c:70:3b:dd:a3:35:03:4c:aa:
9e:46:7d:a5:45:07:b0:8d:d4:e2:ef:31:a8:c0:9b:ec:79:4f:
14:60:02:cc:e3:a4:07:61:4c:0b:89:b6:0c:12:55:3a:ca:04:
24:56:a6:b7:b6:eb:d2:80:f7:1f:00:84:77:d6:0b:c7:a1:f2:
de:a0:de:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:41 2025 by rpki-client