Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
File: shUnDjtZdrRPOt7OVwR9HgeHunU.mft (raw, json)
Hash identifier: ARhjvKMByjEa/s4xS2K5+kyg7netJ32UHBiS89py9lc=
Subject key identifier: AF:80:5D:16:D9:CA:1B:44:75:E1:A4:66:71:A2:2C:E7:5A:DF:6F:5B
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial: 0194BC3C0FA3093B59CBDA2A936DFF01BC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: P2sE-3tUICXx7cfC0favLdtRCZ0.roa (hash: ayIaE8Pk074Tx7I6FVVUWCPvr0NKwOuaUa8Xe24IzDg=)
2: eGoVDFCAKRgMU7yFCgUyj1lHOYk.roa (hash: i9IHtchSCoTvu2jWZ+d1LDgXIzrS7PbiIZtxvaQvRRk=)
3: shUnDjtZdrRPOt7OVwR9HgeHunU.crl (hash: 7fLTAd/o3VEyoERClu+R/1JrJP1iGx/VG93Uto0Uuts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0f:a3:09:3b:59:cb:da:2a:93:6d:ff:01:bc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=af805d16d9ca1b4475e1a46671a22ce75adf6f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:4c:4b:18:07:5b:98:f5:b8:db:b0:f2:45:
bb:69:fa:99:82:38:19:bb:60:c7:3a:86:74:7d:98:
52:54:57:16:13:f8:86:6a:cf:7d:46:46:d9:36:d2:
6a:9e:6c:a4:98:eb:7b:0f:be:f9:e0:d6:95:4d:f8:
72:e6:65:73:77:94:fc:7c:11:25:96:7a:d9:6f:53:
a2:f8:35:06:51:ab:42:05:71:2e:6f:be:07:f2:d8:
3c:c6:f2:98:e8:fa:4e:7b:e7:21:60:05:09:fd:a9:
a8:a6:11:ef:27:f5:0d:74:ab:3d:ee:da:78:de:46:
db:80:ca:b5:ab:14:60:1a:01:d3:2f:3b:6b:a2:1b:
6f:f8:95:e1:24:ae:6e:30:64:02:79:ad:f9:4c:9e:
96:56:80:f5:1f:05:eb:fe:62:71:28:c7:08:79:6f:
d0:7f:ce:fa:42:78:ea:9b:7a:f5:a5:36:f2:69:16:
14:d3:ec:a6:ed:a0:bf:d3:33:62:a0:20:a3:ca:5d:
71:bc:e4:35:cc:ef:1f:51:62:e1:b8:98:d6:57:0d:
bd:91:3b:e9:78:af:70:3a:6c:b8:83:69:12:55:55:
cd:30:0f:5e:8c:4c:36:ec:41:76:55:00:f3:a0:47:
40:df:8d:21:8b:d3:7b:04:5b:cb:71:08:d2:7d:ad:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:5D:16:D9:CA:1B:44:75:E1:A4:66:71:A2:2C:E7:5A:DF:6F:5B
X509v3 Authority Key Identifier:
keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fc:d6:bf:2c:f9:d8:16:7d:06:0c:18:b9:fc:4c:ce:30:4d:
9a:43:58:63:9c:50:e4:fe:eb:d9:9e:f4:4b:4f:4b:bd:b7:7c:
7d:ab:73:bc:51:14:9e:d9:4c:f3:4c:2a:88:e7:00:eb:62:96:
2f:28:7d:5c:c9:0d:66:0a:1e:b3:a0:fd:97:e6:3c:63:57:fa:
90:77:05:67:22:1d:0b:5a:c2:26:43:7f:60:91:07:0a:d0:0f:
84:23:06:0f:56:87:ce:44:95:c7:53:df:11:97:33:ff:95:5e:
74:7e:69:1a:b2:a6:c0:9a:fb:4f:01:a0:46:65:60:6e:c8:96:
af:42:b2:e6:4e:40:ea:9c:e5:2d:f3:41:e3:c9:fa:9f:26:5d:
1b:e3:87:66:59:a4:09:0c:87:51:5f:b1:35:9e:da:ba:46:21:
5d:07:ea:29:e2:19:0a:e8:28:d9:64:47:aa:54:83:48:f6:81:
1f:fc:48:32:b1:8e:28:d5:cb:4d:62:6c:f3:06:e7:f2:45:bb:
c0:9a:40:f8:ee:18:7a:f7:80:95:e8:80:f9:16:49:02:c2:1f:
32:5d:9b:8a:3b:48:40:05:da:06:01:d7:d6:41:80:d0:f6:67:
44:e8:44:99:8a:2f:8a:4a:10:fa:cc:a3:ea:66:59:20:f8:f0:
f6:24:d5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:51 2025 by rpki-client