
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: FbDhJx2mT+jeoI6xuYuKFgT861KzQBCWchUD4QNiSMw=
Subject key identifier: 55:B7:F9:19:12:73:CB:A5:96:92:68:32:A5:66:8E:DE:AA:3C:34:85
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 0194BD85807BC08C68C557D9B377F7CA1B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 07D3
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: FMGYv0GVBi0BJKfec9lwPgJgUhQw5frJ7NCB0pVO4pk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:80:7b:c0:8c:68:c5:57:d9:b3:77:f7:ca:1b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=55b7f9191273cba596926832a5668edeaa3c3485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:cf:1f:c6:8a:d0:5f:46:c1:e8:f8:66:03:
e9:cf:4c:a3:99:58:23:aa:f1:19:1a:b2:b4:50:5d:
7d:50:5e:8e:a2:d8:ef:66:8a:79:4c:c5:f6:f1:41:
bb:c4:93:30:21:38:12:57:24:7e:2b:02:d9:4a:1c:
da:9b:db:67:e4:04:52:ee:86:db:e7:cd:49:fe:eb:
af:14:00:11:fc:45:5e:66:02:9d:b0:79:d1:ae:9f:
ad:98:7e:f9:1d:93:73:30:43:f8:e9:b5:ba:67:77:
73:45:e1:b4:d9:3e:2f:75:4f:34:fe:6f:89:cc:47:
66:58:16:35:b6:9c:bd:dc:2c:80:ba:84:ec:6c:56:
13:6c:ce:17:47:0e:3b:4d:8e:4b:ee:08:e9:c0:f3:
2a:3b:d2:91:68:f1:dd:cd:72:b5:35:c8:f3:5c:7d:
55:f5:34:3f:34:bc:22:6d:df:70:ea:7b:d6:2f:59:
5c:ab:f8:6f:f5:57:7d:9f:9f:be:4e:25:3e:0b:4c:
64:69:ab:61:65:8a:7c:76:ea:8f:f7:65:79:d9:72:
e8:aa:c1:1a:cf:23:bb:8f:89:20:f8:f6:90:5c:fe:
1a:27:a7:42:99:39:e6:3e:85:dc:21:8d:1b:5c:11:
13:4b:77:10:58:6d:98:17:65:c7:71:d3:7f:79:d3:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:F9:19:12:73:CB:A5:96:92:68:32:A5:66:8E:DE:AA:3C:34:85
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:09:7e:a1:a2:45:3f:a0:9a:8b:a8:ef:e1:9e:6e:e5:ab:7a:
a3:ca:2e:57:2b:c2:79:3d:c0:83:66:4e:9a:13:12:4d:a3:e8:
e0:e1:7f:50:ad:51:83:e0:c2:a4:c8:ec:c2:8c:c6:81:e0:78:
24:7d:f0:50:98:41:da:7a:7d:9a:05:98:8f:da:da:a7:22:68:
c0:37:26:fb:31:6d:5d:78:09:01:6e:2c:3c:2e:b8:1f:19:14:
7b:d2:57:f2:b3:3a:f3:0b:ad:20:49:5a:a1:a8:2f:27:d8:95:
0e:cc:eb:02:70:ef:dd:86:26:5d:51:f7:a4:86:d3:9b:68:73:
54:bb:5f:02:71:a9:a7:03:9f:39:b2:25:0a:bb:3e:44:ce:94:
67:07:1a:d9:3d:ee:2d:bb:e4:5a:9a:31:5e:36:e3:99:a2:71:
86:5d:7e:56:47:82:cd:9d:9a:ae:c8:67:e6:8c:94:ff:c2:1c:
ce:f9:39:a1:2b:0a:d5:4a:f0:47:81:d1:79:50:1f:ee:6b:da:
21:77:6c:18:c4:fc:24:98:c7:97:a5:c9:af:cf:32:43:78:51:
95:e2:77:37:76:c3:67:eb:89:4f:e5:5c:8c:33:1c:18:d8:c2:
bf:b7:d5:c6:db:ff:f4:e5:94:97:cc:14:65:61:81:51:53:c1:
c9:f5:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:02 2025 by rpki-client