Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: DKE0BJDtn/JG1GIqr+v23BRHfOWRElvKjdWPM3+IGS4=
Subject key identifier: A5:F1:76:B5:0C:9A:26:C9:26:BC:18:5D:31:9C:41:EB:B2:7F:FF:DF
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 0194BD85B433ED756AA52444FC62630C6617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (hash: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=)
2: XLNp588BlhjTzq9wL8KooDNiDfQ.roa (hash: yqzj3pa+xK6sQ61wkjeNUDLd0sOcE9ePSDM9S9DIM0g=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: uDI2P63njNbWqhBTUP5cyNHQZSUA8kqk5HisJLLdo6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b4:33:ed:75:6a:a5:24:44:fc:62:63:0c:66:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=a5f176b50c9a26c926bc185d319c41ebb27fffdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:0f:a7:44:ff:31:db:06:92:f0:10:a4:13:
79:ce:3c:35:e0:81:98:1f:d0:67:5b:26:78:c6:91:
eb:bc:7d:a9:20:c3:62:8f:aa:d0:7d:fd:51:97:4c:
ee:2b:e9:06:8f:47:c8:65:bd:0e:b9:c0:da:98:3a:
ad:81:81:04:71:25:74:0d:18:8e:9d:b0:9c:a0:ea:
79:d5:5c:b3:dd:5d:5f:41:ca:85:29:96:26:9b:16:
d1:e5:bd:da:6a:98:91:9b:b9:97:b1:50:43:18:c7:
d3:e1:b4:5e:6e:40:5c:f1:0b:21:b5:49:a4:75:a2:
68:c9:77:c8:a2:c1:14:b3:5d:aa:bb:76:4d:ad:1f:
79:9a:da:b9:2e:0f:64:ea:df:05:a7:1a:17:31:93:
a1:a9:39:42:12:ba:a3:d8:3b:9d:21:02:57:cd:be:
16:27:e0:b5:85:e1:0d:ac:35:74:78:b0:cc:9a:7f:
ba:bc:df:93:88:df:3f:84:1e:5e:77:9e:f3:66:9a:
69:2a:72:84:7f:2c:53:79:dd:63:3c:02:09:b9:1a:
65:57:66:93:14:96:c1:95:03:03:be:f3:25:24:a2:
34:b3:af:76:93:5d:41:19:95:61:93:87:5b:d1:ee:
16:20:5e:aa:57:85:94:e4:48:46:80:bd:75:94:f2:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F1:76:B5:0C:9A:26:C9:26:BC:18:5D:31:9C:41:EB:B2:7F:FF:DF
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c3:da:10:24:55:67:cf:e9:d8:c1:42:9f:b8:6b:f6:e6:2d:
99:99:79:90:34:36:75:64:6e:71:b7:da:09:0d:22:68:df:e6:
3b:29:88:d1:ac:15:7d:ad:61:4f:c3:b7:60:2f:dc:50:18:95:
c2:5c:42:80:b2:1b:20:f1:32:e4:4a:c7:8a:51:70:2b:b7:fb:
be:fa:5c:ef:56:ba:69:9f:fe:1c:c0:81:87:99:29:3c:1a:3a:
95:b2:4c:61:00:fc:a3:92:9d:7c:3a:d5:a0:63:be:14:6a:39:
10:fa:eb:71:8c:76:c1:2d:1f:ba:53:9d:83:3a:ae:27:4c:bc:
5f:a4:98:30:94:1d:1b:27:93:fe:90:e1:ae:79:72:b2:2c:03:
73:bb:d7:cb:f8:80:e6:cf:90:f8:83:42:21:79:4a:46:1b:e2:
f8:51:bf:25:1b:19:74:0f:28:92:0c:90:d2:04:06:a3:9b:1b:
08:6c:99:4d:57:50:c8:10:c8:02:87:10:ba:23:93:56:a3:ef:
34:82:ab:57:1c:25:3d:96:28:6a:14:3a:44:0b:ad:1e:54:0a:
8c:18:4d:f9:f7:f6:f4:0e:e7:be:0c:60:21:29:24:60:fe:5d:
03:3f:76:5e:fa:3c:10:3d:3c:a7:d3:18:08:31:f5:f0:6e:50:
78:97:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:04 2025 by rpki-client