Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
File: sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft (raw, json)
Hash identifier: UQ+BdviFvHI2xl2BwHzdTqDZiTY73wWswPhcBX25qgA=
Subject key identifier: 29:25:16:A4:75:C8:AC:C5:A1:CB:A5:62:20:1C:94:10:0A:C7:82:DA
Authority key identifier: B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C
Certificate issuer: /CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
Certificate serial: 0194BAF1F8D38D26A2769156FCAA0B3EBA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 06:00:07 +0000
Manifest this update: Fri 31 Jan 2025 06:00:07 +0000
Manifest next update: Sat 01 Feb 2025 06:00:07 +0000
Files and hashes: 1: 2CRcpLkKZy5BK9crzZP9INd8Nnc.roa (hash: RrCszzNWYMOvxHM51HzExr7VFjO8/0+6gOnUsgheLnQ=)
2: hRV3_4TiHPkRBZfua7gsfa-2S7Q.roa (hash: VrrA3vuzSsZqv4qxnwGHUIlmP8MRR02PcVjGEehrA0Y=)
3: sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl (hash: gihHq4zuxJxbb7uI89H0JodPyGYVvVdqM+MlT1soU2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f1:f8:d3:8d:26:a2:76:91:56:fc:aa:0b:3e:ba:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
Validity
Not Before: Jan 31 06:00:07 2025 GMT
Not After : Feb 1 06:00:07 2025 GMT
Subject: CN=292516a475c8acc5a1cba562201c94100ac782da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:4c:f1:3c:6b:62:de:cf:82:22:e5:21:4a:
64:d6:37:56:72:25:44:7a:43:44:02:69:7d:61:23:
cb:05:95:2e:c8:28:a6:91:e0:e2:54:67:9c:79:d8:
bf:28:ca:4d:61:ae:5f:1e:0e:be:e0:f0:5a:e7:21:
2a:27:c3:9d:3d:97:e2:8f:d8:62:8d:42:8f:9a:01:
eb:a3:32:26:92:49:ef:28:0a:5d:e4:dc:e4:78:cc:
0e:d5:17:7c:f1:da:39:20:b4:60:02:af:1c:7f:50:
00:70:51:4f:e9:2f:c2:e9:db:f3:bb:6f:ff:91:72:
d2:e8:ba:ed:a0:b2:ef:84:b2:40:00:d8:83:f6:65:
6c:59:8b:02:8e:6e:2a:94:86:4a:26:fe:d1:3d:ad:
40:c4:ec:ea:6e:89:97:65:51:bf:ab:a1:91:25:d1:
96:9f:9a:66:ed:00:3e:2e:4c:8d:63:1a:53:5b:00:
3e:c3:ab:06:d1:72:cf:e3:59:33:5d:51:db:0d:8d:
4a:f7:b4:4e:73:51:2d:21:e5:60:10:73:f8:52:1d:
a7:ea:48:f8:f8:26:d1:7f:b6:02:fa:38:17:a2:95:
34:ef:c8:67:e3:61:db:ab:55:cf:d0:05:b5:8b:7c:
46:78:f9:25:be:04:c3:c6:2a:2f:fe:dc:7c:0f:c5:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:25:16:A4:75:C8:AC:C5:A1:CB:A5:62:20:1C:94:10:0A:C7:82:DA
X509v3 Authority Key Identifier:
keyid:B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bd:79:0d:f4:33:6a:71:00:e1:43:68:c3:8c:dc:06:a2:d8:
38:79:46:2a:95:eb:7f:9e:5a:14:3e:1b:ea:22:0e:37:ea:a9:
94:ec:de:9d:8c:f7:ee:e9:89:a0:41:a9:22:06:a5:e2:80:8a:
ed:41:34:a0:39:ab:aa:5c:25:0b:f0:00:90:c5:95:f7:64:78:
f9:f0:91:9a:3b:df:2a:90:c0:75:67:7d:f7:5c:af:ca:86:1a:
20:61:7a:e4:7e:fd:01:2a:c6:13:a5:13:dd:48:e0:80:d5:6c:
67:bb:e7:19:71:dd:9e:e6:f8:53:c1:25:6f:a2:00:d8:5b:e5:
b8:21:76:2f:4a:73:05:f1:7c:60:90:87:95:90:c8:1c:25:f5:
1a:44:6f:54:5b:a9:24:6e:60:17:92:f8:6b:7d:aa:28:dd:2f:
f6:36:0f:f8:f1:08:ce:d5:93:d7:3a:df:af:4f:74:cd:b3:b3:
3a:dd:d0:11:e3:f4:6b:ec:c4:e1:7e:66:66:6e:2a:87:e2:ba:
35:24:b5:a5:bc:d7:96:20:66:f2:72:53:89:5b:3f:42:55:2b:
d5:5e:9f:1d:31:32:a3:f0:83:2e:06:3c:6a:9c:db:0f:04:80:
3e:a6:78:56:5b:62:33:ec:5c:eb:13:ff:a2:47:e7:7a:fd:e4:
d2:77:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:59:57 2025 by rpki-client