Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File: B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier: 1quUCG/OON/9U1WGKQcF3m1XKjzcYD+oJtWNJ9rtAx8=
Subject key identifier: 1D:60:82:15:39:C6:29:AC:71:FE:6C:D4:77:71:00:C6:36:F8:CE:2F
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 0195E00F956D1EC50F5F15799C8B627BB91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number: 05B4
Signing time: Sat 29 Mar 2025 04:01:12 +0000
Manifest this update: Sat 29 Mar 2025 04:01:12 +0000
Manifest next update: Sun 30 Mar 2025 04:01:12 +0000
Files and hashes: 1: 0X1Ipto9w1nE9eagzvuD9O-P6yM.roa (hash: 4sHYt9ffM1owRIY1+dPqOYaSkh7XHYwPkbzwcWqEjcU=)
2: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: AN8R5iXN07n1v2zkKevv9nd7rHD2KTKzKn2ong2TITU=)
3: SQDJFyKznGtCKVmkEUnYaLhptpU.roa (hash: XEPlk5OXn/XLJYfgloRDlJ7X9N7ypjZHyh9xzsTH0Bw=)
4: gfOuYPIFKu1t4LchnV-tiQ23x_o.roa (hash: MaDF2nJtr0HdC25PICF1gfuevH1AQFouYi3XzrLGpak=)
5: lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa (hash: XMlSfbRCxrO9BsObz26QxJ616CDdqXCBLUK5IzvxZFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:95:6d:1e:c5:0f:5f:15:79:9c:8b:62:7b:b9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Mar 29 04:01:12 2025 GMT
Not After : Mar 30 04:01:12 2025 GMT
Subject: CN=1d60821539c629ac71fe6cd4777100c636f8ce2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:d7:10:13:9a:4a:de:8f:8b:08:4f:0b:9a:
4f:79:cd:e5:d4:90:35:b9:e3:ec:1f:0e:85:b8:31:
b3:4d:2e:2a:ef:a3:1c:36:43:5a:eb:42:87:04:11:
19:64:25:f6:b5:90:08:77:b8:36:7a:da:1b:9f:58:
ae:30:52:35:aa:43:cf:fc:16:46:e1:3f:ef:43:ee:
c0:a3:de:9f:83:8b:ca:a4:bd:83:f8:2f:ff:82:b6:
9b:e6:61:fc:11:f2:4c:ad:0b:48:18:3c:9b:28:2f:
6c:59:a3:4a:a4:fe:09:42:82:11:0c:54:ba:59:1e:
ab:b0:25:9d:55:03:88:e0:c9:1f:9c:3e:ad:42:f6:
10:a8:01:47:74:91:55:43:66:ea:9c:30:39:46:16:
46:e2:a8:e6:fd:c8:a2:cd:65:df:df:e9:83:94:a9:
ac:8a:d1:30:37:07:bf:03:15:02:d1:c4:21:ee:2f:
da:7d:2b:7d:45:7b:bc:10:dd:cc:24:39:e7:4c:7f:
bb:e4:06:6b:0c:f0:26:f7:b9:c7:8b:54:a2:5c:29:
10:db:fd:4a:2d:bc:08:7a:b2:40:32:31:d8:0b:01:
cc:72:a7:25:2c:e8:7c:cf:b2:91:d5:2f:81:ca:19:
78:d2:9b:c9:27:6b:ec:73:ec:7e:3b:d5:88:31:8e:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:60:82:15:39:C6:29:AC:71:FE:6C:D4:77:71:00:C6:36:F8:CE:2F
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ed:52:83:ae:d4:e4:09:fd:41:ac:75:ff:97:22:80:c9:c0:
95:82:cb:bf:8c:3b:3c:5c:f3:fd:0d:63:11:b8:76:08:cb:63:
2f:38:37:7d:5c:c8:26:87:14:08:cb:14:9c:31:78:be:34:e8:
7b:20:5d:1a:2f:15:e1:55:0f:c2:ce:e7:bf:32:b9:04:68:3f:
dc:e0:36:4c:16:d7:43:6e:c5:21:f6:a3:fe:1a:0e:1b:0d:9f:
65:70:d6:26:36:14:8c:6b:ce:14:87:ad:ce:ad:de:5e:3d:cb:
84:2f:53:c7:fa:d2:5b:17:f9:e5:ae:5e:e0:ea:c6:3d:e1:e0:
da:e0:83:b8:eb:65:63:d2:1b:91:df:14:dc:19:af:4b:e4:87:
3b:9a:4f:41:0a:dc:f3:d9:81:66:9f:28:8b:06:08:ce:6d:1e:
a6:9f:c0:66:68:2f:d7:05:58:71:84:55:a3:b7:6f:ee:6b:cf:
37:fc:00:f3:f6:d8:16:5e:7d:49:7f:92:d6:b3:c8:ac:1f:b9:
39:be:a8:94:75:d6:fd:5a:d6:98:47:26:ae:70:96:90:f4:42:
63:32:69:c6:de:88:92:d5:c8:d0:49:d9:e1:28:e4:89:9b:61:
37:23:38:17:57:47:4c:40:11:9e:f2:d2:9d:ff:10:c8:e1:d1:
3b:87:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:58 2025 by rpki-client