Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
File: sHATRrrVXff13IGLu7z7t9sQcKs.mft (raw, json)
Hash identifier: vTO8YnM7Df16U2lHi1G+rotrs0ORJZ9iiC+qsXzJuwU=
Subject key identifier: 95:34:80:B0:4C:AB:45:FE:CF:F9:05:2B:A7:06:7A:D9:27:8B:EC:9B
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 0195E190269C3A5BFAF4151305D879ECF96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
Manifest number: 0696
Signing time: Sat 29 Mar 2025 11:01:15 +0000
Manifest this update: Sat 29 Mar 2025 11:01:15 +0000
Manifest next update: Sun 30 Mar 2025 11:01:15 +0000
Files and hashes: 1: 2vj5B04hPRrl36o4PSEreNmSh7Y.roa (hash: IJqTeCNZ6pF/BafJ55wl0YbKPxsnvPNim6xG4D9/f0M=)
2: sHATRrrVXff13IGLu7z7t9sQcKs.crl (hash: D0HVHYJ2SASYDjZfk2aHeQSxFs0g/PsTYJ5xPNCAZog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:26:9c:3a:5b:fa:f4:15:13:05:d8:79:ec:f9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Mar 29 11:01:15 2025 GMT
Not After : Mar 30 11:01:15 2025 GMT
Subject: CN=953480b04cab45fecff9052ba7067ad9278bec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ae:36:d8:6d:93:62:cb:bc:a4:d3:00:88:98:
64:ee:ff:d8:43:fb:6b:2f:30:58:40:b3:0d:c8:20:
68:c4:33:38:90:7c:05:44:88:31:6b:ff:87:33:8d:
b1:25:95:19:85:71:3e:41:c1:04:11:cf:07:d2:ff:
d5:4f:ac:db:23:f6:91:1c:d4:5a:61:40:33:ff:dd:
37:03:10:a9:f8:e7:08:70:4a:3b:38:c7:2b:01:68:
19:9d:94:08:d3:fd:30:11:b5:18:70:eb:53:3e:27:
62:15:3b:d1:4f:67:f0:90:ba:04:4f:bb:94:56:0b:
e1:e4:a3:b6:03:1c:3a:88:ac:cf:3f:ad:6d:3b:40:
fb:55:a9:00:cd:2c:51:c2:d6:a9:e8:ca:31:a7:a4:
e0:57:5b:74:6d:33:57:70:b5:19:fa:a9:7e:6e:70:
f6:d9:5e:e0:dc:5e:64:77:8f:65:bc:8c:2c:f2:25:
73:52:2e:54:59:5a:cb:ea:d7:74:a2:d6:29:18:d3:
dc:cc:af:f3:72:0f:5a:f7:52:56:e9:8a:b8:88:23:
9a:a0:a2:ec:63:ff:e9:00:bc:27:03:60:f8:e2:17:
2e:4a:05:5a:a3:4c:e0:bf:9c:19:ad:95:7f:69:16:
ec:82:20:f3:72:e3:48:fa:30:21:ec:ff:fe:e7:3f:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:80:B0:4C:AB:45:FE:CF:F9:05:2B:A7:06:7A:D9:27:8B:EC:9B
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2c:15:70:5b:16:3c:ab:65:8d:11:28:75:91:ea:88:71:c6:
4b:5b:b5:de:87:6a:a8:69:81:77:cd:c1:e2:60:fe:8f:f0:b5:
9d:1e:e8:a1:82:20:d1:d7:6f:c4:1a:4e:b1:b3:0b:2e:1d:ca:
41:e0:92:81:a4:8a:52:8d:67:ba:77:36:70:a2:98:78:df:64:
8f:6d:70:df:c6:db:8f:0f:27:fb:7e:97:e8:e2:3e:2f:0f:e9:
84:f4:60:59:8b:ef:37:b5:cf:18:2f:ce:60:88:4d:a7:a3:28:
73:85:2c:a7:1a:a5:98:e3:68:f0:9f:2f:e5:60:16:7f:4a:ed:
dc:ca:2d:f2:45:f3:66:59:9f:db:1f:ba:76:52:a2:09:f0:85:
e3:62:50:e9:33:64:50:55:f7:68:55:1e:4b:c9:1c:83:c7:10:
08:30:29:66:19:1e:05:19:75:6a:95:7f:f9:92:99:22:57:07:
23:34:fe:83:4d:d1:60:90:c0:f3:62:1b:35:11:bc:5f:84:2f:
cc:2b:9b:c0:76:f9:dd:e6:8f:47:31:92:c8:21:48:fb:c9:78:
9f:72:8d:93:63:f2:45:79:8e:49:79:c5:fb:83:ae:f6:5f:13:
a7:d3:e4:55:94:77:b7:cf:c1:d7:f2:b0:f4:c5:c6:eb:88:6d:
26:e2:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:33 2025 by rpki-client