Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier: vhEqOnZ5/j+LcANfIN4jzvtHNVzBD+haZYa9E23CpLg=
Subject key identifier: 64:44:7E:EE:61:7A:E8:AC:38:05:78:32:78:0E:7A:7F:86:B4:A7:14
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 0195E0B415ADFD3FFD8B434FDAE963B3D05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number: 0533
Signing time: Sat 29 Mar 2025 07:00:53 +0000
Manifest this update: Sat 29 Mar 2025 07:00:53 +0000
Manifest next update: Sun 30 Mar 2025 07:00:53 +0000
Files and hashes: 1: 0FvyRdwuNrCgMP49Gm05_Jf24wo.roa (hash: VrNtxHJD5r4AAcIekiYzDFEjX0OLNvQVaPqP96ejauo=)
2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=)
3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=)
4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: vYvIejh3JkyaoV9ZaDBfeVJxXQ00rywPKSHayTaI88w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:15:ad:fd:3f:fd:8b:43:4f:da:e9:63:b3:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Mar 29 07:00:53 2025 GMT
Not After : Mar 30 07:00:53 2025 GMT
Subject: CN=64447eee617ae8ac38057832780e7a7f86b4a714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:0c:b2:b2:77:5a:83:21:99:f4:10:ac:27:
65:98:cf:c9:6f:27:dd:0c:00:ac:4d:d5:32:4a:32:
45:8f:2c:4c:9b:b9:e3:e2:46:29:9a:d1:3d:f0:e0:
75:83:fd:df:67:07:2f:e4:06:f5:6c:76:bb:4f:3e:
11:da:af:4b:7f:1c:50:5f:2b:b2:53:97:5f:77:68:
f2:0d:b1:03:0b:1c:74:62:a4:e0:96:c6:78:3d:76:
ba:eb:47:89:d6:a3:ba:78:de:d8:c6:6f:56:4c:32:
c5:0a:fe:56:49:af:0d:90:d2:7c:99:ad:69:3e:94:
dc:00:31:79:15:42:d1:cd:d2:73:64:8b:7a:e5:e2:
e4:e7:ff:e7:31:95:30:ae:82:4b:5c:80:d6:d7:34:
d6:c0:6c:c9:66:c9:28:8e:4f:22:d9:3e:50:b1:6b:
c6:25:64:36:65:3c:45:65:4b:4f:05:7d:2e:39:ce:
3b:8f:43:32:6e:4f:6c:58:50:5b:1a:48:29:9a:1a:
75:4d:6e:d3:07:93:b7:64:64:ce:ab:50:70:fd:76:
ff:b1:f3:c0:6a:65:cb:ce:a2:0d:9f:27:49:cb:e3:
48:dd:3c:cc:a3:26:7e:f9:7d:d7:f4:15:dd:ba:de:
8d:ad:d2:ae:05:9d:d8:bb:31:52:59:85:30:55:4b:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:7E:EE:61:7A:E8:AC:38:05:78:32:78:0E:7A:7F:86:B4:A7:14
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0b:28:38:76:bf:92:a8:13:cf:86:8f:62:16:5a:e4:5c:39:
1e:30:91:60:00:50:55:0f:80:a2:6b:48:75:a3:36:53:4c:3f:
41:2b:c0:f9:0d:84:4f:33:63:74:da:17:70:be:01:e5:ae:d6:
cf:d2:f5:05:ea:84:00:5c:46:b6:90:80:0c:86:33:e1:66:5b:
f9:c7:80:93:2b:74:ae:b5:88:a9:6d:ce:08:81:d0:c4:32:b1:
9a:72:59:6f:d9:9d:c7:d4:93:af:00:fb:6d:22:e4:03:2b:a0:
94:9c:53:d1:14:19:9c:d1:7e:6e:99:57:be:9f:7e:17:e0:12:
0e:bb:37:ee:4b:f9:bc:be:5a:72:a6:db:ce:15:21:b0:c3:59:
b0:f5:40:50:fb:ee:c5:49:3d:f3:05:14:a4:83:8c:2c:e2:eb:
b9:38:e5:ed:71:8a:e9:f6:d8:a1:6b:1d:41:38:c0:93:b8:99:
48:e2:bc:1c:a2:72:b6:2c:99:68:d9:25:ed:41:03:db:57:a0:
68:98:f5:9b:82:5e:4e:19:13:7b:75:e5:82:b0:b0:fa:35:cf:
e0:c7:80:09:41:46:99:88:66:48:d1:d4:29:b1:62:62:00:0e:
3c:8c:88:eb:00:d6:cd:a6:3f:df:3a:7f:3c:a2:4b:a3:06:80:
08:21:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:25 2025 by rpki-client