Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: i+jgVGF5CKA7EyZSjYw2hW6n/owAlpwveTg7W2Iy6LM=
Subject key identifier: 6C:8D:75:44:03:3D:57:35:15:61:AD:1E:57:CC:5D:33:0A:70:E8:D8
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 0195E046597505376B81AD52160923AD4645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 05:01:01 +0000
Manifest this update: Sat 29 Mar 2025 05:01:01 +0000
Manifest next update: Sun 30 Mar 2025 05:01:01 +0000
Files and hashes: 1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: BRkU+81wZnAmrnl6AoaWnyd0+t66Uh+sxy/cVMcXTAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:59:75:05:37:6b:81:ad:52:16:09:23:ad:46:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Mar 29 05:01:01 2025 GMT
Not After : Mar 30 05:01:01 2025 GMT
Subject: CN=6c8d7544033d57351561ad1e57cc5d330a70e8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:bb:27:6f:16:e5:95:67:a8:04:f4:8a:31:
82:b1:8b:74:50:99:72:85:2e:ae:31:f7:c0:c3:4b:
b4:65:a9:15:cd:31:59:c1:97:63:5f:ce:1f:20:a7:
52:81:43:dc:1b:5d:7d:d8:2c:5a:4a:08:3c:60:e0:
11:f7:fd:b3:86:ef:81:29:db:4e:d6:e9:38:da:aa:
69:8d:be:12:9b:ef:a7:b7:d9:95:29:ea:6d:bd:4c:
e7:40:67:f9:b5:8b:10:7b:2d:87:bb:7e:59:92:09:
26:a0:86:58:e2:52:2d:ec:76:e8:6b:0c:1c:0e:b2:
15:2a:88:75:b9:48:90:ca:27:cb:6c:7e:49:11:94:
02:8f:23:23:c7:ea:8c:c7:b0:d1:c1:fa:c5:f7:f6:
7d:42:2f:4b:a7:02:9c:ec:65:19:f4:43:18:5c:20:
b9:b9:86:4a:cb:db:68:05:5f:3e:7f:1d:96:28:21:
8f:6e:60:e8:89:8e:83:1d:99:1e:6c:e7:0d:e3:be:
a8:dd:40:d0:c3:2d:0e:a3:db:b7:ed:61:82:82:a7:
f2:ea:d7:ab:43:16:a8:6a:35:b2:f7:fc:d1:22:52:
6a:64:19:c8:7e:98:5e:83:e2:bd:30:de:8d:e7:ca:
21:06:02:56:47:18:27:ef:55:69:8b:4a:b3:6b:6e:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8D:75:44:03:3D:57:35:15:61:AD:1E:57:CC:5D:33:0A:70:E8:D8
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:14:fb:29:c3:40:97:f0:82:b1:2f:a4:c4:fd:83:fc:34:e3:
04:43:af:4c:64:f5:9a:44:a1:95:21:7d:bf:5b:4b:a3:7b:da:
1d:a1:bd:3f:43:76:9b:f0:fb:3c:71:c4:8c:d6:5f:d1:1c:fd:
01:54:43:85:52:f4:0a:85:dc:e1:79:b2:92:30:f7:ea:f3:d9:
54:0d:a0:78:40:2f:02:6f:da:7d:e9:23:8e:91:4e:f0:e7:da:
2b:62:87:c2:b0:5f:73:b6:82:41:ed:f4:d5:f3:06:96:b8:34:
6f:f4:be:bd:48:a5:ea:3c:93:35:0b:b9:b0:a8:93:f7:19:56:
e4:81:c5:9e:03:93:28:20:f5:41:62:9e:a8:71:96:56:6c:fc:
a9:c2:db:34:dc:e6:c9:9f:f9:c4:0d:54:3b:51:db:43:af:d8:
64:f4:d5:2a:c7:5a:40:a3:c3:af:2b:b9:ac:7e:27:9c:4a:60:
0a:d4:e6:61:18:20:0f:c2:af:a7:5b:0d:34:fb:09:87:19:9a:
05:95:40:e1:dd:30:67:8e:f5:4b:4f:e4:62:fc:62:0d:06:8f:
08:8f:94:bd:0d:8e:41:2f:88:1a:87:59:42:1c:90:50:44:76:
47:0a:c5:49:85:01:78:ba:89:df:ca:f0:1d:5f:ba:fd:19:13:
b4:d4:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:46:43 2025 by rpki-client