Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier: 6SUAt676TgXBcFExrVoERrPqUWnTlP9VL+Efbjl7oiQ=
Subject key identifier: B5:30:24:64:5F:B9:BF:17:04:09:1F:F3:BF:05:AC:20:DA:8F:19:B7
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial: 0195E1226888A751B39C59A60524EC3ED844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number: 149C
Signing time: Sat 29 Mar 2025 09:01:23 +0000
Manifest this update: Sat 29 Mar 2025 09:01:23 +0000
Manifest next update: Sun 30 Mar 2025 09:01:23 +0000
Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=)
2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: 0t2ccLpJQ25G6gyNzK6MnpLvDcRq/24beesvR45Cff8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:68:88:a7:51:b3:9c:59:a6:05:24:ec:3e:d8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Validity
Not Before: Mar 29 09:01:23 2025 GMT
Not After : Mar 30 09:01:23 2025 GMT
Subject: CN=b53024645fb9bf1704091ff3bf05ac20da8f19b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:21:f1:8d:7d:39:2a:f7:b1:ab:a3:b3:7a:
18:28:55:ce:5a:4c:05:06:af:d5:44:ca:cc:41:04:
85:c7:6e:aa:0c:57:7a:11:0c:ff:e0:ab:ca:bc:e4:
e8:fb:ac:90:31:f0:bb:02:1d:37:5b:30:68:3b:9b:
d4:1d:78:4f:6e:c8:b8:75:cf:66:e2:2b:e4:0e:14:
74:1e:68:11:22:3b:6c:c4:08:d6:d6:56:ed:64:14:
f9:f3:50:36:2e:dd:d0:79:ad:1f:4c:d7:3c:64:b2:
f4:82:17:84:97:e3:7d:22:c8:6a:b6:65:1f:1f:c0:
45:0f:2c:88:2d:7f:1a:64:f2:8a:ce:ea:e5:5f:5c:
4a:01:96:bf:02:51:4f:c7:f1:28:60:b7:fc:55:c4:
50:e5:81:79:39:74:90:0c:3f:09:c7:c3:97:9e:19:
76:64:61:ab:35:51:f9:19:8e:6a:59:82:a7:72:73:
0e:5b:19:81:c1:b9:af:28:11:ca:08:c5:2c:2d:47:
5d:f4:1a:86:8a:5a:7a:0a:59:64:25:e1:f5:f9:66:
da:39:21:6c:44:b3:25:c2:98:af:c3:71:6c:3b:1a:
8e:bc:13:52:b2:b1:81:d4:f0:c6:86:39:b6:e7:67:
b2:b3:8f:9b:5c:b9:45:fc:22:0d:5b:2d:ab:b6:2d:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:30:24:64:5F:B9:BF:17:04:09:1F:F3:BF:05:AC:20:DA:8F:19:B7
X509v3 Authority Key Identifier:
keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c7:5f:25:66:e6:93:84:53:17:97:08:08:03:e1:4f:ff:e4:
e1:59:31:96:4d:4b:99:34:48:97:2b:69:e1:71:c1:f3:bd:b3:
ab:1d:6f:de:74:ac:30:6d:55:72:43:24:b8:f6:62:89:51:dd:
37:b5:21:1c:a0:8a:d3:14:99:18:e4:0a:f3:c8:c9:01:c0:67:
ae:31:ed:7b:06:9e:ef:0f:49:ce:a7:b9:85:cd:b4:d4:53:ff:
a2:68:0b:08:3e:37:28:68:a8:48:56:51:d9:46:0c:5b:8c:97:
aa:f7:10:e6:84:66:d3:0a:e2:bd:4b:6d:90:32:1e:55:e9:6c:
7c:0d:5f:ac:9a:4a:7e:9c:40:10:4c:50:e8:a8:e3:28:09:2c:
df:1e:1b:e1:5b:75:e6:e0:8c:6d:15:98:ad:92:7d:d8:7f:9a:
05:4b:ed:be:07:97:cd:57:df:58:f3:db:c1:18:a2:88:ce:e0:
b4:6d:2c:f5:d7:dd:a9:fa:6f:c7:1f:2c:73:e4:5d:e3:7a:d9:
3f:78:53:79:60:f0:38:ab:cc:0e:9c:7a:d5:62:9a:91:43:ff:
52:0d:76:71:5b:56:ff:4a:52:bb:fa:cc:3c:68:76:20:0b:8b:
33:0f:a9:fb:92:bd:5f:a3:7e:20:ba:f0:f6:49:db:03:e5:b4:
54:f1:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:38 2025 by rpki-client