Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
File: D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft (raw, json)
Hash identifier: 8QYxbqgORb6WWZShoQ3+Dytg3DIcVjcItBwVrJWLmDw=
Subject key identifier: 4E:23:07:41:4A:A3:9F:08:1C:99:96:49:75:77:52:85:97:23:45:7F
Authority key identifier: 0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
Certificate issuer: /CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Certificate serial: 019514DA6BAF5B85A05AA75F7CEB43548973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
Manifest number: 145C
Signing time: Mon 17 Feb 2025 17:00:13 +0000
Manifest this update: Mon 17 Feb 2025 17:00:13 +0000
Manifest next update: Tue 18 Feb 2025 17:00:13 +0000
Files and hashes: 1: D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl (hash: VVMm0nBUIhC7n463x/GEfqcuH9wvDRNLpJMsmAj+Khk=)
2: PuHdQeDappRzDRm2Yyr-4eDAbVk.roa (hash: KGFP0rzHxbDYdX45bSQF+vCgYcGUoxOEmhLFhQ5K8ZI=)
3: VUuhainjhcYV5YRCiyXmkzZq9Bw.roa (hash: sqr3lmMmKZCw5Sb02g6kZwXmBiAXlMXLjjLm6QDb9BM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:da:6b:af:5b:85:a0:5a:a7:5f:7c:eb:43:54:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff8f94454f6ca6a7d70be455b2d6405f98fbcce
Validity
Not Before: Feb 17 17:00:13 2025 GMT
Not After : Feb 18 17:00:13 2025 GMT
Subject: CN=4e2307414aa39f081c999649757752859723457f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b8:35:76:3d:a8:8f:9d:81:1d:40:ce:8f:3b:
1e:77:8c:e4:cd:86:6d:0b:bb:83:7e:02:f1:04:7f:
87:a4:1e:72:1d:a6:40:17:12:13:02:ed:43:0a:d5:
7c:d9:8d:4d:0f:25:46:f4:5e:31:41:29:40:60:d2:
47:96:93:f5:56:08:56:ce:c2:07:a8:7f:d9:5a:58:
1a:e4:3e:d5:4d:f0:a5:86:fa:dc:42:86:cc:d5:2b:
c9:92:1c:d3:a8:83:19:2e:cf:e1:74:3d:7c:89:92:
ab:01:73:ac:88:46:1e:ca:d4:5d:a9:68:a1:f7:f3:
2f:33:7a:6f:6e:80:f1:a3:45:c9:16:2b:c5:ec:1f:
8b:a0:50:7c:98:61:86:1c:9c:17:6f:65:dd:06:7c:
ce:7d:77:cf:9c:ce:8e:30:60:26:d4:69:06:c5:a8:
90:9f:e4:82:17:8a:1f:e3:19:48:48:02:5e:c9:75:
ad:79:6f:93:64:92:16:70:2a:d3:6c:90:48:5b:a4:
ce:0f:06:4b:ff:fc:b3:15:c3:39:7a:f8:ce:0d:cb:
dd:e8:59:a7:db:fc:6f:11:f2:f2:0e:62:44:1f:e2:
42:3a:6b:84:0a:01:ec:3e:e2:5d:7c:6f:ab:5c:01:
0e:07:77:80:0f:68:36:83:ef:1e:97:31:0a:e5:4d:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:07:41:4A:A3:9F:08:1C:99:96:49:75:77:52:85:97:23:45:7F
X509v3 Authority Key Identifier:
keyid:0F:F8:F9:44:54:F6:CA:6A:7D:70:BE:45:5B:2D:64:05:F9:8F:BC:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_j5RFT2ymp9cL5FWy1kBfmPvM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1b1df-750a-4732-b783-e8619aa75680/1/D_j5RFT2ymp9cL5FWy1kBfmPvM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:46:6d:bb:be:d8:bf:f9:e0:b7:a4:1d:c0:75:42:a9:29:2f:
94:cc:5d:a9:db:5b:d7:db:01:8a:84:88:c9:93:3b:97:de:fb:
36:33:98:5c:c5:1f:1d:4f:ea:aa:24:15:26:36:83:14:ce:62:
fa:c1:09:3d:a5:2e:16:be:f1:e8:a4:ba:48:9c:7b:66:e7:b7:
08:ea:81:45:e6:24:96:cb:ae:88:82:76:4d:ee:da:7a:47:6e:
ed:c1:b8:52:37:8a:50:7c:47:87:b7:0b:b4:71:52:9e:78:ed:
68:7f:ac:2c:ba:d8:ed:c5:8f:cb:0e:bc:b7:e6:fe:b8:1b:ff:
9e:a7:e6:66:e3:a8:ef:bf:7a:6d:39:10:d0:d1:fd:c6:18:e0:
48:99:9b:b3:4d:c3:78:a4:7e:26:e2:b9:1b:3f:7b:b7:ec:d1:
16:ba:55:a2:dd:d1:33:3f:9e:b0:a5:a7:75:e1:3a:d0:c8:17:
51:45:e5:2d:4a:59:a5:39:06:2d:50:91:39:d6:79:4f:d1:7f:
a9:ee:92:62:ce:a2:a0:44:b7:52:7f:ba:fc:5f:e1:25:fa:91:
82:cb:cf:be:06:78:12:e7:60:ab:1d:d9:73:13:10:88:ee:74:
4a:36:55:e2:66:e1:45:cd:c5:8c:a3:67:17:17:a0:bb:44:77:
53:f6:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:18 2025 by rpki-client