Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: 4fR9+6m2lpJT3A/U6Na51jNJ2DQ5t0XbpxF0e/oRSH8=
Subject key identifier: 8D:85:7A:90:D7:74:25:11:3D:C7:91:37:D5:71:40:AA:FF:B2:42:B8
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 0195E159E529D47F2F4BD3C2F11475A9B5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 10:01:59 +0000
Manifest this update: Sat 29 Mar 2025 10:01:59 +0000
Manifest next update: Sun 30 Mar 2025 10:01:59 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: f0bNos3bdO/mA5gg29rWjgX831GfQ+BqIdQHhZxuew0=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:e5:29:d4:7f:2f:4b:d3:c2:f1:14:75:a9:b5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Mar 29 10:01:59 2025 GMT
Not After : Mar 30 10:01:59 2025 GMT
Subject: CN=8d857a90d77425113dc79137d57140aaffb242b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:53:d5:79:4c:f1:c4:03:cf:ac:5b:90:8b:
7f:cf:d7:48:a4:ef:22:e6:0c:95:39:88:7b:91:ef:
47:46:35:17:64:72:0d:2e:d8:32:38:a7:90:fb:ba:
b7:ea:ff:df:4c:36:fb:a9:20:0f:02:79:c3:1b:d4:
fe:d0:bf:a4:8d:5b:72:a4:a3:6d:a2:ad:6f:f4:cd:
32:d9:a8:3d:9f:3c:fd:5f:dc:74:d3:ad:08:70:bf:
b0:2b:fa:48:cc:d6:6d:0c:bd:e8:65:1b:b5:db:63:
16:b4:f6:be:bb:11:9f:76:63:26:f6:26:07:ea:63:
68:39:0c:45:4e:15:62:4a:6b:60:20:89:0d:1d:dd:
39:2b:41:60:a7:ef:23:6a:e4:74:ef:14:ab:ea:f2:
b8:c2:48:0c:74:69:e7:fd:7e:da:51:7f:71:20:14:
33:b0:98:7c:ed:a9:6d:89:89:f5:28:c2:46:44:5e:
68:e9:c6:e6:7a:79:45:e6:91:7f:f9:b2:e0:73:10:
e4:b0:80:2b:2f:cc:15:44:8e:fe:7b:82:e9:22:8a:
b4:aa:19:c7:3f:bd:e5:e8:52:6f:d5:29:21:2e:80:
e8:1f:44:7f:7f:5a:95:04:66:bd:42:0c:58:6e:55:
43:a7:79:91:1c:5c:14:32:0c:be:0d:3b:b6:52:82:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:85:7A:90:D7:74:25:11:3D:C7:91:37:D5:71:40:AA:FF:B2:42:B8
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8c:81:b5:74:fa:56:9a:a5:78:b6:85:f0:56:a5:eb:d4:97:
a1:c0:58:af:90:3a:ae:db:8c:ff:5d:fb:a2:36:e3:d4:1e:2a:
33:a1:bd:84:29:4d:70:d5:4a:e7:eb:80:14:8c:02:4c:d2:86:
04:62:35:de:b5:76:50:da:7d:c7:be:fe:09:8c:31:b7:59:02:
16:dd:11:87:18:7f:3f:e1:94:8d:53:b4:97:65:b4:cb:36:d6:
70:56:20:5a:f6:d6:e4:c7:af:88:02:7e:a2:a5:1b:45:03:9e:
c8:13:db:fc:c5:fa:99:2b:73:72:5d:02:08:c2:aa:0a:2c:08:
3f:65:b0:55:03:6c:bb:8d:d7:ae:38:59:90:3e:40:ae:5f:c4:
7e:2c:76:38:8b:01:03:11:b6:ff:b0:5c:d4:a0:fd:ed:ee:cf:
d1:24:24:fa:1a:34:29:e7:67:96:d2:77:74:f4:66:47:b3:65:
98:93:89:f2:10:f6:2e:84:94:bc:cb:fd:b4:9f:7c:25:e8:77:
e8:6f:30:3d:48:86:09:e3:dc:39:04:45:4d:67:e0:fb:c3:91:
0d:eb:42:6d:71:54:06:8e:75:c0:15:c4:f7:43:14:06:94:8d:
00:e0:b7:d5:c4:0a:7c:2a:25:71:38:d7:9c:3e:4f:7f:85:4d:
03:cb:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:05:01 2025 by rpki-client