Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier: 19ACiCF48RmPP15pkGKdBgRy636faxnQ5iCY6KPwmvc=
Subject key identifier: F5:CF:03:F0:6D:FE:71:09:F4:37:07:CC:9F:BD:58:88:26:03:3B:83
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 0195E1598C63EF00CD4F947C69E640421BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number: 01C5
Signing time: Sat 29 Mar 2025 10:01:36 +0000
Manifest this update: Sat 29 Mar 2025 10:01:36 +0000
Manifest next update: Sun 30 Mar 2025 10:01:36 +0000
Files and hashes: 1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: yx5DYxIPMT2HGwnmbV1WTUZse7f1BNUxBQPNnLzMFcY=)
2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:8c:63:ef:00:cd:4f:94:7c:69:e6:40:42:1b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Mar 29 10:01:36 2025 GMT
Not After : Mar 30 10:01:36 2025 GMT
Subject: CN=f5cf03f06dfe7109f43707cc9fbd588826033b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:fa:9e:9a:14:b1:78:b3:55:d4:91:f6:b2:
5f:4c:dc:85:b3:df:24:80:a0:59:1b:de:a9:cf:a3:
30:77:52:dd:eb:7f:a9:64:0e:45:42:ef:fd:4a:86:
9f:21:f9:92:41:d2:eb:df:4d:22:1f:be:8b:f5:fc:
1e:37:48:99:30:8d:1a:2b:56:25:d4:b2:07:51:06:
78:6d:f9:80:2b:b4:f9:ec:81:55:f9:73:89:e7:e8:
b8:68:d2:53:7f:06:fd:d3:6d:6a:44:43:35:33:e4:
37:32:f8:d9:ce:e5:6f:8c:2c:54:49:0f:63:ab:65:
b0:cb:52:de:9d:8c:ee:c7:94:c0:4d:42:a1:84:89:
5d:d3:a4:dc:a9:13:5f:e5:23:f3:c9:a0:2c:9f:a4:
7c:1e:7d:73:34:25:53:29:34:46:13:d4:66:df:a0:
f2:3d:c5:35:21:df:c3:ec:bd:c2:2f:0a:bd:f9:60:
1d:30:02:4c:97:62:72:f0:d2:3f:31:c7:19:d7:56:
f8:d1:ee:9a:7a:a9:f6:21:27:cd:1b:11:c0:d9:80:
c2:2d:b5:ac:66:e6:67:4c:d1:d6:1a:a2:2b:c0:3f:
87:0f:2f:64:81:cf:d1:3a:ae:df:32:5b:20:45:d2:
70:ed:7e:9a:fb:4f:52:4d:90:51:78:8c:c4:56:d8:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:03:F0:6D:FE:71:09:F4:37:07:CC:9F:BD:58:88:26:03:3B:83
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ee:e4:3e:ce:3f:5d:d9:4d:57:3a:01:81:c9:ec:13:f5:5e:
c4:ea:17:1b:d5:16:14:21:56:be:68:97:92:b0:cc:e9:1f:10:
f6:83:12:86:56:ad:f8:34:f5:45:d1:1b:60:90:d2:b7:c5:f2:
fb:7e:cb:f5:44:be:e8:37:b8:e4:84:c8:54:86:34:7a:2f:47:
e5:8b:73:67:bc:b9:51:e9:e1:56:2c:8c:1c:4e:a4:26:28:95:
f1:29:da:78:5f:aa:0e:be:59:30:54:36:62:21:40:0f:1e:13:
33:2c:c3:30:de:3d:74:66:ac:09:f1:f4:c3:13:06:7d:dc:d0:
1b:3e:f2:a5:1a:6e:58:c3:f5:2c:2f:0f:90:cf:80:49:3e:59:
87:76:96:81:ec:22:7f:f7:d2:ac:15:11:6e:a9:14:17:0a:20:
68:b9:c1:4c:4d:09:e6:95:f8:95:55:4a:27:90:7a:3d:3d:46:
66:12:89:ca:0b:2d:7d:d2:ad:67:e6:9f:4d:8d:e8:57:74:64:
e5:1b:10:fe:62:1a:46:66:ac:e8:9e:8f:a0:71:61:84:ef:bd:
47:91:73:f7:fc:b7:5c:9a:70:ae:a2:09:2a:00:8f:49:bf:a5:
1f:3f:2e:4b:65:7e:ae:ae:ef:d9:72:f1:6b:09:ca:00:5a:35:
78:8b:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:54 2025 by rpki-client