Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: pO6QU5QXWZbhXh1V+lTzhISJTtVdqQVP886wOis4Cdo=
Subject key identifier: 84:24:2B:7A:F6:7F:CE:93:8F:ED:B0:C9:4E:BB:D5:52:BE:39:06:7D
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 0195E07DA0D3AE86486CEDFF3BF344FAD450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0DFA
Signing time: Sat 29 Mar 2025 06:01:24 +0000
Manifest this update: Sat 29 Mar 2025 06:01:24 +0000
Manifest next update: Sun 30 Mar 2025 06:01:24 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: 04j+GFCiArFoENNBy4QTWQgmd0fdBRJ6GG/tsll0l4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:a0:d3:ae:86:48:6c:ed:ff:3b:f3:44:fa:d4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Mar 29 06:01:24 2025 GMT
Not After : Mar 30 06:01:24 2025 GMT
Subject: CN=84242b7af67fce938fedb0c94ebbd552be39067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:48:1c:4a:21:7a:43:41:05:2c:22:22:8c:
4a:d7:24:46:72:9e:bb:b8:79:bc:a3:9c:fc:5c:dd:
73:e8:46:50:06:7e:c0:46:48:50:57:f1:7b:36:45:
ce:24:11:72:7a:d3:f7:cb:e7:3a:8e:33:a7:ef:ef:
89:72:9b:94:fe:ed:e4:65:5e:da:39:9c:c4:50:39:
cb:06:45:dc:4a:49:77:16:89:f7:f4:48:05:c4:43:
47:75:08:2a:9d:75:7b:1b:05:29:7c:e8:41:a8:e5:
6e:34:9d:5b:02:8f:ba:7d:e3:eb:da:34:e4:7d:1a:
58:d5:ab:52:74:d1:c2:04:67:ef:73:5f:52:92:ff:
e0:b7:03:b6:9f:8d:8c:99:41:de:5f:97:71:00:38:
cd:9c:3d:44:5a:a2:ed:ba:a1:d1:4e:85:74:61:28:
6f:38:f6:24:3e:b7:ba:5e:93:70:9e:78:de:c9:e2:
71:4e:f4:ee:72:88:e0:c1:00:23:d1:de:e8:74:b8:
81:6e:4b:31:17:15:3f:0d:cf:4c:88:82:cb:5c:9f:
de:e5:f9:51:09:ad:31:ba:57:10:3c:36:81:c9:ab:
97:7d:16:5c:2d:44:6b:f3:bd:60:ff:be:6d:c9:20:
22:88:c3:a3:81:3d:df:bb:c9:80:a1:fc:54:5f:f1:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:24:2B:7A:F6:7F:CE:93:8F:ED:B0:C9:4E:BB:D5:52:BE:39:06:7D
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ef:96:b2:45:75:6b:94:b3:75:80:da:ef:cd:3b:14:d3:77:
0b:41:f9:ad:e3:50:5c:67:75:1e:17:bd:b2:27:f4:83:e9:31:
4e:e5:af:7d:3b:95:a4:aa:30:81:7d:5b:84:71:ce:98:50:56:
f7:7e:fb:f1:32:51:6f:0f:48:67:4e:13:6f:df:e6:8c:34:6d:
86:2e:14:d2:03:32:03:38:76:f3:0e:7c:f5:30:8f:ea:e4:b3:
d1:a7:cb:64:03:20:f0:6a:aa:6a:d6:87:0a:0c:49:ca:38:d7:
62:91:ef:d9:9b:bd:1f:bf:37:1d:4c:69:89:6f:f6:64:f1:96:
a1:64:19:bb:77:52:f4:62:e5:9f:db:63:38:16:a1:e2:61:bb:
4e:64:61:c1:bd:76:22:74:28:a9:9b:1b:35:5f:e4:ac:5a:fe:
61:83:9e:c6:1c:d6:33:d1:d8:81:02:b9:4d:bb:82:4c:22:d4:
bb:74:a0:0e:21:ce:7a:19:4a:55:67:fd:a5:c1:7b:6b:58:58:
ce:6e:6a:65:cd:73:2e:a8:a9:29:f5:93:89:a8:96:78:be:c6:
47:ef:cd:10:81:d1:f7:29:f7:2a:ce:ad:86:58:c3:95:4a:b2:
89:72:cc:33:03:ee:b7:e3:15:b1:93:cb:3b:03:92:b1:8e:3d:
e2:f4:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:44:39 2025 by rpki-client