Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File: a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier: ffH8ecQ4uTHUMQ5/Svgm0/5T7i4npSvH4xdapK5EDK8=
Subject key identifier: DA:5F:BC:70:2D:E6:59:2D:16:FD:0B:C1:86:02:6E:41:99:7F:E8:EC
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial: 0195DFD8BDBC1FFF8B9E2ED81E34EB925E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number: 1395
Signing time: Sat 29 Mar 2025 03:01:18 +0000
Manifest this update: Sat 29 Mar 2025 03:01:18 +0000
Manifest next update: Sun 30 Mar 2025 03:01:18 +0000
Files and hashes: 1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: mp3QDR2QhMTuFKqlpYZHC0cAEt62nNjihrAEDDWSUAM=)
2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:bd:bc:1f:ff:8b:9e:2e:d8:1e:34:eb:92:5e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Validity
Not Before: Mar 29 03:01:18 2025 GMT
Not After : Mar 30 03:01:18 2025 GMT
Subject: CN=da5fbc702de6592d16fd0bc186026e41997fe8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:50:b9:9b:ff:3f:55:e3:23:64:aa:f5:f3:
2e:1f:08:91:1d:b5:ff:a1:1c:cf:a1:73:06:ca:1c:
f9:7b:08:39:52:69:0c:39:cd:ba:fb:e0:59:cc:4d:
7c:a8:55:0d:00:48:95:8d:e6:c4:55:72:04:c7:be:
e7:d8:de:23:ce:5c:bd:36:42:45:4d:67:f2:66:56:
97:da:b8:79:96:c5:12:a9:cc:c7:08:8f:01:62:c3:
e5:ed:e4:68:7e:b5:62:31:7f:c2:11:17:41:0e:6a:
5c:09:9e:ba:78:ea:38:da:b9:a8:9b:85:ba:89:31:
eb:85:6c:30:44:8c:4c:0a:0f:ab:63:e1:11:09:63:
09:80:80:90:77:a7:a5:f9:8f:2e:73:47:ef:4d:6a:
8d:66:67:ef:b7:cc:fc:c4:79:25:5d:35:ba:cb:b3:
ba:38:59:3a:02:8f:fd:43:75:82:62:bb:c1:a8:f2:
4f:1f:2a:11:f1:1c:4f:0b:8e:a3:a5:58:05:20:56:
6f:9e:52:e5:bd:b0:88:04:b0:2e:12:cd:71:6e:0f:
89:8c:f4:a9:0e:ad:6e:8b:82:d9:22:9d:01:47:09:
76:40:5c:a0:a1:9e:1b:ca:3e:df:62:4c:47:ad:15:
6b:36:24:f2:43:8f:3a:4c:80:dd:27:a2:2c:2c:7b:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5F:BC:70:2D:E6:59:2D:16:FD:0B:C1:86:02:6E:41:99:7F:E8:EC
X509v3 Authority Key Identifier:
keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a5:0d:9d:33:91:8a:24:46:4b:7b:e6:0b:65:89:fe:71:f1:
88:2c:4c:61:6f:4f:e6:ff:2b:17:ef:11:ca:6b:ab:bd:e7:fa:
b7:49:aa:55:e8:14:8e:30:39:35:db:da:03:9e:69:e7:41:7d:
be:8f:ef:ee:75:0d:ec:95:4a:17:40:76:25:d4:27:af:c3:d8:
c3:f2:2c:0e:54:62:da:58:f6:13:4d:53:d8:69:00:f7:77:0e:
af:8a:ec:4f:ee:ea:c5:5c:d5:39:6e:5c:c2:3e:73:01:17:c2:
1c:8d:06:54:31:bd:bd:b8:4f:99:a8:67:81:7b:91:84:97:74:
6e:8f:eb:78:0d:c3:03:5b:ff:24:80:c8:07:bb:6a:20:30:7e:
ce:79:71:9f:8f:37:b3:01:2e:0a:84:99:5c:b9:1c:52:e4:57:
80:e0:29:f4:f4:58:1f:e0:6c:df:8c:e3:9d:eb:0c:79:f6:bf:
77:29:e1:63:15:0b:f4:7c:4a:d4:8b:38:06:5c:e0:29:9e:ba:
a5:d0:56:64:9f:19:31:fe:d7:0d:36:76:20:51:95:2c:9a:69:
81:db:63:89:3f:29:74:98:d1:b9:4a:28:fb:09:a8:5d:f6:c4:
ff:6f:fe:c2:88:aa:73:cc:cc:a2:c8:8d:de:84:e9:f2:4f:65:
53:67:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:06 2025 by rpki-client