Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
File: Sojzq5SgdYciDj1xb3txffHZ5tY.mft (raw, json)
Hash identifier: /oUyHdVHJhV1TPIVkwQQjo8PSDjRLR5M3B3TJh6dU64=
Subject key identifier: B9:6D:66:75:75:2E:A5:D6:4B:5A:23:5E:C4:B8:A7:92:BF:A4:2B:27
Authority key identifier: 4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
Certificate issuer: /CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Certificate serial: 0195E07D529A7D1918D1F9A302A9B4C44265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 06:01:04 +0000
Manifest this update: Sat 29 Mar 2025 06:01:04 +0000
Manifest next update: Sun 30 Mar 2025 06:01:04 +0000
Files and hashes: 1: Sojzq5SgdYciDj1xb3txffHZ5tY.crl (hash: /OT4b7n6MzNApNTgSjKtfJC1wLmuj/P/TDGSnO7JXjE=)
2: W_W3DuCdWyh1NhDi85D3Q1QNefk.roa (hash: 0G53Kptl2wm5MoiuZgZ3O3JVe7MUe/aT5XxcnGYEqVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:52:9a:7d:19:18:d1:f9:a3:02:a9:b4:c4:42:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a88f3ab94a07587220e3d716f7b717df1d9e6d6
Validity
Not Before: Mar 29 06:01:04 2025 GMT
Not After : Mar 30 06:01:04 2025 GMT
Subject: CN=b96d6675752ea5d64b5a235ec4b8a792bfa42b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:ca:41:55:35:a8:41:20:14:19:eb:e4:43:
fc:af:34:6d:d2:fe:27:fd:c1:9a:84:6f:3e:07:f2:
4e:8b:d7:c9:90:da:3c:59:43:f3:fd:d4:58:96:88:
4d:9f:8a:0e:ad:ab:f2:67:c9:af:61:d0:22:8a:9a:
6f:42:43:62:7b:0b:da:47:9a:bc:26:a1:b7:69:a6:
b4:f6:3c:70:bd:54:ab:19:c1:72:b7:04:47:c9:5e:
a8:b2:7e:44:74:97:06:0a:8a:4f:3f:63:05:9d:43:
81:0e:16:4e:6e:67:c4:c3:14:ea:81:aa:ca:fa:ed:
70:0e:37:e4:bf:6c:4e:a4:a1:b9:19:02:a7:22:b8:
95:0b:0b:9a:fd:fe:67:f7:25:55:91:ed:c0:68:3f:
87:eb:8a:8d:44:9b:5d:53:4d:30:82:10:65:39:5f:
15:4b:68:18:59:e4:53:0f:6a:7c:b2:4a:f4:b5:68:
07:ba:f1:2d:e2:19:9b:28:33:99:60:16:80:99:f1:
2d:f7:1f:dc:ca:c7:88:dd:cc:0b:b1:59:ba:ae:00:
cc:ee:7d:98:26:93:a9:3c:bc:47:6a:13:b3:ea:84:
0d:07:53:a0:d9:74:0b:7f:29:cb:9a:6a:f9:9b:7f:
5f:2f:86:bc:2a:17:66:5a:de:fa:28:85:f1:fc:88:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6D:66:75:75:2E:A5:D6:4B:5A:23:5E:C4:B8:A7:92:BF:A4:2B:27
X509v3 Authority Key Identifier:
keyid:4A:88:F3:AB:94:A0:75:87:22:0E:3D:71:6F:7B:71:7D:F1:D9:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sojzq5SgdYciDj1xb3txffHZ5tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/936dd2-0c9a-48e9-aa71-d4519c539c9a/1/Sojzq5SgdYciDj1xb3txffHZ5tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:0d:57:16:95:e0:9f:8a:8f:a6:9c:6d:a2:7b:42:98:32:
fd:bc:25:02:f8:bc:c8:b3:e6:9e:3e:d8:04:02:84:e7:b7:d3:
2f:11:33:eb:a4:4a:bc:fa:9c:ed:12:00:a0:93:79:54:42:0b:
b1:64:de:df:25:7f:02:f3:ae:c0:15:f1:fe:b6:69:27:53:6b:
91:39:ec:36:0f:22:6e:70:63:b2:7e:2b:13:0b:4b:37:0a:16:
22:1d:83:79:42:2a:18:62:a8:c0:9f:47:02:17:4a:36:ee:1c:
83:59:1a:7a:d8:ad:71:bb:2c:5b:05:f5:73:ae:c2:bf:32:76:
9e:2e:d6:58:09:e9:16:54:e0:0d:48:b8:01:21:85:3e:38:4a:
77:02:70:da:bb:e1:b0:0d:c8:ef:88:18:fd:13:89:b3:49:a3:
d5:1f:ff:22:a8:60:21:a6:cc:d9:56:af:a4:7c:ac:7e:3d:8d:
2f:d8:76:56:6c:c5:3b:ab:d0:27:74:fc:49:1b:89:4a:1c:40:
63:68:53:1e:57:cc:37:a4:80:13:a0:aa:11:a2:cf:5f:7e:3c:
83:5e:fd:fc:12:0b:68:52:e5:b7:e9:91:83:f0:d0:76:29:72:
e0:8d:09:1f:7a:8d:00:ab:7d:96:d3:0d:af:b4:4f:d2:02:97:
05:8a:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:27 2025 by rpki-client