Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
File: M12DGvzJ10zPPuQKDraPmQhbmN0.mft (raw, json)
Hash identifier: pKivZJpOTV77tSyS0opVnS9wBk8AZqQUELtKzU2243c=
Subject key identifier: FE:BA:B3:C6:9D:B3:08:54:8D:12:B5:D8:F0:5D:91:C2:68:C7:2B:7F
Authority key identifier: 33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD
Certificate issuer: /CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
Certificate serial: 019541453CE3EE14DA4798670A308FA3AB73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
Manifest number: 0925
Signing time: Wed 26 Feb 2025 08:00:11 +0000
Manifest this update: Wed 26 Feb 2025 08:00:11 +0000
Manifest next update: Thu 27 Feb 2025 08:00:11 +0000
Files and hashes: 1: M12DGvzJ10zPPuQKDraPmQhbmN0.crl (hash: /JsPaNswNwBMCa2P0YZeQTnvK7c00igArfeqN0rXPiY=)
2: R9RvWbhDm0SQa4wbE9QSWeXh3Vk.roa (hash: ErtYPmRmXoAaumaJ3Qu1+zPb7HB9aNdfUQEtd+bYSjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:45:3c:e3:ee:14:da:47:98:67:0a:30:8f:a3:ab:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
Validity
Not Before: Feb 26 08:00:11 2025 GMT
Not After : Feb 27 08:00:11 2025 GMT
Subject: CN=febab3c69db308548d12b5d8f05d91c268c72b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:28:2f:5d:de:cb:92:83:2d:69:39:76:52:
cf:ee:8a:75:17:ee:27:2a:c1:28:6f:12:b0:65:b7:
b6:a5:5e:17:7b:7b:a2:8d:9e:1b:bd:8d:a8:fc:31:
37:89:42:df:cc:10:e9:4d:90:20:6d:72:6e:ce:1c:
31:08:83:57:ad:8d:42:c7:16:c4:bf:76:28:a9:60:
74:65:68:ea:31:73:a2:01:13:4c:79:1e:7d:c0:21:
1d:88:53:70:6e:4d:a7:54:37:4a:39:9d:b1:92:26:
2e:a6:7c:c7:e7:fc:b1:ae:2e:60:32:5e:a9:2f:8b:
04:99:a1:d8:af:27:d2:eb:90:86:c4:8d:9e:57:2f:
0f:e2:9c:26:6c:98:78:cc:3b:33:f5:07:f6:4b:49:
ca:6b:a6:5f:a5:2a:62:49:68:81:89:63:29:d0:1d:
78:29:09:d7:a9:fa:73:c7:2b:c2:0d:e8:6b:e1:6b:
5d:89:a3:08:ac:e0:91:cd:38:85:f2:09:6f:2b:a5:
96:0a:7e:bb:80:69:26:3d:f6:83:70:bd:a0:07:e4:
e0:d0:cd:98:58:15:f3:60:7d:d2:15:fb:1c:bd:fb:
8e:79:90:67:a8:89:a4:21:be:fc:ec:4a:dc:18:a5:
ca:23:4f:96:3a:ca:7e:5a:a0:e4:83:08:6b:55:05:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BA:B3:C6:9D:B3:08:54:8D:12:B5:D8:F0:5D:91:C2:68:C7:2B:7F
X509v3 Authority Key Identifier:
keyid:33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:57:81:a0:49:33:fb:e3:cb:57:d0:25:f2:de:0d:6b:6b:68:
0e:86:53:7b:76:6a:bc:4b:97:bf:c9:5b:8e:eb:74:64:ea:e6:
7b:f4:ff:84:6b:20:9d:88:d5:fd:35:32:09:1a:9a:a5:5e:b9:
b1:c5:f8:ef:f2:9b:a7:7f:2c:89:15:98:42:7d:79:24:fa:08:
70:97:a3:c0:88:bb:b7:1f:ef:25:f9:62:14:ff:9e:08:ec:76:
ed:3b:c5:a8:41:bd:4e:40:d2:00:94:e0:31:c9:2c:ad:97:91:
89:49:9c:49:25:6d:95:1d:32:aa:08:b9:10:95:54:8b:b4:08:
18:a4:b0:dc:fb:24:6f:e1:f0:f1:a3:85:52:7c:88:4d:84:ca:
8d:e7:5b:b8:9a:a8:0f:d5:2a:65:57:99:e1:6b:ae:88:e1:7c:
b6:e3:27:b9:fc:76:99:d4:53:5b:ef:75:53:5c:99:9b:0b:4f:
ca:e4:14:f1:78:c1:99:c0:8e:0d:5c:40:81:8c:18:fc:63:f6:
4b:df:d5:31:46:cd:c7:07:97:00:d2:54:68:25:62:4b:f9:76:
bf:ad:37:9a:d3:a6:61:fb:31:88:22:20:de:18:a9:72:29:f4:
0f:46:af:b4:8f:1f:c6:f9:38:f9:c9:18:ed:86:01:24:e9:15:
a5:b5:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:40:18 2025 by rpki-client