Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: pjoKjw3+oE/W5EKvLqYh3WptuV5mMwUPbxXALJldO/c=
Subject key identifier: D7:80:F9:A3:03:76:F6:0D:50:8C:BE:E3:D3:3E:45:52:09:BD:E8:6D
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 0195E12201B7777C8D80357C5FDA2759166C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 09:00:56 +0000
Manifest this update: Sat 29 Mar 2025 09:00:56 +0000
Manifest next update: Sun 30 Mar 2025 09:00:56 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: sK2HBBSZy+jp7MRaucTaohJYyRjanmTjTBwhJ0zR/bM=)
2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:01:b7:77:7c:8d:80:35:7c:5f:da:27:59:16:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Mar 29 09:00:56 2025 GMT
Not After : Mar 30 09:00:56 2025 GMT
Subject: CN=d780f9a30376f60d508cbee3d33e455209bde86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:dd:f1:a4:78:38:ae:d8:a1:6f:e7:a6:01:
29:79:1c:96:dd:8a:e5:c1:38:10:d9:ea:11:ff:65:
f0:1b:88:33:cc:ce:ce:12:d6:97:32:e6:1e:e9:fd:
27:37:ea:68:bc:42:46:64:df:80:e0:38:58:96:9e:
90:9e:2d:75:89:af:1e:3a:24:dd:f3:1f:59:fd:03:
ca:10:c1:83:df:29:1c:b5:0e:a9:b0:71:79:07:38:
2a:07:92:f6:02:c9:98:27:02:72:d8:5c:8d:84:2b:
68:78:3f:70:94:c4:22:ba:85:81:4d:fa:c6:f9:21:
fa:33:91:95:b7:5a:02:5f:f4:5c:6b:fe:60:ec:ac:
ce:f3:08:67:4e:a6:38:58:af:c2:6a:ed:3e:c5:ff:
7b:ee:36:87:5b:f6:d2:21:3a:b8:ca:ec:4a:d1:22:
2f:e6:81:ba:aa:bf:18:07:fa:7e:de:56:80:50:04:
42:f0:57:62:d4:fb:64:73:d7:5e:3f:eb:5f:bd:ae:
58:dd:33:19:5a:7b:72:84:f6:67:dc:03:e9:1a:b1:
1a:94:c5:93:77:9e:f5:92:a5:3d:35:e7:bd:cb:4d:
b6:78:7f:f3:e5:7f:8f:57:78:1e:ca:b0:50:22:19:
5e:2b:3d:ec:6f:6d:94:3d:5c:ec:e7:1c:a6:cb:15:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:F9:A3:03:76:F6:0D:50:8C:BE:E3:D3:3E:45:52:09:BD:E8:6D
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:41:25:2f:f8:8b:75:d6:b7:65:09:4c:4a:2a:bf:ad:75:cd:
75:fa:3f:01:a9:3c:1c:b0:15:cb:fa:d5:0b:02:03:54:4d:d8:
c5:ec:2e:21:a4:c8:45:e9:5b:5f:06:54:75:c3:cc:3f:af:f3:
fd:8a:a6:fa:d1:98:1d:8e:85:a8:83:b2:37:c9:ad:a4:02:e4:
5b:1a:5d:af:ab:94:15:50:33:a1:9f:9a:77:87:30:be:23:87:
b5:a0:97:1d:12:7a:23:bf:d7:02:c0:87:9d:9e:95:11:21:5a:
10:45:bd:5d:d4:3c:e1:af:83:5b:86:fa:f5:9b:87:87:26:02:
8a:c4:c4:bf:1b:1f:ee:f8:c1:b2:e0:79:dd:d4:90:e5:c7:5d:
c9:42:13:eb:fb:93:2d:8b:23:89:05:0f:1f:61:27:ef:8e:be:
b1:f0:ba:ed:0e:d4:97:d2:ac:e3:9c:44:34:15:2e:ca:af:d2:
34:6a:6a:56:ca:4b:f3:8f:c6:01:33:e2:8d:53:2f:a8:71:8d:
e5:89:e4:c9:27:be:11:1f:f8:78:59:0c:6c:3e:1a:63:23:1f:
bb:9c:e4:e2:7d:04:9d:79:4e:27:41:13:ab:c4:0f:03:07:77:
7d:5b:a7:8c:33:23:23:c5:58:ea:cc:aa:78:2b:16:f2:19:e7:
e9:c7:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:03 2025 by rpki-client