Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: E9p0mBB+q2CV19zjcdUFRV1tpFZaqtFsWi70ImT9rxg=
Subject key identifier: AD:83:A1:1E:CA:C3:AF:76:CB:9D:12:A6:AF:40:B3:BC:51:3E:26:29
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 0195E1227F440D751E3D9D6BA4726AE4DC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 1024
Signing time: Sat 29 Mar 2025 09:01:29 +0000
Manifest this update: Sat 29 Mar 2025 09:01:29 +0000
Manifest next update: Sun 30 Mar 2025 09:01:29 +0000
Files and hashes: 1: WYTqj2Ru4b6Ds31lFp0qL0GBiG0.roa (hash: TiMpifh1/6heVxOwrxdYBK/lz/TeczLDX2jTHHgJqNw=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: ioTl5APug/4iX9wOapuKb8JOVnWnRZcSPX7AQUqvEP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:7f:44:0d:75:1e:3d:9d:6b:a4:72:6a:e4:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: Mar 29 09:01:29 2025 GMT
Not After : Mar 30 09:01:29 2025 GMT
Subject: CN=ad83a11ecac3af76cb9d12a6af40b3bc513e2629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:93:e6:67:22:58:44:41:93:23:0b:e6:36:
bc:31:bb:3a:9c:c3:14:dc:41:cb:89:4c:19:9f:f8:
b4:03:96:b6:31:c1:2a:67:1b:a0:02:b8:42:1c:64:
84:ca:a7:6b:04:20:85:1a:e6:55:8e:67:72:c6:c5:
c3:1a:90:4d:d9:a4:50:08:7a:3e:fc:97:38:cd:6a:
ed:ed:59:ea:8f:3a:f9:82:e0:d5:dc:7e:9f:45:14:
cc:83:50:8b:32:94:e3:53:56:c0:be:af:40:96:80:
5f:32:5d:18:bb:7e:25:f3:c9:d7:72:50:9b:33:ec:
e4:3c:44:ef:06:1b:36:73:fe:7c:c3:c0:e3:af:98:
cc:66:82:4e:de:0e:6c:32:d8:55:11:d5:76:23:df:
67:7b:a6:57:1d:a3:60:70:c2:9e:8f:ae:ac:dd:4e:
0e:12:ec:3a:7c:b7:09:da:0a:bf:6a:62:27:fd:25:
2e:e4:67:2d:9a:0b:72:ef:8e:9d:f4:ef:ff:e5:bc:
fe:bc:1b:cf:56:1c:45:b7:6e:23:4a:7a:42:71:fb:
83:32:3c:27:80:3e:40:f6:6e:83:e4:f9:f6:d8:03:
8e:a9:4c:01:36:db:b0:a5:63:41:55:81:fb:4d:55:
41:08:99:cd:6c:d5:3f:4b:63:a1:d7:70:e4:c4:6c:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:83:A1:1E:CA:C3:AF:76:CB:9D:12:A6:AF:40:B3:BC:51:3E:26:29
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:56:f8:f2:dc:85:2f:75:84:23:27:ae:17:b2:2b:cc:7c:38:
02:49:7f:97:e3:21:f5:f2:4e:0b:e4:47:da:a1:e3:49:a2:73:
8a:71:77:a5:e6:f9:cd:03:25:e1:b1:44:66:16:f9:d2:47:c3:
8a:da:e9:59:da:96:f7:57:12:45:d7:eb:1e:79:e2:2f:13:8b:
e7:5a:fa:94:68:df:04:c3:aa:07:4e:2c:d7:75:ba:98:a3:3a:
e4:9b:89:66:ef:0e:76:76:94:1b:f4:f2:12:24:63:a0:51:12:
af:ee:c4:28:73:78:16:9e:f3:01:f7:51:5a:f8:df:14:78:3e:
6a:a8:b6:cc:b4:1e:d9:59:09:52:24:af:0f:d9:58:90:d1:c2:
d6:01:85:8f:69:b3:a3:73:7b:0e:ca:a4:2d:d7:9b:c9:37:02:
3f:78:c5:1a:e9:d3:96:6e:35:68:5e:99:b1:c0:32:d9:a2:cf:
bf:76:d1:b5:33:6c:a2:a7:24:a4:96:fd:6f:03:60:4b:80:9b:
32:11:59:79:b5:26:30:94:ce:af:be:2c:21:f0:39:42:9e:4f:
39:0f:ff:9e:e2:99:48:6f:b0:1e:4a:14:09:2a:b6:a8:9c:4e:
0a:3c:34:68:e3:5b:00:ee:39:be:84:0e:31:01:27:12:72:91:
c9:f9:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:24:03 2025 by rpki-client