Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: NAU9/bAYCABzqwOLFub1FdMzICXjmEdA3M+ZBFyWxig=
Subject key identifier: 18:C5:60:7F:DD:7A:F6:CE:C6:23:AE:FE:39:32:DB:B3:13:9E:7F:6F
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 0195E0EB6CBE53AA5271E8ED7E14120D5259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 08:01:19 +0000
Manifest this update: Sat 29 Mar 2025 08:01:19 +0000
Manifest next update: Sun 30 Mar 2025 08:01:19 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: GFQ4XeY9FwQJ5i5IQl0A/3CRM11l0gYuk19ezGWsoEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:6c:be:53:aa:52:71:e8:ed:7e:14:12:0d:52:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Mar 29 08:01:19 2025 GMT
Not After : Mar 30 08:01:19 2025 GMT
Subject: CN=18c5607fdd7af6cec623aefe3932dbb3139e7f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:8b:b7:b8:c0:f4:e8:cd:35:99:be:02:89:
b3:03:2e:0b:d2:27:2b:0e:40:f8:7d:39:36:af:cb:
02:0f:14:ac:f2:bf:f2:f8:14:a2:60:33:34:2d:b0:
ee:02:fb:fa:62:16:b0:d0:74:3a:fc:70:81:17:c0:
a7:6b:a9:58:c7:0f:c8:3b:0a:62:02:58:cc:17:6e:
15:45:6a:44:f9:52:a9:3d:e9:dc:b4:a8:71:80:ad:
91:5f:0d:de:4b:de:c9:f8:a4:20:7e:ad:d6:20:fd:
89:d2:a4:cf:e5:19:ed:10:a0:84:ab:4a:eb:10:33:
96:54:91:55:d3:1e:ef:8c:f5:29:8b:f0:99:60:e7:
bf:bf:64:93:b9:56:83:9e:4e:cf:e1:49:b1:e2:b5:
1f:ef:89:29:a7:db:aa:51:49:c5:86:b2:8a:b1:b8:
7f:a8:5e:7e:c8:34:61:40:5e:8a:e5:ae:fe:9f:7f:
12:20:46:3b:22:e4:e8:02:45:4f:b6:bd:a1:21:d7:
6e:19:0f:0c:22:82:c0:1a:09:b9:84:4f:4f:4d:b5:
bc:05:02:f4:19:64:62:63:a9:1c:07:70:06:e2:23:
61:15:3b:1a:45:f5:27:ab:c4:89:23:ff:8d:eb:68:
a2:46:c6:6d:40:27:86:a7:52:3b:0f:37:32:08:bb:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C5:60:7F:DD:7A:F6:CE:C6:23:AE:FE:39:32:DB:B3:13:9E:7F:6F
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:92:71:4b:43:74:b5:31:22:da:73:de:8f:7c:f4:d6:84:a6:
ca:5a:e8:57:dc:5b:39:ee:3f:e3:04:b5:29:c6:94:38:02:7b:
68:8a:63:2b:96:29:4e:e8:32:1c:b3:2f:0d:ab:df:e1:ef:64:
a9:e6:25:f7:2a:42:82:39:dd:9e:cc:f8:97:2f:1b:dd:43:80:
8f:98:fd:32:5d:74:46:7b:79:a4:83:7f:ac:d0:2d:d3:db:72:
de:37:d8:e2:18:07:49:23:4c:8b:1e:da:cd:18:04:6d:d4:34:
59:0e:10:d1:3a:0a:83:57:e5:ab:dd:2b:99:49:e1:4c:01:3c:
54:83:fc:57:e3:18:2c:c7:2b:82:dc:00:4d:32:68:94:eb:e8:
19:ac:39:0c:fa:f3:f7:e7:da:de:58:91:1c:78:f3:bb:6f:a2:
c7:3b:7f:4c:37:e6:74:30:f0:97:89:51:9f:8a:b3:42:37:05:
7b:f3:db:72:25:92:dd:e8:05:3f:97:7a:b4:71:40:64:42:0b:
ad:2f:0e:03:dd:89:f1:fb:cd:ba:21:9c:cd:16:19:b3:39:05:
2c:ab:62:0a:48:14:bf:fe:12:d4:32:b0:4e:1a:45:25:e6:22:
d3:01:39:27:4f:19:72:7d:8e:36:77:5e:0d:1f:79:0d:82:23:
e9:25:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:56:08 2025 by rpki-client