Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: v5pgobPjzQhwi0Xt7siOgz2niUiklF8hWQ3sBqHh4zo=
Subject key identifier: 3A:90:FC:3E:2F:1A:91:E0:90:83:A5:52:C1:68:7F:86:42:FD:86:34
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 0195E0B4ACDB3A8E6E77FE400DBB10EF07D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 04DB
Signing time: Sat 29 Mar 2025 07:01:31 +0000
Manifest this update: Sat 29 Mar 2025 07:01:31 +0000
Manifest next update: Sun 30 Mar 2025 07:01:31 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: bn+FKcuJIcs6cfARB+DSHQ6v7k6SNAy7Pl0g1aTAkI8=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:ac:db:3a:8e:6e:77:fe:40:0d:bb:10:ef:07:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Mar 29 07:01:31 2025 GMT
Not After : Mar 30 07:01:31 2025 GMT
Subject: CN=3a90fc3e2f1a91e09083a552c1687f8642fd8634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:85:d4:bb:6d:8f:3f:72:8a:34:d6:71:cb:
b5:05:f9:16:22:f0:21:c1:b1:c5:cd:7e:3c:55:09:
5a:62:62:28:71:1c:87:88:4a:f5:bf:51:a6:2f:c2:
35:39:b3:80:db:4e:bd:64:73:6e:73:70:a0:5d:0c:
65:8a:34:44:f6:5d:73:17:72:07:cc:5b:6b:f1:3d:
60:a0:90:44:7c:dd:65:19:3e:65:f5:6f:c0:99:06:
60:0d:08:90:d3:e0:ab:a3:cf:06:20:cc:e5:a3:44:
14:a1:6d:d0:61:94:6a:6b:b2:a7:92:9e:a2:04:5b:
f1:a6:4c:7b:e5:a1:08:eb:67:95:8f:11:dd:12:f7:
55:a8:83:ba:ae:bc:99:69:f9:b7:3d:1e:a1:29:9f:
43:1c:31:77:25:b2:f7:b9:3d:8c:ea:67:e8:d4:fe:
20:49:45:38:c1:d6:5a:6e:e6:6d:3a:46:38:0e:a1:
b1:69:56:19:f3:f6:e5:59:03:1f:7b:56:53:62:d9:
d0:59:62:42:e9:69:dd:74:8d:b5:0d:9f:5d:21:27:
25:5d:ec:7d:59:25:89:97:57:7a:df:14:aa:c8:7d:
8e:15:b3:d3:6d:2f:f8:70:ba:16:e2:61:82:b9:72:
a3:8e:49:e9:4e:0a:6c:4f:8c:13:a3:10:bc:ed:72:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:90:FC:3E:2F:1A:91:E0:90:83:A5:52:C1:68:7F:86:42:FD:86:34
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:12:9f:55:42:fb:c6:e3:54:0a:a6:c6:03:a6:e4:41:c3:ed:
b4:af:c6:7f:0d:8b:45:b9:28:a0:98:19:c5:2c:9b:15:41:50:
e3:80:63:f2:dd:7c:b8:ef:7a:06:8a:4c:a7:84:80:e6:b8:a3:
38:b1:1b:67:15:d1:e9:c1:f8:9a:f7:13:c0:8f:78:cc:ed:79:
d0:5b:7a:08:43:83:69:ea:20:64:9a:e1:cb:ea:d3:be:e6:b2:
12:4a:bb:31:41:3c:73:7c:4d:46:32:36:50:95:9f:fa:c5:15:
8c:27:5a:53:8a:84:33:ae:dc:a0:0b:29:d6:6e:23:53:bc:71:
23:82:46:0f:cc:8d:a6:29:4a:e2:21:1f:1a:21:7b:b6:a3:9b:
67:5d:9e:7a:cb:76:74:19:47:1b:73:f9:af:30:8b:92:fa:f2:
d2:f6:d3:6f:79:42:cd:3e:e6:12:43:99:24:2e:8f:11:0b:60:
84:af:e2:fe:e3:27:d3:92:4c:2c:55:f5:5e:b2:11:6b:e4:0e:
44:c1:49:f8:60:e7:6d:7b:57:b2:2f:14:4f:e9:e6:d5:38:6e:
ac:6e:7a:10:1a:93:ca:1f:eb:7c:99:03:9a:fd:2d:18:7f:a2:
c8:72:dc:9a:72:da:79:ad:52:46:57:b3:5b:c2:62:9c:b8:b2:
35:37:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:37 2025 by rpki-client