Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: thXXPIBKobO1P9fAWVL0+Rf6jcxDr2m0QpuZs+zi0hc=
Subject key identifier: EA:25:B7:1C:02:32:AC:2C:01:B2:80:B7:B7:C3:98:B3:41:4F:09:EF
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 0195E158DA1BDA5CCD5C88DE212400EE9265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0B57
Signing time: Sat 29 Mar 2025 10:00:51 +0000
Manifest this update: Sat 29 Mar 2025 10:00:51 +0000
Manifest next update: Sun 30 Mar 2025 10:00:51 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: IUlcXYLaW9OMPkYOxgyDJIv68cTJkBscjJf0dN/e6ug=)
2: znDGyTFXHxgds03YiKxu855yeHM.roa (hash: PokYry9XBN7Hw+cBZPUeLE2rCoMZAI1GoWKG5QQBoBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:da:1b:da:5c:cd:5c:88:de:21:24:00:ee:92:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Mar 29 10:00:51 2025 GMT
Not After : Mar 30 10:00:51 2025 GMT
Subject: CN=ea25b71c0232ac2c01b280b7b7c398b3414f09ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:45:dc:a1:ef:05:68:15:c4:14:d8:20:28:
47:7a:32:e0:b8:30:13:7b:f0:e6:b6:11:f4:09:25:
2c:98:92:d0:8f:0d:be:7a:52:b0:8d:79:83:46:1c:
23:7a:85:67:77:58:b5:cc:45:e6:80:06:e8:61:d1:
61:8f:5c:62:2c:61:7b:eb:7b:c6:d7:6f:a3:6d:4a:
b1:92:07:d1:ab:bc:0c:a6:a7:8e:d4:84:bc:eb:1c:
04:ff:52:d2:f3:60:23:16:0e:00:26:86:85:48:8e:
ab:e8:dc:cd:31:00:2d:58:ed:8a:46:3e:f4:94:12:
99:27:1c:c4:e7:3b:43:01:ec:45:5b:bb:cd:1c:85:
82:ad:43:25:63:b9:ba:43:b0:4a:33:29:24:e0:15:
89:b8:07:3f:a0:25:2f:f9:6f:48:a7:59:57:b3:02:
a8:52:fc:d1:30:67:3e:1d:b1:ea:91:3e:4f:be:15:
b1:7d:a1:ea:ed:1c:8b:de:ce:a1:12:24:44:d4:a9:
4d:14:59:c5:c6:39:70:f0:ba:e5:fe:97:fe:5b:c5:
cb:22:24:d7:c8:60:2d:2d:d6:5d:3b:90:c1:91:44:
1e:84:d3:f4:6b:bf:a4:25:b4:2d:df:7a:3b:4d:be:
ea:80:1b:36:76:b4:32:df:95:a5:e7:be:bf:a6:0b:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:25:B7:1C:02:32:AC:2C:01:B2:80:B7:B7:C3:98:B3:41:4F:09:EF
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f0:03:44:f3:e2:40:45:b8:90:94:87:51:ab:55:a8:19:52:
ad:a8:a2:2b:26:4a:fa:01:6c:91:e7:cf:1b:2d:74:5f:91:43:
ff:5f:b5:03:49:73:1c:52:f5:e5:17:59:64:f6:30:88:d3:af:
99:9f:a9:90:e7:64:ec:bc:77:b9:aa:89:46:bf:d9:f1:b9:94:
ff:ea:32:c5:46:04:83:0a:6e:5a:4c:76:8f:98:50:7b:5a:74:
d4:b1:f5:43:5b:f9:79:59:2a:23:e7:85:e7:65:ae:80:8b:f0:
6a:19:ec:52:15:e4:3f:16:51:d1:f4:b7:28:97:87:b2:d1:2c:
6a:2d:0f:f2:b1:0e:1e:2c:6a:ba:11:5b:c1:c8:fc:59:e4:8d:
de:11:03:e9:d7:07:72:53:dc:87:27:95:37:97:39:49:2e:26:
7e:3a:6c:9c:df:fe:bc:36:f1:4f:98:ca:9a:40:23:81:a7:c5:
25:d5:1c:08:58:ec:ca:e6:a6:d8:4d:30:56:37:90:8b:b6:75:
8f:f6:0b:ea:bf:38:7a:ba:df:b3:6e:94:45:76:1a:90:e6:78:
73:d1:82:d0:04:6f:99:41:89:ca:f1:ce:8a:47:99:99:71:53:
9f:b4:02:23:3f:3d:e9:9d:41:62:65:b8:a9:4e:a1:ca:45:04:
06:fb:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:03:46 2025 by rpki-client