Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: vnDDVAVk29cmxdFgDMC+EqpZNqzv1leTY+Oe9beBkJs=
Subject key identifier: 0E:22:BB:9F:06:D3:39:D1:F3:DA:CB:2B:6F:30:18:FA:3F:22:F4:48
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 0195E00F9BC7D0AA4AAF08C4404901CAB10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 0425
Signing time: Sat 29 Mar 2025 04:01:14 +0000
Manifest this update: Sat 29 Mar 2025 04:01:14 +0000
Manifest next update: Sun 30 Mar 2025 04:01:14 +0000
Files and hashes: 1: 2DvVU95orox5IeGSdibufOYyF_M.roa (hash: zYc2kejhvwZAMUP9rtgZ0VImRS6xXrZBfW+6RhgOP2c=)
2: _vBlwHfpCbgKUBFoqSs3ggu60nI.roa (hash: AsAILNa2VMgTcOZ13cTcAxG+d9Mwo5a4AZ6ZUVGbk/c=)
3: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: g3RIyIa0BKMzWG/hAK78uph0uYgDkcs6e6NiUehlN2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:9b:c7:d0:aa:4a:af:08:c4:40:49:01:ca:b1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: Mar 29 04:01:14 2025 GMT
Not After : Mar 30 04:01:14 2025 GMT
Subject: CN=0e22bb9f06d339d1f3dacb2b6f3018fa3f22f448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:69:2a:8f:f1:1c:cf:5a:f8:c9:87:13:24:2a:
f6:b8:1a:55:ac:e5:40:6b:72:1d:a1:f8:6a:03:3e:
ce:e6:d3:a5:e8:a8:f6:54:c6:92:6a:15:1f:21:4d:
49:4c:f2:dd:00:2b:c8:a5:93:80:3f:f7:ae:64:f6:
48:53:7c:9f:dd:f2:dc:fb:c3:bf:af:1f:9e:e5:19:
d0:f2:29:ec:2b:49:69:aa:ce:1c:ac:bf:df:16:f8:
20:fd:3e:1f:45:d7:19:23:eb:0f:15:5a:9d:36:25:
8b:3d:17:7b:7a:1c:9b:52:db:5e:ba:0c:22:15:c4:
08:aa:45:5b:e7:f1:4c:c1:5c:96:c2:8a:85:9f:fc:
54:b2:35:35:77:59:fd:54:54:e0:2d:bf:53:12:65:
81:53:0a:d6:66:04:c5:7a:cb:89:c8:96:b5:d3:de:
8e:a5:ee:00:5e:bb:40:cf:79:e1:2b:9c:40:ff:4c:
43:38:ca:21:84:43:66:e5:76:f1:e0:35:93:ca:72:
cb:ac:24:af:10:70:ce:c5:7b:4c:75:91:41:84:5d:
dc:0a:ae:1f:15:27:77:3d:76:3c:55:56:53:85:21:
0b:b1:5f:06:dc:6c:c4:f3:4f:ea:bd:e2:bc:0c:ba:
d7:d7:a5:63:8a:02:c6:cf:da:74:b7:9d:83:b2:70:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:BB:9F:06:D3:39:D1:F3:DA:CB:2B:6F:30:18:FA:3F:22:F4:48
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:34:98:82:d9:0b:e2:b2:fd:f6:06:24:20:d2:50:43:b3:ed:
48:9d:5a:03:89:0f:c3:c8:b3:74:2f:e8:a3:b1:5e:9e:55:1c:
8c:1a:31:89:70:63:88:fe:43:ee:42:ba:76:a1:1b:d2:f6:f1:
9f:76:67:03:42:4f:6b:bc:79:73:22:4e:d6:65:a1:4f:22:1d:
7a:20:9f:08:0c:a1:47:3a:04:c3:49:bf:8e:c4:65:8a:10:a8:
fb:a9:0e:21:62:df:4f:f4:e9:c1:73:7e:52:74:3e:6a:64:a4:
c8:aa:9f:ad:de:31:70:6f:88:df:d8:25:5b:13:fc:59:75:50:
65:c5:2f:a8:48:e9:1f:2d:27:81:04:ee:0d:37:63:9b:fc:0f:
5e:5e:ab:06:b6:f7:34:93:06:96:83:d7:e7:c9:f9:01:dd:f0:
fc:9a:aa:f2:da:9c:68:3d:30:f5:03:d3:78:e3:08:15:c0:37:
28:f2:b6:50:09:56:94:99:58:f2:67:2e:1c:7b:49:a1:c3:90:
a3:49:6d:b0:7d:dd:ac:b3:07:ff:f2:c6:61:cb:2b:48:73:f6:
3c:be:6d:ba:67:69:82:e1:20:19:57:7f:3b:77:7f:ba:bf:e6:
9d:5d:dd:83:f1:b5:11:b4:e2:72:54:d0:30:50:01:ef:7d:49:
f2:d8:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:01 2025 by rpki-client