Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: EM3bXy8CJz7F8nKeendzhBZ50gbViioEgVP8Ror0M2w=
Subject key identifier: 24:DA:2B:F3:58:7C:06:C4:10:B0:F1:CD:68:BB:35:46:93:3B:27:8D
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 0195E07D4CDD4BF5D3D249DDDC95B647B5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 0E64
Signing time: Sat 29 Mar 2025 06:01:02 +0000
Manifest this update: Sat 29 Mar 2025 06:01:02 +0000
Manifest next update: Sun 30 Mar 2025 06:01:02 +0000
Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: x1DRPyEr1A9+EceQmEnzH41wx4+RiQZjaO7Z066FWbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:4c:dd:4b:f5:d3:d2:49:dd:dc:95:b6:47:b5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Mar 29 06:01:02 2025 GMT
Not After : Mar 30 06:01:02 2025 GMT
Subject: CN=24da2bf3587c06c410b0f1cd68bb3546933b278d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:41:71:6f:29:5c:81:89:69:70:4f:fb:08:
e9:13:87:1d:fb:7a:dc:57:a0:d2:4c:cd:b7:14:27:
5e:50:d1:82:21:dc:33:ee:fa:e1:7a:08:02:92:d6:
f4:a7:2c:96:5f:ee:4c:fe:cf:45:13:b1:e0:9f:5a:
ce:e3:b5:14:c5:46:bb:0e:da:9a:f6:3b:06:38:d9:
32:81:0d:ac:92:ea:37:62:3c:33:0a:8f:b8:f7:32:
7b:71:c9:8c:7e:43:53:47:1d:36:65:00:51:c4:92:
bc:48:ff:ec:8e:26:40:40:a6:09:68:87:86:0d:57:
8e:d8:e6:44:ec:ae:fd:96:6c:66:76:7a:3a:35:52:
03:91:b0:21:a6:33:97:01:47:8a:79:36:12:a8:99:
da:44:fa:55:46:dd:a7:ae:82:e9:55:14:75:fa:87:
25:36:a7:72:9a:db:c6:af:1e:4b:2c:61:e3:3b:7c:
77:02:78:81:7d:fa:c9:18:83:77:02:53:ef:21:18:
b9:db:78:71:3a:bb:7d:d7:97:4c:59:32:bc:d4:e5:
3c:5a:03:7a:f5:06:6f:08:df:5b:8c:09:d5:e9:db:
20:97:7e:6f:0f:b1:fa:59:00:da:49:b8:68:84:37:
90:30:af:3c:a6:da:33:4b:85:ff:38:be:95:53:7c:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DA:2B:F3:58:7C:06:C4:10:B0:F1:CD:68:BB:35:46:93:3B:27:8D
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:72:e6:25:46:01:6a:36:8f:e3:60:6c:54:fc:a1:a8:f1:19:
e0:98:8f:0a:9c:3e:09:6c:f3:2a:50:58:e4:e4:27:b6:55:4e:
aa:07:65:a1:30:3d:04:a2:5c:30:6d:c4:c9:81:fb:c3:44:98:
d9:ab:22:5a:f9:8d:2d:3f:67:b8:4e:8d:9c:db:78:75:ff:d8:
8a:ac:bf:60:ee:7e:fd:ba:2c:2d:19:ad:ad:6a:52:e2:8b:4c:
e7:63:25:41:fb:7d:86:bd:4f:5b:5a:ab:1a:a1:b6:fb:93:77:
15:1f:a6:8c:fe:7f:71:05:fa:b1:73:2b:38:5c:59:9f:59:ef:
6b:09:8c:b5:64:c9:2c:4f:31:39:70:a3:35:31:4f:88:fd:8b:
0c:49:3e:d6:f1:4d:b3:14:4e:76:c9:4c:b5:de:02:ff:21:09:
bf:5a:09:c6:48:01:e0:ba:02:4e:24:d1:a7:8e:9a:84:17:d7:
ae:f3:74:af:a5:07:e2:2c:91:7f:d0:d9:42:63:a2:8a:01:f4:
fc:6e:3c:1e:38:88:b2:d9:2e:73:2a:f6:98:d3:4f:14:59:e5:
2f:52:c5:52:7c:18:49:be:c9:3b:b9:ec:be:9b:9f:1b:7f:53:
44:73:e2:a2:61:20:55:6b:ce:59:30:29:25:c2:e7:7c:17:27:
27:8d:9b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:38 2025 by rpki-client