Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: i598guxZSBWw5z2En8Sn8JElQBk5Id9/92ps6xDTGQI=
Subject key identifier: 62:FD:59:5A:DF:EE:44:02:82:01:FD:6F:CA:DF:15:60:4B:84:40:CA
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 0195DFD977B41CDA755952309585C4D0BBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 0F76
Signing time: Sat 29 Mar 2025 03:02:05 +0000
Manifest this update: Sat 29 Mar 2025 03:02:05 +0000
Manifest next update: Sun 30 Mar 2025 03:02:05 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: Xw7s2I7YddWGgBD+YdIKi3rUe0xYQBeq4hGXN7Gl+s4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:77:b4:1c:da:75:59:52:30:95:85:c4:d0:bb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Mar 29 03:02:05 2025 GMT
Not After : Mar 30 03:02:05 2025 GMT
Subject: CN=62fd595adfee44028201fd6fcadf15604b8440ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:be:40:cd:df:97:a5:a0:d5:46:6e:85:d5:
05:7a:7d:22:50:df:46:3e:4b:a1:d6:a3:d5:da:06:
78:58:a9:b0:40:e4:8a:19:9d:c8:91:b7:62:48:97:
a3:8d:a4:10:c3:e5:b7:98:80:f8:d0:79:c7:8f:e2:
a5:28:35:6a:f8:b3:9f:b0:ca:90:bc:d8:f4:ac:c8:
cd:07:0d:70:7c:ad:9b:1c:86:51:df:3b:6b:b1:45:
d9:ed:e5:df:40:61:3b:14:a2:81:86:3f:93:7a:9b:
30:d6:18:74:db:00:2f:a4:53:8d:ca:0d:e6:1a:24:
e6:86:91:2b:4c:74:b0:eb:b6:03:a6:6d:67:93:58:
7b:6c:e3:2d:f6:5b:4d:80:33:8d:8c:80:34:5b:70:
83:7f:5b:d4:11:a2:20:55:19:8f:83:61:0d:a1:5b:
55:0a:a1:9a:2d:9d:ef:d6:5a:17:95:c7:4f:59:28:
24:79:a2:c6:42:28:bd:fe:44:ba:90:21:4e:57:fd:
6a:0e:10:22:3b:38:ae:2b:b2:78:f8:14:7f:d3:90:
a2:6f:25:28:83:70:50:71:fa:7b:eb:9b:0d:34:6f:
3f:9a:32:38:82:0a:ec:e6:ef:a7:21:ac:d1:d5:3b:
3a:72:29:67:a9:55:69:6e:e1:3b:12:7d:54:5f:62:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FD:59:5A:DF:EE:44:02:82:01:FD:6F:CA:DF:15:60:4B:84:40:CA
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:90:70:6a:7a:7c:eb:cf:5e:76:24:93:34:51:b7:c7:df:c7:
d9:98:81:a9:74:95:56:20:00:c0:99:0f:54:a0:62:2c:fa:f7:
33:95:54:0e:02:7e:ce:94:6a:7b:e2:9e:c5:de:26:05:13:a7:
ae:1b:45:b4:20:a6:25:40:12:7d:50:f1:96:2f:0b:65:2d:5d:
b7:8d:91:ae:bc:60:1e:9a:c3:22:c5:3a:13:bd:55:ba:22:02:
58:c1:47:34:e4:53:4d:ec:a9:ad:82:04:2e:ad:18:85:67:f6:
2a:54:68:c9:67:4f:b8:7c:04:df:39:39:ba:8c:1a:0c:b9:57:
7e:b8:10:50:89:f1:f0:f5:1e:65:d5:83:2c:2b:d0:e4:4b:a2:
78:b4:74:41:42:69:59:e4:3e:d5:79:26:c6:6f:e3:f6:be:63:
a4:42:17:1c:9b:20:fe:ba:66:3b:c7:a2:0a:2c:ef:b0:17:6a:
51:f0:5c:e0:77:20:50:f1:e5:5e:e1:51:7b:dc:8d:99:b9:fd:
a7:f8:f9:bb:65:c2:dc:73:62:09:b5:40:92:52:4d:0a:33:e4:
ad:bd:19:75:24:e9:fc:4d:e8:fe:b7:e6:db:61:3b:58:69:c2:
03:2a:c0:03:d0:e8:39:d9:87:ea:1b:3d:54:49:9c:e4:eb:9d:
46:fe:70:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:25 2025 by rpki-client