Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: yFV2cMQPNEzhHlhURbmvituuix6SvxEM3wgWSYrhDSE=
Subject key identifier: A7:03:E2:35:C8:B2:FF:A6:71:EA:32:92:6C:D6:96:5A:3C:45:73:60
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 0195DFD9213F9699C74DDB82A5C90F3BC274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 0EA6
Signing time: Sat 29 Mar 2025 03:01:43 +0000
Manifest this update: Sat 29 Mar 2025 03:01:43 +0000
Manifest next update: Sun 30 Mar 2025 03:01:43 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: TVr7dj17iaPfCb3wOsyflKmxiy57GNErKOSq1szZqBw=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:21:3f:96:99:c7:4d:db:82:a5:c9:0f:3b:c2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Mar 29 03:01:43 2025 GMT
Not After : Mar 30 03:01:43 2025 GMT
Subject: CN=a703e235c8b2ffa671ea32926cd6965a3c457360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:ee:f5:75:3d:34:b2:e5:0c:30:c8:7e:bc:
a7:33:62:f2:4a:e3:18:4e:8f:97:66:b3:1a:37:33:
f7:25:6b:27:1a:b3:93:c0:38:c0:30:44:51:f2:4d:
4b:ac:5d:f6:74:b7:57:33:c0:1e:74:f2:04:92:98:
1c:94:a6:c3:24:fa:f6:70:79:ab:fe:07:c4:ec:ec:
df:0f:a6:dc:5c:64:5c:b6:5b:49:f0:2c:74:db:1b:
bf:94:63:ce:4f:d5:a5:ae:41:b5:02:6b:b3:14:b9:
38:4e:f0:1e:57:88:db:3b:b3:7d:bc:db:1a:2e:8d:
c2:cf:c4:0b:b9:3a:7f:41:76:45:86:94:df:c3:05:
3c:3c:13:f9:31:2e:06:91:a1:ed:39:f9:10:6b:1e:
c7:78:7d:60:f4:dc:93:fc:a2:22:a7:85:f3:f0:17:
7d:5a:d1:97:11:73:a6:c8:41:3a:d2:ae:4e:02:3f:
60:36:a8:4e:c8:6d:6c:88:68:6f:17:59:6d:ae:d9:
15:85:14:8a:56:0b:88:e8:05:d8:49:f9:25:57:d6:
50:5d:29:14:b1:bd:1f:36:d9:7a:f7:4d:ed:d5:96:
17:14:5e:50:12:29:c7:54:57:af:59:89:c1:7b:20:
4b:c6:5e:81:b9:89:bd:9b:84:83:8c:ee:2e:f8:2f:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:03:E2:35:C8:B2:FF:A6:71:EA:32:92:6C:D6:96:5A:3C:45:73:60
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:60:ee:02:47:17:cd:9f:7e:ad:5f:b2:5b:cd:9c:dd:45:
49:93:63:47:b6:9c:a6:e6:c0:b8:70:25:37:80:74:c1:7f:64:
93:dd:a1:aa:7d:c6:83:88:a1:60:0f:57:55:e6:f7:43:37:5c:
6e:c6:71:29:74:1a:7e:2c:a9:67:76:3e:ac:88:16:da:1c:67:
b3:67:cc:89:37:49:39:72:31:27:c3:9d:85:40:65:3a:6d:3e:
21:b2:31:60:9f:10:dc:ab:ce:8e:68:7a:ef:fa:1f:2c:1e:2f:
aa:05:6f:a7:cd:19:d7:d3:6d:fd:e0:02:30:a2:bf:24:aa:6d:
66:00:e0:ef:a7:63:04:80:b2:ef:82:61:ec:c1:5a:21:c7:fc:
d0:52:2b:b4:e5:a5:9d:d8:bf:47:41:80:7d:ca:7e:82:7a:e0:
9f:7d:23:6e:c8:81:c7:75:f0:04:f0:a9:40:34:54:55:b6:ab:
75:aa:56:78:16:5d:ee:a7:9b:d3:40:71:09:82:eb:af:5a:6e:
65:8c:2d:1e:94:70:13:82:6d:a6:b4:83:fb:1e:6e:ab:59:37:
69:5f:6f:fd:93:15:0e:cd:19:3e:86:f4:e2:d4:ae:ff:c8:71:
f7:ae:25:57:61:86:2b:47:c2:3a:05:0e:3e:fb:d3:eb:81:5a:
1a:5c:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:19:01 2025 by rpki-client