Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File: AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier: 8z700c5UGeiwMZwkqvmJ48JKVkB5xCN3LvjI1rzzpeg=
Subject key identifier: 7E:98:94:D5:F9:8A:22:F4:2D:70:47:9A:A5:21:7D:BF:A7:F3:93:37
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer: /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial: 0195E0B421DC989AB6C6C0C5F26ADFC0AC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number: 0514
Signing time: Sat 29 Mar 2025 07:00:56 +0000
Manifest this update: Sat 29 Mar 2025 07:00:56 +0000
Manifest next update: Sun 30 Mar 2025 07:00:56 +0000
Files and hashes: 1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: MJaqC0gMtSBEowFGGyVpRl7lTdcZr2EqEmE46dha3YU=)
2: jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa (hash: HIn2EZR8FCBtV+D1WmQeFC+W9f4d6g/d5Kn+DYMnwWM=)
3: s9CrfLdwyz1HofYuhgTm-G0XcWY.roa (hash: 5D2dFiucRImYcNfGCDutgF5vRQIcWGUYkXV/9xTSSbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:21:dc:98:9a:b6:c6:c0:c5:f2:6a:df:c0:ac:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Validity
Not Before: Mar 29 07:00:56 2025 GMT
Not After : Mar 30 07:00:56 2025 GMT
Subject: CN=7e9894d5f98a22f42d70479aa5217dbfa7f39337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:9e:9d:92:b3:e7:48:3b:e4:af:fd:b3:9b:
4b:df:ff:c0:2f:e5:57:d6:84:26:ec:d5:fb:ce:48:
1d:f9:e3:2e:85:68:48:25:5e:a1:76:e6:da:07:27:
d7:55:2d:a5:81:ed:30:3d:10:32:ff:08:1f:53:3e:
57:37:d4:48:6e:f3:47:6e:1e:2d:11:c2:40:6c:2f:
7f:10:1e:14:ad:9d:1d:63:93:e2:7a:48:22:40:d9:
a4:0e:d7:3c:53:72:eb:bc:19:12:7e:3f:24:45:63:
53:40:12:56:10:1c:f6:75:f6:35:ba:30:08:52:bd:
00:9d:1c:41:14:56:5c:f0:96:bb:81:c2:67:74:f9:
63:30:b8:14:0f:36:60:56:da:fa:7d:99:c6:5c:77:
7d:f4:4a:6c:6d:ce:ab:37:b5:f4:14:db:83:28:99:
13:0c:46:c9:6e:10:b3:47:31:92:14:fb:25:55:cc:
83:83:78:99:8b:eb:e7:78:f4:4e:f5:a0:14:47:00:
87:a4:08:ed:4f:b2:0a:9d:c9:f6:a2:72:26:26:23:
2c:1e:76:c6:28:22:49:72:1b:d8:51:f7:5a:63:b1:
12:ae:bb:d0:5c:8d:ad:e3:b4:a8:6e:a4:93:02:5a:
2f:80:bb:30:5d:a3:5f:0b:47:11:ac:61:1d:9c:e1:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:94:D5:F9:8A:22:F4:2D:70:47:9A:A5:21:7D:BF:A7:F3:93:37
X509v3 Authority Key Identifier:
keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ae:c7:fc:48:74:ad:f3:dc:d6:64:5c:7a:de:91:16:e1:77:
b5:3c:0b:f3:21:88:69:6f:1d:81:6e:5b:cb:66:2a:05:83:01:
2b:ff:83:ef:44:8f:5f:68:9b:86:0c:50:50:3d:aa:18:4d:72:
80:eb:e5:de:f7:c5:ea:e2:c2:fc:62:54:1c:61:12:69:32:b7:
fb:b3:03:be:97:3d:68:8c:cf:a1:77:09:0e:9a:c0:82:3f:4a:
bf:46:c7:27:47:22:c4:a3:e3:8b:24:d5:a5:41:78:3d:c6:f3:
bc:52:2e:b7:45:8a:42:6b:2d:31:fa:0a:47:5e:2f:39:b0:07:
dd:ff:40:77:9c:cb:95:6d:7a:88:e3:04:26:71:69:ac:a6:ef:
74:2d:3b:b0:58:4f:e5:98:f6:01:fe:1f:8a:b0:d2:86:5c:64:
70:a8:dc:0e:03:96:9b:19:5d:bd:28:af:d1:76:66:0f:6b:59:
ba:31:5c:ec:61:6f:eb:c0:c0:67:b4:cd:84:e3:0f:7b:4e:bc:
31:8f:90:34:98:d7:73:bc:d6:cb:e1:db:6d:17:f9:27:59:37:
63:85:86:b2:9b:f8:a0:48:cc:88:19:cb:b9:7e:86:9b:5c:d7:
c4:4a:d6:69:5a:5c:ff:63:dc:f0:71:f0:ca:e2:1a:97:4a:b3:
85:89:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:16:21 2025 by rpki-client