Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: oI0roJpiYkO7Ef0iiyh0UoHnMYoZoyEeB0DhJ9phl4s=
Subject key identifier: 05:29:09:24:99:B5:FD:60:19:08:EA:B8:BB:17:47:80:6A:5A:59:6D
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 0195E0EB18D8C8A11BB260499AA74FBFDE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0E28
Signing time: Sat 29 Mar 2025 08:00:58 +0000
Manifest this update: Sat 29 Mar 2025 08:00:58 +0000
Manifest next update: Sun 30 Mar 2025 08:00:58 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: r6RZdBZg1pkl95XtviCQhuX3fV0ath2xVJffn2ul1Cc=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:18:d8:c8:a1:1b:b2:60:49:9a:a7:4f:bf:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Mar 29 08:00:58 2025 GMT
Not After : Mar 30 08:00:58 2025 GMT
Subject: CN=0529092499b5fd601908eab8bb1747806a5a596d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:3f:7b:5f:3a:a9:41:56:64:38:d3:8f:86:
c1:6a:27:7c:81:42:f8:e2:54:4e:dc:47:49:a6:ce:
ea:fe:ff:34:81:bb:34:79:5e:cc:87:ae:f0:1c:15:
33:36:1c:ca:9f:80:9b:55:ae:85:7c:56:73:34:c5:
ac:d4:98:99:7c:3c:3d:ac:52:5b:09:31:a7:44:04:
1e:fd:66:d6:b8:eb:0b:8c:77:e7:99:d0:07:3c:70:
f4:93:34:3d:c4:9d:d9:05:8f:f2:79:72:c7:b0:87:
3a:d3:6b:e6:b9:b6:40:01:ed:f2:3d:4d:9f:20:5c:
5d:4b:85:84:51:b9:d0:3d:16:f5:4a:73:e4:38:07:
42:63:f0:4c:35:74:b9:ee:ac:e1:ed:ce:1f:91:4a:
d7:d0:75:d5:1e:6a:62:e2:58:ca:21:ce:ab:1b:68:
cb:5f:d7:da:75:9f:d4:ca:1d:97:ba:ba:53:4a:bc:
4f:09:e2:94:b9:a4:16:cf:c1:72:cb:fd:4a:20:89:
1b:ca:86:2d:f4:66:aa:42:0e:35:6b:34:f5:25:9c:
c5:8d:9f:f8:65:65:18:e6:20:62:d9:24:d1:76:75:
bf:8e:bc:79:a4:7a:e3:d0:38:61:5a:14:22:b3:37:
8d:a7:14:7d:6c:22:26:48:18:0e:69:91:04:b1:73:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:29:09:24:99:B5:FD:60:19:08:EA:B8:BB:17:47:80:6A:5A:59:6D
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:76:6a:24:24:15:d9:35:97:1d:51:ab:fd:6c:09:98:e1:21:
5d:0d:52:3c:d6:2d:eb:16:3e:74:cd:ff:de:64:e9:8f:96:5f:
08:19:d8:c4:ba:f9:be:e1:18:f9:a1:9a:43:ac:ec:95:11:e6:
27:ec:97:74:fe:f9:b2:9f:d7:1c:e2:b0:d4:d8:67:0f:e5:a4:
d2:5f:5b:2e:ee:82:ee:64:b0:73:42:8d:9a:e1:26:9d:61:9f:
97:e6:70:bd:85:b9:c4:4a:6c:cf:9a:77:39:93:c8:ad:da:be:
6b:7d:7d:96:16:af:93:bd:32:47:56:09:a6:db:b2:60:8a:a1:
cf:74:02:1e:40:76:ad:90:08:72:07:69:c4:a1:ca:26:5d:84:
07:f3:8c:eb:1a:32:45:73:12:db:87:3a:13:d1:18:4a:4c:19:
c6:7e:be:57:3d:ce:21:88:07:7d:7b:79:72:90:41:fe:6a:19:
a9:b2:20:4b:7c:ba:59:e9:0d:34:06:09:3f:19:d7:ef:37:4e:
71:00:c3:c3:65:ab:97:9b:cd:c5:54:74:0c:4a:b5:7e:b1:23:
35:08:cf:ea:0e:48:89:5b:c0:87:10:10:5e:5b:c8:ee:c9:26:
58:49:07:f1:86:4a:08:4a:1b:ad:12:8e:49:ad:b2:03:27:3f:
1b:26:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:35 2025 by rpki-client