Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: LaSqTiqOz4GiH0LiGZ8ICb90FrhiXZ2FG4teckpYF1c=
Subject key identifier: 4A:8F:48:0B:5A:AD:2E:20:18:EA:DF:7A:CE:93:02:76:C9:A1:73:CB
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 0195E0EB179E52BA85D83EF9DC381EA0DE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 0F53
Signing time: Sat 29 Mar 2025 08:00:58 +0000
Manifest this update: Sat 29 Mar 2025 08:00:58 +0000
Manifest next update: Sun 30 Mar 2025 08:00:58 +0000
Files and hashes: 1: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: hTECmrdGtO9ddpudxLxbcsNxTc0I1V2M0sqOKUhuYnE=)
2: _0sjthYRaAet3JbRp0XUDRbz-GA.roa (hash: ul8jawKmMZl7pMGLxI/c/PCpmLqBlcwBurtPIn7OQwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:17:9e:52:ba:85:d8:3e:f9:dc:38:1e:a0:de:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Mar 29 08:00:58 2025 GMT
Not After : Mar 30 08:00:58 2025 GMT
Subject: CN=4a8f480b5aad2e2018eadf7ace930276c9a173cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:06:b3:e9:16:49:eb:45:20:fd:4d:7a:10:1c:
50:51:a2:2f:f0:d2:46:fd:e1:20:92:74:98:15:ce:
b1:c6:6e:96:ee:f9:90:28:47:93:94:5f:17:74:f8:
fc:43:3a:2f:cc:ee:63:7f:c6:59:2a:51:5a:f7:89:
6d:9c:82:a2:0b:fd:af:1e:72:13:40:44:d9:3a:13:
95:12:a7:28:8c:a3:05:fc:3e:77:a5:05:24:61:3c:
46:b2:69:b7:e8:23:47:10:a0:29:66:fe:3b:11:ed:
a6:ea:eb:e1:31:61:7d:d2:47:90:89:8a:8e:3c:c0:
d7:3f:09:01:c0:ab:f9:05:a6:91:c9:04:43:d6:99:
38:3c:46:92:cc:b7:89:38:26:67:cf:0a:27:5c:db:
1d:50:ec:14:ab:9b:b5:ad:7a:d2:b1:0f:db:1d:36:
dc:6d:7d:e2:22:23:84:8d:e1:eb:cd:71:eb:33:53:
92:56:4e:75:d2:56:1e:99:d0:54:8e:7a:c9:a6:4f:
aa:aa:37:9f:47:3f:a6:8a:17:08:9b:40:c2:68:65:
2c:98:e5:22:b4:54:90:d8:62:1b:b8:c0:f1:d7:80:
9b:ab:e2:3f:39:0e:f5:61:7b:3b:44:e1:37:fb:27:
19:f1:e3:f8:a7:e1:a5:7d:66:5e:05:96:93:c9:22:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:48:0B:5A:AD:2E:20:18:EA:DF:7A:CE:93:02:76:C9:A1:73:CB
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:17:00:de:cb:56:10:db:a3:17:26:6d:88:85:66:6a:f5:42:
30:86:31:36:00:3a:88:15:9f:06:5d:3e:b9:55:bd:45:cd:6d:
42:c9:4e:78:e2:43:8a:b7:0d:04:60:df:47:23:42:2f:33:fc:
05:1b:09:59:69:ed:3d:2e:d0:60:b5:8f:2c:58:e1:9a:9f:1e:
19:4d:ef:90:af:1e:5e:e3:91:18:93:3b:bb:3e:b5:42:54:20:
6d:ba:f4:52:be:e6:9b:b9:2f:7d:4c:4d:f4:19:b4:02:d5:a9:
8f:dc:e2:4e:db:ec:c3:59:9b:1f:18:b2:5c:1f:30:09:4d:82:
8a:df:c8:0e:3b:02:df:92:44:1d:17:07:ff:00:a7:e0:ba:b4:
b8:7d:57:16:9b:d3:d2:2f:84:d8:e1:71:22:f9:0b:1c:0c:a3:
17:0f:07:5d:59:82:b2:30:58:be:0c:bf:ab:cb:fc:7a:ba:b5:
85:e8:1a:5d:02:b6:ad:9e:32:23:73:87:cc:f8:22:bc:74:30:
37:84:af:f7:0b:4e:68:4e:eb:34:f0:1e:e7:99:dc:75:ec:55:
03:2f:90:94:e8:ee:68:cb:d5:2f:b0:c5:3a:9f:c0:6f:8f:8b:
60:8c:f7:ca:7f:46:b5:46:ac:3e:e6:80:ad:bb:f8:9b:9b:53:
3f:b8:60:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:16 2025 by rpki-client