Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: QScLihnHhWZ+vkZ+eCA11CBDqIkKKwb8PBT/OgwdSwI=
Subject key identifier: 02:AD:BE:49:EE:5A:3E:58:0C:AF:AE:07:BE:A8:A9:56:35:77:B6:D2
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0195E00FECEEAE52769DCE35BF95685278BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 0FB8
Signing time: Sat 29 Mar 2025 04:01:34 +0000
Manifest this update: Sat 29 Mar 2025 04:01:34 +0000
Manifest next update: Sun 30 Mar 2025 04:01:34 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: JqH6OAwY7rIXUGNJcuhh+3QcaAyPx6im3+l62mmWeus=)
2: 2M2ufWe7Ofl6u6jn9YFaKJdMQgU.roa (hash: JPn9kgkJ/mLlJFOnz5rvlquqkQlvdwjIM0rOCRw/j14=)
3: 59tRD3uqVaacfvjHXHYi92MaFhY.roa (hash: ux9P4oihcogCzRuXGICOJuqp+Eh/j68654s9FrT8h3Q=)
4: iuLWl39KK5_aNaq1WsPE60hdbCw.roa (hash: 20QH+aMyz7btg2ItRbizZ6HxBagtfnJOnIYg9KYZxFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:ec:ee:ae:52:76:9d:ce:35:bf:95:68:52:78:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Mar 29 04:01:34 2025 GMT
Not After : Mar 30 04:01:34 2025 GMT
Subject: CN=02adbe49ee5a3e580cafae07bea8a9563577b6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:d5:eb:df:16:2e:45:f2:e8:43:68:4c:06:
03:d9:10:1d:bb:e3:b4:10:72:aa:dd:67:d2:ce:a5:
c5:ce:02:64:34:4c:e8:b9:39:58:fd:e3:8c:d0:5a:
d6:72:62:c3:b6:83:fe:e3:ac:73:06:dd:7b:9e:20:
b3:18:93:bc:89:bb:d0:8f:58:40:06:26:4e:b0:8e:
39:91:b5:ce:f1:2e:3a:83:f4:df:84:bb:4d:4a:ec:
e7:5b:cb:bc:0c:d8:40:81:4b:34:e1:f7:19:34:d9:
5a:cc:1b:99:ab:d3:cf:68:63:fa:3e:7e:67:26:a7:
a5:9a:0e:c7:f1:eb:92:b8:47:1f:f6:33:43:2c:27:
b4:fd:c2:e4:c1:96:83:6c:6a:85:ec:2a:01:d7:9c:
69:23:97:7c:38:10:50:70:77:83:22:cc:b4:a1:9f:
f7:9e:8d:49:6c:35:4b:11:d8:5c:de:3d:5c:10:3d:
65:0c:1e:c3:b1:7d:dd:72:af:e2:c7:89:55:d7:3f:
59:86:ba:34:13:7a:6f:f3:f3:9c:d9:55:1b:a9:4a:
4a:a2:d7:70:e9:0e:0e:3d:ad:ab:85:a7:10:6c:da:
ec:50:a2:da:6d:51:1a:d8:63:52:b5:fa:c0:9a:0f:
53:9e:96:43:27:c8:ee:7d:80:de:70:9c:56:7c:bb:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AD:BE:49:EE:5A:3E:58:0C:AF:AE:07:BE:A8:A9:56:35:77:B6:D2
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2b:e8:c2:ec:c0:63:49:a5:a9:ef:7b:f3:72:81:5f:bc:b5:
84:06:53:24:d8:83:65:2b:88:fd:bc:57:be:fc:92:79:5e:d8:
a3:f7:9d:bc:e9:99:a2:c7:43:7b:48:61:86:c2:f4:62:5b:ba:
41:21:e4:07:50:32:93:a3:c3:14:57:20:65:04:df:e0:f2:ce:
fa:a9:3e:83:2b:98:c4:b5:49:c7:09:e2:e7:3e:48:12:e4:ef:
86:e3:58:bd:ea:8d:5f:e4:8c:b2:0a:19:b0:d2:27:a1:85:ab:
17:34:cd:fe:eb:0d:82:de:9c:40:b2:ab:dd:06:eb:ab:d2:0f:
99:a8:c5:14:85:a2:08:bb:fc:76:c2:9a:35:f6:c0:9c:6e:b3:
e7:40:35:50:f1:60:4f:c5:25:73:28:32:16:d0:0c:f5:db:fa:
47:8c:94:c8:5d:9f:31:ff:74:09:08:4c:de:8f:b1:cc:4a:43:
a2:03:dc:71:eb:36:b5:85:4a:3f:1c:d9:7b:85:0c:f7:03:bf:
87:0b:a9:25:12:a4:34:84:58:fa:e9:a6:67:1b:d8:b1:23:14:
9b:35:9c:16:d2:a9:20:28:e3:a2:99:40:44:5a:83:8a:8c:a7:
23:43:04:1c:98:3c:74:5f:81:4a:c0:aa:b8:9f:43:59:ed:88:
50:cb:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:12 2025 by rpki-client