Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: LbAkWiWEyKI+INylKFEY8Q/yb+eg6hJ3SlG3HLJdVN8=
Subject key identifier: F5:C2:0A:C3:EC:DA:23:DB:D0:BF:15:0B:B5:18:96:F6:77:87:6D:0E
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 0195DFD9666DCA67A619760D9CAA7EA4D84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 03:02:01 +0000
Manifest this update: Sat 29 Mar 2025 03:02:01 +0000
Manifest next update: Sun 30 Mar 2025 03:02:01 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: bgZbVCnLKnDF1mWgSr95xmI2u5YlUHnTx5f+wz0Ytc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:66:6d:ca:67:a6:19:76:0d:9c:aa:7e:a4:d8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Mar 29 03:02:01 2025 GMT
Not After : Mar 30 03:02:01 2025 GMT
Subject: CN=f5c20ac3ecda23dbd0bf150bb51896f677876d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:d2:7e:e2:80:13:0e:59:5d:cb:dd:7f:e6:
aa:55:5f:5a:6a:75:37:fe:0f:35:d2:e6:11:64:9d:
a8:67:10:b9:52:9a:e7:b2:42:8d:36:e9:3e:35:0a:
d7:05:63:ce:49:37:d9:f7:fb:95:ce:1f:96:15:a5:
57:21:5a:a4:04:c1:09:bf:40:3f:7a:61:af:20:ba:
84:55:cd:de:60:53:bf:3e:9d:2f:8f:1c:7a:43:2d:
c1:4c:74:42:a6:39:4b:a5:92:51:29:aa:ec:66:06:
8c:c7:64:1b:8f:bb:e9:0c:21:73:b9:92:ec:d8:d2:
d3:18:59:2e:68:93:85:5d:99:b8:c0:2a:0c:9a:ab:
4d:5e:48:2c:1e:b3:6a:d8:db:a6:60:cd:36:ca:1e:
59:59:ab:27:71:6a:6a:81:03:3f:dc:f5:c2:0d:20:
d5:c1:f7:4e:fc:e6:4d:30:83:f4:20:e9:1e:2a:1a:
d8:31:06:00:f5:62:d9:c4:f5:db:10:9b:fe:4b:48:
3c:f2:8b:84:6b:3a:01:d4:1a:6a:cf:29:40:f7:02:
8a:d1:fe:c8:5a:3b:7f:2f:e0:6c:bf:19:30:86:32:
95:d5:d1:4a:e1:a2:bb:08:d0:71:a1:1c:a2:f0:fd:
4e:56:32:de:01:e9:48:6a:55:8b:a2:ac:79:66:bc:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C2:0A:C3:EC:DA:23:DB:D0:BF:15:0B:B5:18:96:F6:77:87:6D:0E
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:05:b3:e7:01:20:e0:59:da:cd:88:34:ef:79:c3:1c:b5:60:
38:ac:83:b8:11:2f:a3:2c:8a:32:ca:06:18:64:57:af:5f:aa:
04:a8:43:0d:92:bc:fa:d6:0d:55:0f:2d:3d:0a:1d:71:a7:4d:
e4:ad:25:d3:3f:d2:1f:d9:7f:14:11:18:49:06:b8:d7:06:ef:
3a:01:49:99:84:3e:b4:9d:69:69:8e:69:89:97:66:55:f5:e0:
e4:7e:35:ef:df:f2:8b:bc:06:ca:ca:ce:7d:ef:61:12:91:6e:
eb:73:ec:bf:c3:4c:9d:fe:77:ce:b4:4e:48:1e:5a:3a:c2:e6:
fc:36:8b:2f:ad:b1:a8:58:9e:73:05:b3:72:ec:b8:d1:c9:66:
f1:66:22:93:92:d7:e1:d3:04:a5:f6:eb:af:9a:35:bc:48:18:
de:63:b2:77:db:7a:b4:83:a6:3e:e8:d4:cd:5a:5b:b4:0d:bd:
d9:98:91:b7:71:98:e8:42:6a:85:dc:13:5b:34:95:b7:ae:3c:
b3:41:bc:29:23:6b:b1:55:f9:ac:33:17:d8:55:12:4b:73:99:
eb:d0:c6:ed:98:0b:91:8d:a2:02:59:c0:cf:c5:1d:6a:ba:8b:
11:a9:33:a6:6c:44:40:ba:68:da:9f:ef:8c:6b:1d:b7:79:fe:
57:41:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:41:05 2025 by rpki-client