Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: a7aBUqq4nSGxjvgWHwCpgtda0PCi7DtkifJmJfUOPOU=
Subject key identifier: 01:A1:74:62:20:60:BA:E2:97:18:CF:56:40:25:BA:C0:87:B7:47:F6
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 0195E046354C21378765F1659A7460CEFE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 02CC
Signing time: Sat 29 Mar 2025 05:00:52 +0000
Manifest this update: Sat 29 Mar 2025 05:00:52 +0000
Manifest next update: Sun 30 Mar 2025 05:00:52 +0000
Files and hashes: 1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: vjJmXQMkgLCg/mokbeCMuAw+nkHblQkk2aYf8ewNSYQ=)
2: hXFvDfauLNPAF9WisFevrAfOB1o.roa (hash: +PM39yo15WknA3d/avFILeomoy0TBmCYWA48pwr5g+I=)
3: si-C49_gCXDqHgV15BpjmdVSEiE.roa (hash: M/s+DA7HYj5VOC6CBgokuKGD9N5LSw7UMOrHEdp5Yqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:35:4c:21:37:87:65:f1:65:9a:74:60:ce:fe:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Mar 29 05:00:52 2025 GMT
Not After : Mar 30 05:00:52 2025 GMT
Subject: CN=01a174622060bae29718cf564025bac087b747f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:67:77:25:c7:d5:85:bf:dc:f6:fe:5d:8a:
fe:54:f8:52:cc:90:6c:1a:2c:8c:91:82:c9:86:25:
f1:09:db:48:37:28:53:41:62:76:6b:d7:99:c3:59:
d1:46:a5:60:92:ee:32:3f:c6:fd:ab:74:a4:3e:f0:
c3:7f:8b:91:87:ec:da:7d:ca:68:c4:5c:d4:73:11:
52:33:c8:73:c7:77:48:05:80:bb:66:f2:74:0f:94:
c3:8f:35:cb:a5:b3:6a:81:0c:f9:85:77:d2:dd:78:
15:82:96:aa:8a:a4:7b:72:e1:f2:b1:c4:62:cd:a3:
f4:cb:2b:d3:d1:9a:e1:32:05:71:18:58:9e:25:f2:
0a:f2:36:71:2c:d0:15:39:52:33:e0:bb:d0:5f:14:
50:ca:32:d8:80:e9:04:4f:83:80:4a:d3:65:ef:7d:
8b:df:82:10:12:54:02:5f:b4:de:fe:49:da:8c:f2:
02:42:df:b7:5b:9a:d6:32:45:de:69:bd:22:b3:b0:
df:38:e9:97:6e:f9:95:c8:72:13:98:4f:c5:91:05:
e4:af:ab:5f:77:e2:b3:24:7c:e7:ea:26:ab:61:6d:
8a:17:be:6b:f1:40:54:10:e6:25:b5:2a:fc:74:95:
cc:b0:38:ab:6c:8e:a7:7e:f7:68:26:f3:8f:92:12:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A1:74:62:20:60:BA:E2:97:18:CF:56:40:25:BA:C0:87:B7:47:F6
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:60:09:08:3e:3c:b0:ce:c8:f5:73:bd:94:c4:42:b6:50:27:
b7:94:a4:6e:99:c2:60:12:c4:b2:51:36:99:83:f6:07:88:13:
12:c5:1b:8a:41:16:24:84:25:b4:53:cc:1a:c7:4c:ff:8b:30:
9e:5c:a1:89:b2:59:e2:96:b9:7c:71:52:c0:0a:de:6e:d3:1a:
ca:88:7b:6c:56:a6:51:f4:95:ea:cb:8a:d3:10:25:81:5e:41:
ee:85:da:bf:69:bc:1e:ba:d4:db:d8:18:8c:e8:61:57:c4:18:
c2:cf:1b:31:f0:65:99:1e:32:3e:0b:8c:a3:af:1a:ef:32:f7:
4b:55:01:bd:3e:f0:52:1e:08:3d:00:21:b8:c7:84:c3:85:e3:
2b:6a:77:80:73:0a:bc:79:3c:52:d5:90:b1:95:2f:87:fc:7e:
f2:2a:d7:93:d1:4f:38:6f:9c:9a:7f:89:d1:40:7b:9e:2b:66:
e5:3e:cc:24:b4:0d:8b:7b:5e:ad:94:28:bc:a7:a2:61:77:29:
3a:06:8e:cc:a5:5c:3b:30:85:2b:8d:0f:2b:44:26:cd:18:df:
5a:8f:df:b3:be:05:6c:02:86:81:74:c2:00:e6:0b:7b:7a:be:
b4:d6:46:6b:51:78:12:e9:6d:c2:73:79:dc:ff:8c:84:aa:80:
60:25:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:49:17 2025 by rpki-client