Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File: Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier: LEpu1GbCgI0euu6l+Ba5tKnhoOBQjgA+vwxVOnOlt+8=
Subject key identifier: C3:98:BF:63:D0:44:E6:4F:72:6C:A4:B2:AD:B3:38:07:75:B5:A0:5F
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 0195E12237B6FE12A7BDB2AFF50E6ED540A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number: 080E
Signing time: Sat 29 Mar 2025 09:01:10 +0000
Manifest this update: Sat 29 Mar 2025 09:01:10 +0000
Manifest next update: Sun 30 Mar 2025 09:01:10 +0000
Files and hashes: 1: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (hash: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=)
2: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: sOchXeU1wEcZVBEC//PBeabDqVFW0E/+3ID2TfrvsDE=)
3: aGSLmvFLVXoIvh13M3Bc3T8RXCM.roa (hash: dS9surSZvcmxnONCf51E9KFCQeozx73p7BXszsFgnWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:37:b6:fe:12:a7:bd:b2:af:f5:0e:6e:d5:40:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Mar 29 09:01:10 2025 GMT
Not After : Mar 30 09:01:10 2025 GMT
Subject: CN=c398bf63d044e64f726ca4b2adb3380775b5a05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:df:e8:b9:6c:ef:4f:a8:25:58:b7:1a:45:
9c:38:1c:8f:8f:38:b6:18:f1:3e:33:4e:63:c8:8b:
00:77:b9:58:d7:7b:1a:bb:ae:be:4e:01:16:29:9b:
38:78:07:d0:58:d6:97:14:6e:5f:b2:c0:ca:85:07:
c5:c8:fb:c6:dd:66:c9:84:62:56:af:ee:6b:54:4a:
aa:94:d4:58:42:d5:2b:3e:4d:54:a4:53:b9:67:25:
84:ac:2e:bc:83:e4:77:f3:96:70:12:cb:36:74:71:
60:a3:a8:1a:f3:dd:70:7b:27:40:30:87:27:77:93:
4c:c7:74:2c:10:3c:50:8d:d9:99:71:83:0e:f1:1c:
10:c4:6b:12:f2:5b:76:e6:de:3d:c4:34:e1:f8:ec:
d4:64:8c:c6:84:11:7f:0b:82:bd:59:8d:9d:f2:74:
f1:7c:12:71:d3:96:b3:76:18:03:ea:f8:07:cd:22:
b6:9f:cd:2b:21:11:b2:e3:22:88:8f:c9:27:89:36:
9b:d2:3b:41:6b:d4:dd:20:b8:93:1c:f0:b5:cf:88:
e3:60:6a:1e:7e:89:d2:0f:3b:3c:89:b9:8b:e1:51:
5d:aa:f3:fd:af:6f:18:c4:13:53:ac:60:b7:65:bd:
9e:80:b9:33:28:aa:eb:70:30:ba:49:d9:9c:59:c0:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:98:BF:63:D0:44:E6:4F:72:6C:A4:B2:AD:B3:38:07:75:B5:A0:5F
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:02:d3:66:00:e4:b0:96:7a:9f:67:9d:91:02:8a:93:f2:54:
7d:71:6d:86:fe:c3:fb:32:d4:e7:e5:13:e6:8b:65:6a:d2:2e:
7f:c3:9f:d4:ca:25:3d:3c:8f:e1:73:2d:bb:78:70:0e:07:d3:
c2:d0:0e:0b:16:b9:92:c7:1a:87:ca:d3:80:9a:d0:5f:3e:e7:
20:5a:c6:58:5e:fa:0d:90:3c:b3:cc:d4:72:1a:02:bc:b8:a6:
27:c6:d2:34:47:85:67:a5:2b:58:f6:dc:98:36:74:1b:f8:00:
00:7d:a8:72:ae:b2:b6:6e:64:40:7d:8b:d1:d9:f2:b9:f7:f5:
0f:32:d6:38:d7:54:0c:d5:2a:7e:cf:d9:17:b8:ce:fe:be:08:
d5:4a:f3:04:b4:26:4b:d6:40:f4:9a:55:8f:6c:1b:5a:d2:9d:
b6:31:7f:71:fc:af:75:fa:68:71:62:8c:ec:78:5a:c3:8b:11:
af:f5:7a:96:7e:57:15:c0:30:d0:2b:a3:2d:ce:38:da:11:44:
d5:a9:68:96:b1:94:d3:7c:de:48:a7:dc:da:7a:83:4d:38:ca:
2c:23:78:c1:15:00:16:7f:8c:7c:b0:c3:1a:01:27:2d:b4:e5:
55:e6:b0:2a:0f:5c:ef:d9:a3:df:cf:99:2a:4d:66:12:b4:c7:
ed:04:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:10:31 2025 by rpki-client