Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File: TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier: b5s6ZsswyxnDa11l7k420DTdjXCAlQYJt3+af4aIHfI=
Subject key identifier: E5:90:75:E2:54:D5:B2:33:EC:73:E5:4A:FC:5F:FC:63:E1:C3:66:42
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 0195E158E9C72B314EED85D2925DD4DD10B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number: 072D
Signing time: Sat 29 Mar 2025 10:00:55 +0000
Manifest this update: Sat 29 Mar 2025 10:00:55 +0000
Manifest next update: Sun 30 Mar 2025 10:00:55 +0000
Files and hashes: 1: 42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa (hash: 06Fp4iuAbTOsazThfCr6hEmyN81BPyfi3nXeyKKT6d0=)
2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: y7jmeMPeLcCYpfIBJdJEijBCeFjyBjFPtjkKgsS7uV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:e9:c7:2b:31:4e:ed:85:d2:92:5d:d4:dd:10:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Mar 29 10:00:55 2025 GMT
Not After : Mar 30 10:00:55 2025 GMT
Subject: CN=e59075e254d5b233ec73e54afc5ffc63e1c36642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:62:16:1e:af:eb:f8:cc:27:92:25:f1:af:
d8:c2:7a:e5:ee:13:24:5d:bf:85:66:c4:5e:4e:21:
22:75:ec:06:7b:c3:fe:02:50:4e:7d:58:7b:2a:ae:
a9:c0:18:55:fb:65:7b:70:f9:54:30:94:16:68:15:
84:4c:bd:67:f9:77:5c:3b:a3:02:1e:df:bf:70:ac:
e7:0a:88:88:57:74:1e:fa:00:7b:70:0f:72:7b:e9:
96:46:6c:ce:b9:2b:45:02:08:56:40:fe:47:63:bd:
08:c1:b4:12:70:56:40:af:5d:f3:59:01:97:c3:6f:
2e:32:d1:98:33:7f:83:95:e7:a3:a2:2f:1b:e7:ad:
e9:e2:14:3e:bb:0e:a3:19:98:aa:26:d3:67:bd:29:
ba:fd:e9:37:75:c3:91:8a:62:0c:ac:db:d2:5c:99:
d9:02:a9:af:4d:7f:df:af:ad:dc:87:c4:f5:99:87:
8d:c4:43:fa:02:94:d7:27:09:85:e3:50:b2:81:84:
4d:27:d7:c3:99:26:30:0c:da:03:1d:d0:78:13:61:
24:ea:bd:7a:5c:80:b4:ed:5b:6b:06:20:1a:c3:b6:
f6:13:1d:fe:c4:49:68:98:78:6c:de:43:ad:22:80:
dc:db:9a:cd:94:1c:35:00:ac:b1:78:2f:cb:10:d3:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:75:E2:54:D5:B2:33:EC:73:E5:4A:FC:5F:FC:63:E1:C3:66:42
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e8:a9:40:4a:32:62:33:50:e8:54:7a:a6:c5:a3:96:14:8a:
7e:e8:5f:85:2c:43:c9:18:4c:bd:b2:aa:ba:74:e1:41:50:47:
2b:ba:a1:11:ce:a2:33:9d:63:95:b7:89:c2:3f:25:0b:76:1c:
37:64:ef:20:9a:3a:9a:a4:2a:5d:c4:94:06:61:12:35:56:8f:
47:98:ad:b4:7b:79:71:09:24:94:8f:52:62:75:a5:15:aa:55:
04:97:04:1c:56:d5:e8:82:a1:18:27:dd:c2:fa:b0:17:08:c8:
0e:3a:33:fe:69:c5:6e:92:a2:23:c1:2c:a8:7d:4e:16:bf:0f:
47:42:f7:cb:2a:07:d9:71:24:05:52:3a:16:e2:45:c5:5c:d0:
69:8b:34:e1:3f:74:ce:b8:5d:06:04:ca:5e:94:45:ed:d2:aa:
40:0a:a9:1f:80:79:ec:29:b7:b5:1a:53:44:3a:78:7b:39:47:
f2:f8:00:bc:63:ca:ad:31:be:5c:73:f1:a9:0f:8b:ba:56:91:
8f:dd:c5:c4:5d:91:2b:56:53:81:f5:41:51:13:77:ac:69:e2:
38:16:a2:f0:8f:a0:f0:de:16:70:83:b8:7c:d8:6b:ab:77:36:
5e:4e:34:0b:87:54:0c:23:27:76:a4:58:05:cb:da:e2:dd:90:
90:c9:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:37:17 2025 by rpki-client