Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft
File: 4lzdUHOqVD30SJKA9n2uU_rCYXk.mft (raw, json)
Hash identifier: OfTSNLbviRxv/H231CaG9XFbsk9N1CW/rt9WZc0bPLQ=
Subject key identifier: E2:AF:49:58:D0:D4:C1:97:3B:EA:FA:51:A2:73:AF:7D:03:0E:41:48
Authority key identifier: E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
Certificate issuer: /CN=e25cdd5073aa543df4489280f67dae53fac26179
Certificate serial: 0195CCBFD195A4B7B54F05D789BE8AF354BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft
Manifest number: 0BF2
Signing time: Tue 25 Mar 2025 10:01:17 +0000
Manifest this update: Tue 25 Mar 2025 10:01:17 +0000
Manifest next update: Wed 26 Mar 2025 10:01:17 +0000
Files and hashes: 1: 4lzdUHOqVD30SJKA9n2uU_rCYXk.crl (hash: M2dQrtXhZjhJwdKdI/+JGJrWTJAhjyo2JcdHYLdK+uo=)
2: mBEegRP2fcMEeUaclOgLAwCugkM.roa (hash: B82VvCB/q+BaVI4/BoHfqo/wxEhTrze1CaetuXlR0ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:bf:d1:95:a4:b7:b5:4f:05:d7:89:be:8a:f3:54:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e25cdd5073aa543df4489280f67dae53fac26179
Validity
Not Before: Mar 25 10:01:17 2025 GMT
Not After : Mar 26 10:01:17 2025 GMT
Subject: CN=e2af4958d0d4c1973beafa51a273af7d030e4148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:57:67:8d:e0:b4:a0:73:ec:71:c6:96:fc:
3f:0f:5c:7c:e9:37:34:fa:47:3e:6e:96:01:3a:77:
f8:18:81:a0:e8:dd:49:23:4f:4a:6f:c9:0f:06:3b:
ec:61:7e:86:72:4a:47:bd:a3:cc:b7:fe:89:36:b9:
fd:e4:1c:f4:77:51:c9:63:23:f5:41:ee:ce:d1:05:
ae:f6:3b:66:99:21:c3:f8:ed:4a:56:63:71:04:e6:
0c:29:d0:6b:88:81:fc:11:e0:fb:48:c7:f7:a5:63:
d3:34:45:cb:82:ec:4a:60:71:4f:25:f8:29:ab:d8:
de:2d:1b:e6:d6:a7:38:d9:3f:dc:56:06:01:eb:9d:
4d:a4:0f:9d:23:3e:d2:d7:77:ed:32:7a:2d:49:e0:
12:df:22:7d:39:74:d3:8d:d5:41:3e:b5:e1:64:6a:
f4:d2:be:c1:64:18:25:c5:63:8d:20:30:46:f4:56:
93:51:59:d5:42:95:9a:ad:fe:e5:17:4d:59:54:56:
59:06:08:9a:32:90:99:bd:6d:a1:95:69:ed:e1:73:
ac:c5:52:25:4c:9c:48:87:6c:5b:e0:c3:0d:2a:ef:
a0:41:5c:97:df:6b:50:e0:ec:20:b4:10:70:7b:10:
06:ca:b9:ba:83:4e:9d:1d:49:d6:8e:17:a8:1f:95:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AF:49:58:D0:D4:C1:97:3B:EA:FA:51:A2:73:AF:7D:03:0E:41:48
X509v3 Authority Key Identifier:
keyid:E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1c:20:b9:57:10:6e:b5:66:38:bb:43:e2:cc:13:e6:34:ac:
47:6f:be:63:0f:89:90:6a:5d:b0:1f:b0:68:a7:cc:82:9a:14:
1f:12:1b:d4:d1:69:17:31:c3:85:4a:4e:11:98:b0:ca:17:4d:
1d:94:55:da:d1:0a:79:56:88:5e:48:4b:ad:3b:96:99:35:f4:
9e:4c:a2:27:0d:07:91:14:01:14:6f:26:60:81:e6:62:f1:2c:
67:96:4c:71:c8:07:bf:91:ea:aa:52:fc:02:5a:40:6f:98:73:
a2:72:34:ec:b9:e7:f1:6f:e8:a6:54:68:cf:fb:7e:4f:d7:89:
0c:37:02:02:d7:3f:ad:b9:e6:83:c2:cd:9f:18:f1:e4:d7:1f:
79:b3:dc:9f:b4:70:ae:51:4d:6c:01:71:bd:7d:bc:80:f0:61:
a7:b1:59:f7:59:4e:b3:7e:92:42:6e:50:4b:f0:93:6f:35:34:
c7:26:1c:59:2e:c6:b7:af:c6:07:d7:af:21:6b:c7:37:d2:29:
3b:06:73:66:42:9a:d8:d5:2a:ab:62:b2:21:34:34:10:29:07:
80:65:93:7f:fc:1b:28:94:f0:7c:bd:9c:0d:53:62:7d:cc:07:
10:8d:a7:9e:a8:25:87:16:20:67:71:e9:b5:aa:e2:c4:dd:a6:
ca:61:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:12:22 2025 by rpki-client