Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
File: D6j7U5miekMK5yfFMs0iSZnohk8.mft (raw, json)
Hash identifier: zrZAd5EzDLT/cDMEnEYDMRJdXDmcKXe/enn1qVy0FL8=
Subject key identifier: 44:45:8E:6F:3B:45:CE:D6:36:65:8E:0C:27:B0:48:C9:F5:A1:06:E0
Authority key identifier: 0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
Certificate issuer: /CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Certificate serial: 0194BCE0AED382C9F759A55C19193DD0BD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
Manifest number: B4
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: 5jBhyCclhjBWCSh1O-0WT6aKzvs.roa (hash: MRjgNDdW46vQb+SgK5+muMmigtF72q9wmhV3HqxuIuc=)
2: D6j7U5miekMK5yfFMs0iSZnohk8.crl (hash: dZPFjP2TZJWaXAcR12nQZundooKtVErqpK5i83w+VmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:d3:82:c9:f7:59:a5:5c:19:19:3d:d0:bd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=44458e6f3b45ced636658e0c27b048c9f5a106e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:a4:a7:54:46:f0:a7:79:e6:dc:e2:e2:08:
3e:2c:78:ac:2d:f7:88:9c:21:46:24:40:68:c0:e6:
f1:c4:a0:15:db:32:ec:3a:ca:0d:43:1a:0a:fe:88:
17:e1:27:00:98:d3:18:91:24:c6:fd:66:91:5f:a5:
0b:57:a6:48:5c:74:f2:fe:fb:21:81:f5:e2:03:62:
f6:f1:ce:3c:96:9a:13:8e:5a:69:60:b2:74:e9:c4:
17:19:2b:48:4a:24:6a:31:3e:12:48:07:bc:dd:b2:
2a:e1:6b:ae:eb:4e:c5:4d:2c:27:38:50:45:e1:af:
3c:29:55:ee:d7:67:2e:13:53:11:b5:a3:87:55:a2:
6f:ff:46:68:da:4f:e7:84:ce:ff:dd:48:0c:b9:2f:
5e:17:78:fe:42:ca:5c:6e:ed:5a:92:84:47:0f:9e:
3a:91:ab:0a:43:c9:92:6b:8a:ef:32:80:bd:8e:a0:
19:fa:b1:1c:44:89:e9:7f:20:e5:be:2e:17:83:af:
1d:25:d4:00:c4:38:62:ed:a4:a5:9c:89:19:fb:d7:
75:05:ce:7a:10:29:29:14:83:ff:1a:36:58:fa:76:
0a:ab:23:3f:2b:1f:d7:d4:75:af:37:a1:65:3b:35:
b2:a7:37:f9:b1:7e:e1:d7:e0:2f:a1:80:cc:2f:08:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:8E:6F:3B:45:CE:D6:36:65:8E:0C:27:B0:48:C9:F5:A1:06:E0
X509v3 Authority Key Identifier:
keyid:0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:52:09:ec:08:fb:bb:44:75:59:6d:a9:bb:20:c7:4d:52:d1:
62:41:5a:1f:5a:84:d4:50:c7:63:e8:0b:98:88:98:7c:6c:91:
cb:ec:9b:4a:95:27:f8:fe:29:83:20:55:fa:a9:e3:67:9a:5b:
f6:06:3a:59:15:00:83:48:c3:3e:eb:d5:16:08:bd:3f:23:80:
ac:db:26:66:cc:a7:6b:d2:8b:6e:90:54:b9:3b:e1:c2:dd:cb:
71:a8:14:26:29:62:8c:dc:dc:32:ce:f2:45:bf:8d:0d:e7:91:
f3:b5:5e:62:01:e3:83:7b:db:97:dd:63:5a:a9:ee:1c:07:cb:
62:b1:4a:ae:d6:26:fd:47:4f:4a:f3:61:ad:45:9d:66:ca:53:
07:5d:a4:aa:0a:af:28:14:51:92:cb:6e:0e:b2:01:13:c8:bb:
eb:aa:69:10:40:b0:8f:bc:01:93:46:0c:c3:50:ba:87:ba:cb:
a7:1f:46:62:38:93:b9:bf:cb:4c:ae:65:c4:d9:2b:98:03:f2:
54:9c:db:95:fd:41:7a:6b:fe:a5:ac:f1:a2:ce:ca:f0:ab:e9:
c1:55:ad:ae:a5:02:97:eb:1c:4d:e3:e7:79:d8:ef:13:67:e6:
a3:b9:22:d9:65:a5:bb:6c:b8:9c:d9:58:ff:ee:bc:a9:4f:db:
7d:ca:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:04:11 2025 by rpki-client