Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: v/ueRj0JzIy5ChkIaFQemKJGvkT2LctT8rdmSUH4xQQ=
Subject key identifier: 7D:7D:AE:E3:3E:9B:82:3F:0A:D8:AF:C0:9F:D3:DF:38:59:1A:A9:95
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 0194BC051C189F9AE2B119D7A7074DC8EEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 0DFC
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=)
2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: G7lzuLYit1uqsZ8P9SWlYiSLrA19tOjVQGdb+2FeX2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1c:18:9f:9a:e2:b1:19:d7:a7:07:4d:c8:ee:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=7d7daee33e9b823f0ad8afc09fd3df38591aa995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:24:6b:5a:0e:95:74:1b:2e:0f:27:f0:0b:
40:f1:0c:f0:dc:12:cf:63:4d:78:5f:be:a7:d8:2a:
f6:98:c7:bf:0d:f7:97:49:57:d5:40:94:4b:59:3f:
e0:8e:40:56:60:ea:bd:bc:94:bd:4b:8d:b5:95:6f:
79:da:77:f2:d2:1a:7f:b1:1c:ec:16:c3:dc:09:7b:
9a:ea:9c:e8:d2:60:f6:70:51:59:85:3c:f9:79:0e:
22:7d:ec:fa:eb:50:b2:75:2a:0d:4c:2e:7f:a7:75:
f7:b5:4a:0e:a8:e6:b3:29:8e:eb:98:fa:e2:dd:53:
ec:9c:ae:49:52:ae:56:54:0f:73:1c:3c:d8:b3:8f:
f9:70:31:d3:1e:15:8f:ff:37:2e:e6:a4:85:40:fc:
86:39:b7:a8:23:1a:b8:6b:84:57:88:04:b6:55:96:
03:55:84:f5:ed:b2:bb:0e:9d:70:23:26:b2:d5:e7:
db:74:70:9c:35:13:9a:6e:68:18:4b:e7:c0:bc:5e:
a8:32:b1:84:c8:ea:56:b6:dc:76:b9:61:5b:77:06:
3a:c6:d5:70:54:70:35:32:b3:5e:1d:c9:b1:03:19:
46:73:b4:12:92:1b:ba:c9:f9:40:ab:96:2a:53:b8:
a0:ff:5e:95:c4:b8:82:7d:bf:61:a5:67:5f:f8:3a:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7D:AE:E3:3E:9B:82:3F:0A:D8:AF:C0:9F:D3:DF:38:59:1A:A9:95
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bb:f8:ed:99:70:76:8f:22:0a:27:76:3d:da:90:0b:de:22:
60:2e:ec:1d:78:a8:10:f7:02:bc:fa:87:2f:89:6d:79:bb:8b:
11:10:2e:a8:62:14:77:6e:67:7e:d1:ca:36:2e:29:24:70:14:
52:06:c1:a5:49:5f:ac:15:62:5c:68:52:fe:86:7b:bc:40:56:
33:63:6d:dc:74:c2:d3:d5:52:a5:9b:b0:f2:3e:ab:e7:06:25:
ad:61:db:0c:b2:2f:ec:82:65:37:6d:58:46:c7:6c:35:f3:5c:
07:45:7e:74:9d:32:d1:5e:ad:07:23:2c:62:04:c5:46:22:93:
48:3a:60:34:00:ef:c1:b1:aa:a2:30:00:1a:46:4c:f8:d4:49:
e8:46:54:b5:cf:a2:10:aa:90:7e:64:61:04:80:4e:48:68:51:
e0:bc:d5:d1:2b:ce:d3:c4:dd:c7:67:73:38:f6:92:d3:66:b4:
fc:c2:0a:28:c4:39:8f:91:ca:99:31:96:ec:37:3c:7b:52:b5:
c8:23:c0:5a:66:53:4d:f1:28:aa:27:5f:48:0e:5b:2a:bd:78:
72:c0:53:31:2b:37:de:73:1a:08:1a:4a:f6:d5:97:77:49:a8:
0c:80:a2:c6:37:dc:de:95:94:04:64:d3:85:a7:1e:d3:f7:39:
6a:b2:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:54 2025 by rpki-client