Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: O99iwaTIESbDlklDWlqT+iTLeT2bEqQJIRApkrQmqn4=
Subject key identifier: 53:D3:56:79:ED:83:4E:A5:BF:F8:50:4B:A6:3C:5E:B7:F4:2B:95:13
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 0194BBCE43F9609446E88EB65AAD3816EECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 03C3
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
2: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: G7IGnnTdBvpSySRzjcbsVteD+Ro97r2oNvbIAmp/3yU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:43:f9:60:94:46:e8:8e:b6:5a:ad:38:16:ee:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=53d35679ed834ea5bff8504ba63c5eb7f42b9513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:ba:86:36:7d:4f:e4:f3:34:5e:86:f3:84:
a6:53:99:24:7f:1a:6e:85:ef:b4:ba:37:82:f1:43:
51:50:29:a4:f0:ed:89:03:80:f2:78:51:c1:85:6f:
ee:88:38:31:d7:54:1c:23:74:6e:46:0d:07:65:d6:
ee:d9:ea:88:27:50:cf:06:f1:df:d4:7a:65:22:da:
9b:bd:a6:21:fa:00:30:3d:0c:ae:b3:fc:e5:4e:6b:
6d:1d:0d:ca:c3:b1:0e:8f:3b:5a:84:96:53:1e:b8:
c5:a8:09:c2:55:1e:10:4f:b7:46:ce:93:7b:6e:65:
09:90:2b:2e:f7:05:05:d4:56:b6:0a:5f:fb:18:a9:
e9:f4:c3:57:d0:b7:0d:25:38:b6:6f:14:61:1d:d0:
72:1d:dc:5e:4d:ee:f3:41:17:6c:c7:49:d9:92:a3:
cb:dc:56:6b:d9:b7:5b:30:c6:0f:17:d4:09:cd:69:
e9:06:14:82:f3:3f:1a:d5:31:cc:f7:1c:d8:c5:d3:
0a:b8:9e:a0:af:3c:4a:96:86:09:05:c0:8a:14:80:
1c:4e:f9:12:ff:e4:11:86:4b:e8:f7:7d:38:51:a8:
88:d1:50:1b:05:6b:67:90:59:63:3f:ec:70:8d:a5:
c3:85:5b:dc:05:67:c6:24:1f:22:d9:5f:09:02:88:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:56:79:ED:83:4E:A5:BF:F8:50:4B:A6:3C:5E:B7:F4:2B:95:13
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:85:74:16:8e:f6:72:bf:48:ec:70:58:2c:76:92:fe:7f:55:
9b:01:0e:67:9a:de:c6:30:95:80:0e:44:ce:87:75:72:ab:dd:
5e:4d:17:d8:77:c2:a8:0d:08:aa:6c:f7:4b:ad:e3:c1:35:bc:
3b:c9:5b:db:88:8a:40:3d:92:4b:95:3a:c1:63:d4:28:20:0e:
88:dc:2d:12:e3:15:a7:b3:d7:e8:d9:1c:05:e2:50:cc:28:79:
bd:34:71:7b:5d:d3:bc:15:88:da:6d:c9:55:c4:02:6d:c8:26:
56:ef:34:fd:c1:a6:ee:46:d3:a6:6a:97:bd:81:ef:74:8f:21:
66:2c:81:3e:2d:99:1f:95:b6:3f:91:4c:db:9b:d3:c6:f9:62:
1a:1a:4d:75:46:0e:ee:fc:cd:23:c1:7c:73:04:e4:5b:d9:7f:
90:56:0f:05:57:bb:95:99:17:ee:03:47:47:59:1d:ea:60:fc:
ac:f0:d5:f0:ff:ee:6f:7b:a5:8e:47:fb:c7:01:98:a7:81:3a:
80:3c:3c:3f:d8:5a:91:c1:db:48:53:d6:d7:76:cb:a4:10:d3:
4f:4f:fd:5c:c3:c4:19:4d:e2:cc:12:07:68:f9:4f:59:6e:17:
68:43:88:94:de:4f:39:e7:14:32:12:df:53:ae:40:b4:51:37:
3c:97:4f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:37 2025 by rpki-client