Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/df44e9-01ef-4260-90c2-cefc625bf18d/1/RFTq5Ylzrt-gxj9obtaCxn294GA.mft
File: RFTq5Ylzrt-gxj9obtaCxn294GA.mft (raw, json)
Hash identifier: 0QYqm007O/fu3B4AKaebmu3prULqCA65Fa//dFgiM3k=
Subject key identifier: 15:C3:1B:43:6D:C3:7C:D3:A0:52:66:0D:0E:73:23:05:85:79:03:7D
Authority key identifier: 44:54:EA:E5:89:73:AE:DF:A0:C6:3F:68:6E:D6:82:C6:7D:BD:E0:60
Certificate issuer: /CN=4454eae58973aedfa0c63f686ed682c67dbde060
Certificate serial: 0195E190907F533060CA182E0B39CB9C6544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFTq5Ylzrt-gxj9obtaCxn294GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/df44e9-01ef-4260-90c2-cefc625bf18d/1/RFTq5Ylzrt-gxj9obtaCxn294GA.mft
Manifest number: 56
Signing time: Sat 29 Mar 2025 11:01:42 +0000
Manifest this update: Sat 29 Mar 2025 11:01:42 +0000
Manifest next update: Sun 30 Mar 2025 11:01:42 +0000
Files and hashes: 1: RFTq5Ylzrt-gxj9obtaCxn294GA.crl (hash: WpNWx68oJqFfhTxsOz/YS1CCQa/pJNZGT24TaXEsi94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:90:7f:53:30:60:ca:18:2e:0b:39:cb:9c:65:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4454eae58973aedfa0c63f686ed682c67dbde060
Validity
Not Before: Mar 29 11:01:42 2025 GMT
Not After : Mar 30 11:01:42 2025 GMT
Subject: CN=15c31b436dc37cd3a052660d0e7323058579037d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:9c:1d:c6:85:f9:16:86:c6:26:76:08:ed:
49:99:aa:44:1e:71:ac:8f:08:c2:c8:a8:3f:be:ca:
5b:cf:8b:31:5d:00:99:dd:ba:6b:69:52:a5:d0:a1:
5c:b2:d5:be:86:58:24:fd:2a:15:85:9f:c3:d8:9c:
9e:dd:9a:72:d3:34:6b:ba:d4:01:21:eb:5a:50:64:
a2:a0:7e:c5:f7:a4:85:90:27:08:22:2e:2a:79:6a:
9b:c9:43:95:e5:99:64:a8:2e:e0:7f:ea:af:55:7b:
3f:63:3b:11:b5:02:40:9a:b5:a8:ef:de:2c:6d:48:
5a:0c:55:ca:c2:6e:13:e5:1e:0a:ca:13:5f:95:f4:
2e:3a:b7:41:bd:5d:b7:e1:4e:22:30:25:55:5f:0f:
2c:f6:19:37:01:bc:cc:86:bd:46:0e:64:4a:d2:ae:
ad:33:99:63:b8:3a:6e:bf:c2:44:12:a5:25:5c:35:
dd:2c:01:1b:17:fe:fa:30:2d:4c:87:cd:81:96:fb:
25:5e:a5:b2:99:ad:f5:b9:3c:00:f6:a6:86:47:82:
a3:6d:8b:93:cc:84:3b:bc:fb:66:b1:6d:f4:af:ad:
ce:c3:ad:28:db:3b:7d:55:1a:76:a0:7b:c3:44:3b:
c3:e8:90:c1:28:f1:67:72:4e:ff:88:0c:7b:75:40:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:1B:43:6D:C3:7C:D3:A0:52:66:0D:0E:73:23:05:85:79:03:7D
X509v3 Authority Key Identifier:
keyid:44:54:EA:E5:89:73:AE:DF:A0:C6:3F:68:6E:D6:82:C6:7D:BD:E0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFTq5Ylzrt-gxj9obtaCxn294GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/df44e9-01ef-4260-90c2-cefc625bf18d/1/RFTq5Ylzrt-gxj9obtaCxn294GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/df44e9-01ef-4260-90c2-cefc625bf18d/1/RFTq5Ylzrt-gxj9obtaCxn294GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ba:11:52:74:6a:ca:46:58:e2:ba:d5:a9:cd:2b:54:ee:14:
a8:c4:a7:3d:3f:e8:fd:d4:08:6c:c7:c6:1c:ed:60:f7:24:03:
44:f2:fb:71:8f:b6:47:d4:f0:6e:05:bc:7b:2b:fa:27:21:9d:
db:a1:b6:0b:5a:10:24:b3:8f:94:eb:ba:35:ff:f9:3d:81:59:
c1:db:26:c3:bb:71:21:d8:a7:2f:b8:e8:44:10:62:53:e5:b2:
ec:b5:b8:3c:35:3f:f8:f4:f7:99:36:1f:11:58:71:27:b9:05:
86:65:63:14:4b:8f:00:51:f0:e8:49:fc:88:a3:44:ab:4f:27:
6f:16:9c:e4:15:b6:67:15:db:3a:62:85:64:7c:ca:7d:8b:39:
79:ab:fe:6a:fb:5a:7b:1e:4c:85:80:19:8f:09:28:9e:31:70:
b3:10:e5:bd:4e:83:b5:f4:a5:a6:36:ca:31:e4:05:96:fb:8f:
c4:7d:4f:c8:d4:72:08:61:4f:df:05:27:b3:3b:51:da:bb:d7:
4a:ad:7a:b9:f0:08:5b:18:65:a1:23:75:55:13:be:96:74:6a:
58:2d:33:f0:47:b6:f3:f4:89:75:d1:21:fa:bb:0c:02:ea:c1:
5b:e8:a1:8f:69:34:9d:e2:30:42:d5:44:7d:b0:3b:91:1c:3c:
38:31:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:24:53 2025 by rpki-client