Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
File: d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft (raw, json)
Hash identifier: R5O/PhzaKkEkKPSEf7JBl8mEfATuQcGP+ScUIszxhHI=
Subject key identifier: F4:6B:34:7D:3E:59:33:E8:F4:0E:F9:F2:2D:28:0C:44:D9:6C:5C:A9
Authority key identifier: 77:9E:E0:0D:D8:BA:A5:9F:53:38:4D:D0:27:7A:50:E8:B9:80:29:08
Certificate issuer: /CN=779ee00dd8baa59f53384dd0277a50e8b9802908
Certificate serial: 0195D1E6E31EE9163EC1CFFFDC8A300A6BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
Manifest number: 144C
Signing time: Wed 26 Mar 2025 10:02:04 +0000
Manifest this update: Wed 26 Mar 2025 10:02:04 +0000
Manifest next update: Thu 27 Mar 2025 10:02:04 +0000
Files and hashes: 1: d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl (hash: IjQ7laO817iDJ+UiSCFUN4ahoDNn5Ut237gCYgEZe7s=)
2: sxbHoHimI0Vr0EljvQZ9JY4CO3A.roa (hash: xkyWQBZUM5YrjIeddGIa+ZKyCDrkqNywzvJP6lv4kKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:e6:e3:1e:e9:16:3e:c1:cf:ff:dc:8a:30:0a:6b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779ee00dd8baa59f53384dd0277a50e8b9802908
Validity
Not Before: Mar 26 10:02:04 2025 GMT
Not After : Mar 27 10:02:04 2025 GMT
Subject: CN=f46b347d3e5933e8f40ef9f22d280c44d96c5ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:43:50:a5:0d:1d:13:32:d6:a4:4c:09:66:d8:
49:6e:3d:76:cc:f3:dd:13:86:0a:c5:a6:74:3e:e7:
29:49:2b:44:ae:3f:c3:d3:2b:04:dc:78:c6:ab:75:
01:ea:9c:54:fa:59:b9:72:4d:77:5d:bb:11:ff:41:
32:b6:e5:23:e0:f6:97:62:86:f9:9f:b4:71:1f:60:
8a:4c:39:c4:8c:a1:d9:9d:f8:ec:60:ba:c0:b9:a5:
92:12:36:1b:1b:53:b0:4c:2e:b6:a9:2d:04:19:85:
df:45:57:93:6d:96:a6:96:c5:75:32:22:5f:4c:db:
c5:b9:19:b6:f8:12:9a:dd:11:f8:be:7f:7a:cc:f2:
b8:96:34:26:69:e0:f7:8e:c7:4b:20:15:d3:6c:e4:
c5:e1:26:f5:17:85:8b:53:f8:a2:c6:0f:5c:9f:3b:
d8:22:bb:8d:66:25:88:55:f9:89:a9:6f:fd:84:ec:
f2:a6:1d:81:c7:90:5a:02:cf:a0:e9:ab:13:49:1e:
60:3c:ce:bd:a3:06:92:19:3d:2b:92:b9:f7:ef:2b:
01:8e:9f:77:3c:9e:59:d2:22:e6:73:86:e7:83:be:
a6:a0:6f:c9:98:91:cf:e8:5c:3c:6a:8f:3e:d7:d3:
2a:98:c0:e8:8e:4a:d9:77:22:a7:64:bf:e8:b8:1d:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6B:34:7D:3E:59:33:E8:F4:0E:F9:F2:2D:28:0C:44:D9:6C:5C:A9
X509v3 Authority Key Identifier:
keyid:77:9E:E0:0D:D8:BA:A5:9F:53:38:4D:D0:27:7A:50:E8:B9:80:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:aa:02:71:63:cd:bc:3f:20:13:8b:5e:58:be:43:bf:c1:
bf:9d:39:da:2d:01:0d:d5:1f:16:3f:41:b1:b6:6c:68:62:c7:
1b:6d:a9:90:f0:4f:49:60:e4:de:e8:c9:2a:b7:58:fb:46:35:
0e:1e:99:42:62:2b:12:6b:23:4d:37:42:cd:a6:04:ff:88:55:
d3:6c:30:98:b5:78:0c:96:e8:a3:fc:68:f3:35:a7:08:27:bd:
97:95:6b:6f:08:3e:91:f6:24:4d:a0:3a:3a:75:d8:ee:43:28:
63:57:4b:9c:c0:83:20:84:c5:ba:d6:6d:b4:4e:7d:46:59:59:
b6:5a:49:b2:77:52:ec:04:93:2b:15:1f:b2:33:c8:c8:f7:d9:
58:46:6b:0f:60:f0:ba:36:52:6f:e0:c3:33:ec:81:c2:c9:bd:
97:c5:2a:be:c8:37:58:e0:81:53:5b:20:9c:c9:31:63:d6:d7:
31:ef:8c:2e:2f:2c:88:f5:57:6d:43:74:f0:9c:49:74:55:f3:
49:5e:7c:08:49:c4:47:a1:d8:9a:20:14:55:31:88:41:8b:e9:
4a:9e:9b:2e:0e:02:21:b2:2e:3f:45:54:69:bb:2a:b2:14:12:
5c:4d:90:f2:1d:04:ab:0e:a3:36:77:29:a2:b5:a3:33:50:91:
7c:08:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:34:49 2025 by rpki-client