Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
File: 4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft (raw, json)
Hash identifier: z4i2syvcSlCb/tuV/QcKOmO+Vcs2XHZY3cmUEMEeHSA=
Subject key identifier: B8:B3:4D:0E:E0:1A:CF:4F:FF:81:5E:4D:38:44:D3:57:B7:48:15:5E
Authority key identifier: E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
Certificate issuer: /CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Certificate serial: 0196A42EAC29A00AE37CF1AA8C3B13C07AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
Manifest number: 1130
Signing time: Tue 06 May 2025 06:00:44 +0000
Manifest this update: Tue 06 May 2025 06:00:44 +0000
Manifest next update: Wed 07 May 2025 06:00:44 +0000
Files and hashes: 1: 4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl (hash: H8DWjpgnFuFXo1biM609rsconwt5un4UtYzopZl0tgA=)
2: NRZ_lCVhABHz5b_Z8IxEc9d_jK0.roa (hash: JVDWSg5rVEKkwzjQ42dtSUP/iC2fUlHw3otcwoq/p38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:ac:29:a0:0a:e3:7c:f1:aa:8c:3b:13:c0:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Validity
Not Before: May 6 06:00:44 2025 GMT
Not After : May 7 06:00:44 2025 GMT
Subject: CN=b8b34d0ee01acf4fff815e4d3844d357b748155e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:2a:88:38:e7:7d:fa:5a:8b:50:61:00:93:
3a:90:5b:89:1c:89:56:0e:0a:e7:6a:71:bc:ab:d2:
0f:9c:6d:de:2f:01:c7:84:e4:c2:02:92:ad:7a:5c:
4b:27:a7:3a:2f:25:ad:fb:14:4c:af:31:d3:1a:11:
4e:71:42:bb:4c:cb:9a:c1:63:cf:c4:d0:f8:48:42:
17:12:46:c0:bd:db:7c:06:d0:52:b2:b9:97:2c:6e:
60:20:59:bc:a8:c2:57:ba:98:61:b5:9e:17:44:9a:
dc:7b:2d:75:18:f2:b4:72:19:66:6e:86:48:e5:c7:
b8:fb:9e:9f:c0:27:f6:65:d5:2f:b0:e2:01:c3:55:
f2:b2:e6:11:88:29:17:a3:f7:ea:68:6d:10:5a:7c:
36:a5:8f:af:dd:2c:c7:50:23:f9:03:0e:03:3b:85:
05:57:69:d2:8c:bf:55:67:e0:e8:9a:55:ed:e7:10:
cf:06:01:d8:41:27:d3:83:70:74:0a:92:ad:89:4c:
0a:fb:fa:a7:d8:1a:1c:24:aa:58:de:ce:c0:f0:b1:
08:4f:3f:ab:ea:30:a9:22:75:d5:1b:0b:74:26:14:
74:e4:46:33:b2:3e:a1:dd:8b:34:62:bb:a6:2f:31:
8d:69:af:fe:ec:58:1c:87:32:32:e4:06:7a:89:5b:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B3:4D:0E:E0:1A:CF:4F:FF:81:5E:4D:38:44:D3:57:B7:48:15:5E
X509v3 Authority Key Identifier:
keyid:E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:37:59:2f:f9:03:c1:42:6e:1a:a3:64:68:1a:3c:e9:5c:94:
5a:23:35:13:2c:1d:84:3f:f9:8f:8d:b1:9d:69:ec:44:44:a8:
a1:27:41:2e:e0:b5:ff:2f:be:a8:e9:54:03:45:7c:00:dc:44:
95:64:21:73:5d:cd:3b:dd:04:cc:d3:ee:c6:62:74:ed:6f:cc:
c1:d7:7a:4f:40:54:d4:95:64:e9:bf:0a:6a:db:19:cb:92:e6:
db:1d:d0:62:8b:3c:6d:86:dc:38:30:4d:80:34:d0:08:2c:32:
79:5a:db:ab:20:88:75:37:99:8f:31:94:75:45:60:d5:4d:e2:
17:02:19:07:86:8f:db:23:8d:c5:49:22:8e:cc:a3:bf:8d:85:
8e:be:8f:03:d3:ed:ec:b2:2c:2d:33:f3:51:dc:4d:3a:b3:97:
10:2b:10:b9:57:23:d4:f4:b8:6d:9a:fc:fa:3e:d0:e6:2e:75:
ef:c3:db:d1:3a:9e:13:28:d7:56:83:9d:c6:6d:ba:ce:bf:95:
42:7a:74:f9:bd:dc:c9:34:6f:a9:0a:ab:60:2f:26:ba:77:4b:
79:4f:42:57:9e:e8:59:b1:31:8f:36:6c:97:eb:86:6e:c5:87:
f1:f2:d4:31:5c:95:cd:aa:35:ce:02:ad:c4:2f:6f:5b:6d:a7:
b2:34:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:08:07 2025 by rpki-client