Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
File: Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft (raw, json)
Hash identifier: /ZuLpjSYkP3Q2DJWwIcPZtCYxigHdCdslsqgT0uQWHI=
Subject key identifier: 3B:EF:CF:DB:E6:84:AA:2A:E6:48:F6:56:35:A2:D6:FD:F8:63:B4:18
Authority key identifier: 02:2D:58:0F:4A:06:93:58:F8:FA:57:EF:06:5E:18:F5:FE:93:69:80
Certificate issuer: /CN=022d580f4a069358f8fa57ef065e18f5fe936980
Certificate serial: 0195214CA28D7F0A45E9F0701C648DB0A96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
Manifest number: 0888
Signing time: Thu 20 Feb 2025 03:00:25 +0000
Manifest this update: Thu 20 Feb 2025 03:00:25 +0000
Manifest next update: Fri 21 Feb 2025 03:00:25 +0000
Files and hashes: 1: 7vPaeyI0ln68dhOnAOFd-xv37nM.roa (hash: ZgJ32R2xiY7rG7KLNZLVMbbgQ70wWnVYAoeDmfccZx4=)
2: Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.crl (hash: BtBTHovGNBmMIojHboIzfFpz2Ip8Bt6zpEVm8cEBhQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:21:4c:a2:8d:7f:0a:45:e9:f0:70:1c:64:8d:b0:a9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022d580f4a069358f8fa57ef065e18f5fe936980
Validity
Not Before: Feb 20 03:00:25 2025 GMT
Not After : Feb 21 03:00:25 2025 GMT
Subject: CN=3befcfdbe684aa2ae648f65635a2d6fdf863b418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:34:0e:2a:42:4f:4c:33:fc:a6:85:57:b6:
bf:8d:a0:af:d9:bf:0e:76:85:33:5a:9a:68:bb:be:
41:f3:cf:aa:73:34:01:8b:ed:c1:01:e6:1b:8f:38:
a8:69:04:a6:03:90:81:cd:88:82:f4:b6:26:a5:2e:
44:70:7a:85:ba:ef:e6:5c:39:ef:7b:ea:83:e4:c0:
0b:a3:d4:60:28:4f:a8:d5:25:f8:88:25:1d:97:66:
2d:13:0a:a4:7b:f1:d5:76:03:39:56:ca:a0:81:ea:
f3:02:59:c9:72:a2:c8:19:37:4f:20:cc:29:16:1c:
bc:b8:29:e3:b4:a8:76:5c:c3:0f:3d:b8:38:09:c0:
cb:c0:4b:42:7d:21:a1:64:71:3b:bb:01:00:bb:86:
6a:59:e8:ac:dc:b6:c8:ca:91:e2:d7:d5:bc:22:b5:
45:cb:11:46:e1:2f:f1:f1:a7:0f:9a:e2:4d:63:0f:
dc:74:25:d1:7b:2d:8b:f8:0a:67:f8:d4:2b:b8:1f:
7b:ce:b4:e5:5c:ad:e5:33:71:76:57:da:45:4d:27:
3b:7a:74:3c:19:74:46:7e:05:19:c3:f0:a2:a2:ae:
8d:c1:83:bc:3b:2d:8f:14:93:4b:69:ff:05:9b:2e:
60:42:2e:42:8d:f3:94:a2:0e:f9:aa:cf:11:36:63:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EF:CF:DB:E6:84:AA:2A:E6:48:F6:56:35:A2:D6:FD:F8:63:B4:18
X509v3 Authority Key Identifier:
keyid:02:2D:58:0F:4A:06:93:58:F8:FA:57:EF:06:5E:18:F5:FE:93:69:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/715b05-39d8-4261-9bbb-c4856d48846b/1/Ai1YD0oGk1j4-lfvBl4Y9f6TaYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:db:45:27:4e:68:fe:a2:4a:63:67:5c:e2:17:b8:12:00:f4:
cd:76:89:f5:03:33:0f:d4:09:bf:a5:eb:f8:82:b8:62:94:d5:
22:e3:62:c4:19:1a:58:eb:7c:cb:0b:34:1e:53:45:95:e3:1e:
48:35:cb:d6:fc:eb:c6:77:93:cd:0f:a1:6c:3e:5f:a7:3f:09:
a6:8c:c1:de:73:09:05:f7:3f:18:3f:f9:f5:5f:46:d8:a0:dc:
6d:f6:1c:f2:f5:3d:8b:cc:36:7d:72:e3:7d:f0:2e:f9:8f:39:
fd:89:a5:4b:19:36:26:7b:96:60:26:fa:19:84:60:41:92:61:
c2:83:ff:73:1d:8e:44:5f:7a:70:ff:ce:23:3f:26:3d:b0:d7:
e1:85:83:70:df:22:5c:14:95:99:35:a2:08:37:3b:09:3f:c5:
e9:bc:eb:a1:f3:6b:bf:3d:a2:f5:ec:1b:36:38:c4:c3:46:dd:
4b:01:82:a5:2d:44:79:ee:df:7d:a0:ec:70:eb:cd:05:e2:7b:
88:cf:30:e1:fb:3b:56:e8:20:ce:68:bd:5b:8c:dc:a2:f9:d3:
d9:99:1f:fe:e6:bf:b3:79:9f:fc:fc:35:3e:2a:ce:44:6c:8c:
fd:fb:0e:38:c2:54:12:7a:66:ba:c0:a7:7a:e5:f6:23:5e:38:
d0:aa:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:09:05 2025 by rpki-client