Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
File: i5-syiLMDGDiN6eyBBaiYARaXGg.mft (raw, json)
Hash identifier: x0aZFhHHdDGu8LOM4Vdgmx4lV6c928zAzqxT0P1pmC8=
Subject key identifier: 7D:8E:76:8D:D1:A9:D7:21:5F:73:5A:26:19:C4:C0:EE:D7:38:DF:29
Authority key identifier: 8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
Certificate issuer: /CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Certificate serial: 0195ABEB05AAC79052AA473084D8916DC2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
Manifest number: 0CEA
Signing time: Wed 19 Mar 2025 01:01:01 +0000
Manifest this update: Wed 19 Mar 2025 01:01:01 +0000
Manifest next update: Thu 20 Mar 2025 01:01:01 +0000
Files and hashes: 1: FkyY0Sz6P-vEspCfDc5ti5faixQ.roa (hash: cTxtXDf2i+J5oFdILpbffZQpgT6dU26M1jcBVWXO1g8=)
2: i5-syiLMDGDiN6eyBBaiYARaXGg.crl (hash: dbXjfs5N+qr2C4SGv/2zJWstA4jUI+SSlUqYkuWLXzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ab:eb:05:aa:c7:90:52:aa:47:30:84:d8:91:6d:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Validity
Not Before: Mar 19 01:01:01 2025 GMT
Not After : Mar 20 01:01:01 2025 GMT
Subject: CN=7d8e768dd1a9d7215f735a2619c4c0eed738df29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:3b:d8:c4:b6:0b:cc:6e:80:20:6e:97:e9:
a2:32:d2:57:47:14:f3:73:52:8d:4b:66:bb:18:72:
e1:e9:dd:b9:e1:44:3d:c0:d2:bd:3f:d0:a5:b5:84:
a2:ff:c9:d9:e9:88:6e:d6:42:87:25:f3:c3:80:63:
85:aa:6d:d8:4e:97:6d:10:14:32:3f:ee:cb:d6:61:
8e:e8:3c:53:13:73:02:a0:ad:e0:32:5f:64:a8:a0:
8c:a9:c1:1a:fc:0a:38:5a:7a:92:eb:2b:ca:11:56:
f7:b8:31:04:92:65:a5:b9:80:9f:40:de:77:bb:e8:
dc:16:47:d9:e5:2c:6f:16:5d:04:c9:2f:0c:7d:02:
d8:a8:ca:98:40:97:7d:bb:c2:7e:5f:87:a4:03:38:
47:f9:68:89:9c:3a:77:d5:e9:7b:23:25:ce:72:7d:
30:bc:6d:00:6e:6e:ca:44:9f:0e:6c:25:b0:7c:c7:
89:ad:83:d1:99:bb:0c:32:b5:80:91:2b:28:ba:1e:
9a:02:b8:0b:77:6a:65:43:4a:f3:f0:e4:7d:75:3b:
7a:8a:9a:93:43:10:e2:c9:49:44:ee:ba:60:52:09:
54:5d:fa:01:2f:7b:44:65:ff:6d:af:fa:a8:3e:d8:
95:aa:8d:d6:a1:c6:4e:6f:78:dd:e1:c7:c1:3a:8c:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:76:8D:D1:A9:D7:21:5F:73:5A:26:19:C4:C0:EE:D7:38:DF:29
X509v3 Authority Key Identifier:
keyid:8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cc:3c:dd:9c:1b:cd:20:55:e5:7b:42:40:e4:9e:b5:a8:c1:
8a:dd:07:6d:95:32:b5:77:b4:61:3d:37:f1:4f:c9:ab:87:e9:
b2:a3:f6:c6:75:7c:dd:fa:96:35:6e:90:67:c0:83:03:9c:3b:
47:fa:d9:e0:25:fa:07:96:41:e0:21:91:7d:52:19:db:d3:8f:
6c:58:74:60:dd:20:da:75:67:f5:00:4d:94:56:ad:d0:0c:3c:
c8:a1:a2:45:51:31:b9:bc:00:0e:9e:5c:a4:56:dd:8b:46:4e:
73:92:90:94:ad:b1:6d:75:47:6d:62:d7:bd:5e:65:43:64:08:
f4:ea:15:ef:b6:75:a5:c7:92:27:f2:57:3a:72:f0:0e:41:3d:
92:9a:e7:cf:46:9f:42:5e:d8:99:62:22:61:a5:cd:d8:8b:db:
92:5a:ef:56:2d:fa:4e:84:d2:68:ce:27:14:9c:d6:02:a3:e3:
f2:f6:76:64:19:ca:2f:6b:78:04:06:b2:6f:6b:2a:74:f5:6c:
2b:de:ad:5c:ea:81:4d:66:c1:8a:a2:e6:f0:21:22:57:12:6a:
07:ec:57:b9:44:9c:67:ce:73:af:64:ba:30:2c:d5:e1:66:03:
4b:8a:a8:03:c2:cc:3c:fa:e4:ab:ad:a1:a2:7e:1a:17:3d:47:
ac:9c:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:14:38 2025 by rpki-client