Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
File: x8_M1olXoPcEOajWD_PIuNkRowg.mft (raw, json)
Hash identifier: SCFlp00tGgRQQ5zDeCmW2NpUG2IVF6akt89iFnoJCuE=
Subject key identifier: 9B:AC:F5:A6:BA:62:2C:A4:83:E5:98:30:F7:F3:A4:80:78:CE:D6:C6
Authority key identifier: C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
Certificate issuer: /CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Certificate serial: 0195EA5BFA5FFAAE5E9DA0149F355F04AF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
Manifest number: 0C49
Signing time: Mon 31 Mar 2025 04:00:51 +0000
Manifest this update: Mon 31 Mar 2025 04:00:51 +0000
Manifest next update: Tue 01 Apr 2025 04:00:51 +0000
Files and hashes: 1: YIZxa7cJn8DAxFe_bq6gP-moAuc.roa (hash: aP/jGcxACW28RpvaLI/m2V4NPNIHiL114dmzUPqAu9I=)
2: x8_M1olXoPcEOajWD_PIuNkRowg.crl (hash: +9WJGNfDt4phZzNQLupATd7lfdRQ6B/SmYb1lkaEnRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ea:5b:fa:5f:fa:ae:5e:9d:a0:14:9f:35:5f:04:af:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Validity
Not Before: Mar 31 04:00:51 2025 GMT
Not After : Apr 1 04:00:51 2025 GMT
Subject: CN=9bacf5a6ba622ca483e59830f7f3a48078ced6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:1d:3a:f1:d7:6e:17:6a:43:00:8d:ed:55:
2d:dd:0a:06:28:45:70:4a:36:72:70:ad:01:5f:10:
ee:c1:11:74:7a:63:32:03:d8:4e:bc:94:c7:e7:ec:
40:f0:c3:3b:65:c4:d2:7d:ad:11:15:ef:51:dd:f3:
a1:6b:1b:3e:89:c3:26:1d:ab:c4:ba:50:31:32:bc:
7e:92:ff:be:a1:8d:79:9e:9a:a3:0f:59:ba:33:80:
24:a4:0d:d5:e7:01:de:c6:78:dc:30:71:b5:22:d4:
b5:cf:27:73:e6:b8:90:fc:f6:b3:c8:13:8d:81:0d:
57:aa:49:88:2b:fe:22:64:8d:20:21:b1:d1:d8:0c:
8d:91:a6:f2:20:2a:f5:f8:a3:49:62:ce:30:3f:b1:
16:c3:82:b1:2d:22:37:b6:bd:2e:c4:67:dc:69:19:
0f:7c:51:9b:95:68:fa:41:ae:e2:80:0f:c7:08:e4:
7d:37:72:9c:6a:6e:25:20:d1:c5:22:a1:18:ec:07:
b8:46:e4:ca:2f:c5:ee:98:8d:56:02:9e:06:11:50:
9e:11:1f:32:ac:f9:dc:4d:15:43:c6:3c:c4:8a:c0:
96:3f:2f:36:83:e0:2b:22:90:36:6d:77:8e:6a:b4:
29:d1:71:5a:c4:e2:cd:b9:2f:ce:1f:42:3b:74:b5:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:F5:A6:BA:62:2C:A4:83:E5:98:30:F7:F3:A4:80:78:CE:D6:C6
X509v3 Authority Key Identifier:
keyid:C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:69:4f:eb:92:58:87:ce:7d:ba:0c:1d:41:ee:e1:e9:98:2c:
2a:2b:35:dd:83:a9:b5:fa:02:a9:38:cf:3b:cc:ee:cf:55:3f:
e8:9c:42:67:20:b0:24:08:b1:d3:9e:80:48:39:6e:6a:94:74:
d8:e0:25:ad:b1:0a:04:d2:34:c9:f0:88:09:23:bd:34:fb:e0:
e8:93:5e:a7:84:00:c4:b4:14:a9:6f:8b:fe:10:fb:0e:76:62:
6f:65:b3:c9:8c:6d:84:d1:04:4d:07:48:09:62:36:db:5f:b8:
c9:d9:ba:e4:cd:e7:63:9a:d4:1f:4a:d7:90:62:2f:32:c9:df:
ce:48:28:be:55:7d:99:11:ee:5d:95:eb:e6:f4:1f:d9:88:ab:
73:96:bd:05:2e:56:ef:e4:c1:55:8e:55:58:11:c5:74:b9:d0:
ac:3b:2a:45:6d:be:e4:3e:f0:b5:84:99:a7:b4:e2:03:d6:3f:
74:bc:43:60:e2:50:dd:e3:be:83:7f:e3:0b:d4:72:8e:c7:d3:
4d:95:15:82:34:eb:f0:b3:8e:2e:b9:6a:04:08:4b:35:50:c9:
06:9a:4c:b6:c3:3e:c2:e1:ea:b6:23:4a:11:26:9e:25:ca:8f:
69:d7:a1:74:2d:7b:5d:75:90:b0:28:20:4f:79:11:3e:6b:a9:
83:30:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:44 2025 by rpki-client