Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: U0koOLfCdmEdFqbbS8sDBBGplZku+kid6PMLIWFSi+s=
Subject key identifier: F7:B6:19:21:35:AA:C6:46:23:DB:A1:B5:73:AE:6A:42:85:91:9C:DF
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 0195E0B446BEF0CF4F30489B699EDEFEE66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 0446
Signing time: Sat 29 Mar 2025 07:01:05 +0000
Manifest this update: Sat 29 Mar 2025 07:01:05 +0000
Manifest next update: Sun 30 Mar 2025 07:01:05 +0000
Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: yMaam7wF3rWA5ttgJ1K5wbvUgYH01nsAkHNva3jGP1A=)
2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=)
3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=)
4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=)
5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:46:be:f0:cf:4f:30:48:9b:69:9e:de:fe:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Mar 29 07:01:05 2025 GMT
Not After : Mar 30 07:01:05 2025 GMT
Subject: CN=f7b6192135aac64623dba1b573ae6a4285919cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:5e:e6:b2:c7:fc:8b:97:88:65:5e:ac:ac:
85:78:df:94:af:ac:d7:32:2b:ac:14:57:62:6b:37:
b8:08:f5:35:c8:bc:6a:a0:32:80:6b:58:03:f3:30:
ac:cd:a4:bf:fa:3a:7d:99:be:82:0c:bd:cd:e7:de:
b1:78:db:9d:e9:d1:af:1f:80:ca:92:69:ea:d4:40:
2e:cd:be:13:db:77:19:f7:73:0b:59:44:3f:55:57:
14:5d:5a:8e:a9:0a:10:b4:aa:2e:73:1f:48:86:d1:
33:ce:e5:c8:d7:d6:1c:66:7d:ee:8c:ea:85:09:0a:
9b:b9:61:14:95:4d:11:22:6d:13:a8:45:43:3c:f0:
59:b2:9b:09:33:71:2b:41:2d:20:6d:50:78:9e:00:
66:e5:a5:0a:f7:b9:c0:a1:cd:73:66:b0:76:05:d6:
b6:cb:d8:14:02:9b:37:d7:24:46:37:0d:e0:67:40:
86:6e:2c:74:24:d3:6b:60:89:70:5e:1b:76:08:41:
2e:e9:93:1a:b2:09:02:78:70:b3:41:de:f5:f6:70:
4e:a0:43:0a:a5:f7:31:33:5b:18:ec:97:13:51:d9:
31:df:08:1e:9c:85:5b:3b:94:81:c9:c5:17:85:db:
fe:ee:98:e7:5e:b9:d8:c7:ec:33:c9:7a:62:85:41:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B6:19:21:35:AA:C6:46:23:DB:A1:B5:73:AE:6A:42:85:91:9C:DF
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:84:9b:6c:50:ee:f0:e7:89:a0:ec:ca:65:d0:e6:50:c0:c0:
71:27:6a:fd:ef:b1:88:9c:13:92:35:00:42:e6:17:3a:df:97:
2b:24:cf:b0:60:0c:38:93:96:b5:62:44:98:ab:41:12:bd:32:
b8:c7:62:a9:46:b6:b4:90:86:a8:e6:7c:cf:1b:05:0b:df:92:
b3:84:b3:f9:a3:4f:07:a6:64:40:1d:5e:5f:66:88:8c:8f:1d:
73:d3:91:57:77:59:76:c0:5b:64:c9:39:72:d9:4b:e0:94:7d:
ca:48:ba:fa:82:ec:56:77:b6:4d:9d:39:26:32:64:bb:a4:62:
42:9c:d9:d7:19:0a:8c:0e:22:00:3b:13:f6:45:c3:3a:35:a5:
a4:6e:f2:70:e1:2b:4c:a3:e1:b2:a0:99:5a:98:67:db:12:84:
37:8e:3e:aa:1c:ab:65:c6:be:74:40:94:34:8f:5f:f5:7d:16:
27:e4:0f:46:c6:b7:1f:d9:60:20:6a:cd:e9:82:67:c3:d9:8e:
da:fb:33:31:c7:b1:23:93:78:2b:93:66:42:2d:a9:b4:46:76:
7f:b1:c9:f0:e6:5d:e8:2d:d6:f0:bd:a2:ee:44:8d:d5:85:28:
6c:df:a4:cd:b5:f0:7b:a2:b1:ab:1b:dc:b5:61:69:61:3f:00:
b3:8b:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:38 2025 by rpki-client