Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: YhK0uX5cUIBIEKaiXHkwCrjQClvHeFewid6p45po2DU=
Subject key identifier: 69:0B:78:A9:82:51:D5:6F:1C:2D:3B:8B:E6:7E:5D:6E:94:06:38:4A
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 0195E0B44AD40B29FEA25E652DD58E12679F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 14BF
Signing time: Sat 29 Mar 2025 07:01:06 +0000
Manifest this update: Sat 29 Mar 2025 07:01:06 +0000
Manifest next update: Sun 30 Mar 2025 07:01:06 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: +DOvReOIvNLS1KcdMuReT+Pe8YHhJcRguIcqWf2HOzw=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:4a:d4:0b:29:fe:a2:5e:65:2d:d5:8e:12:67:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Mar 29 07:01:06 2025 GMT
Not After : Mar 30 07:01:06 2025 GMT
Subject: CN=690b78a98251d56f1c2d3b8be67e5d6e9406384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:d6:f7:28:f4:0a:11:b9:fc:38:a5:6d:34:
c9:ad:47:26:8e:f0:05:19:73:0e:c3:74:ab:2b:c7:
22:e7:1e:9d:b8:8f:62:37:17:f1:f1:cf:d7:f3:c5:
03:7d:19:09:73:b3:cc:36:16:97:b7:77:ea:86:8c:
db:64:ae:36:54:1a:1a:5c:91:2f:fa:5e:73:3f:fa:
57:d2:57:03:eb:a9:67:40:8a:ec:23:a6:3e:36:02:
9e:aa:74:7e:99:bb:4b:b0:c2:ec:7b:de:15:b8:91:
75:8d:46:d9:64:cf:7b:0f:b9:9e:d2:ed:d9:59:68:
bc:43:68:10:7a:1f:cb:82:3b:ec:9c:8a:3c:84:35:
cf:f6:10:72:b6:e6:91:d9:d8:5f:9c:fc:51:f6:6a:
ff:d9:b9:30:96:a0:31:1c:e1:17:ea:fd:38:e8:38:
4c:91:f9:9e:9c:89:f9:1a:8f:d4:95:ed:a4:a3:f4:
7f:d9:fc:f8:51:37:c1:22:79:23:5d:18:01:3c:d9:
9f:ab:31:1c:05:2e:b6:89:56:4c:c6:51:b3:74:b7:
e2:3c:c9:84:04:95:cd:7e:67:ac:d2:a7:40:e6:af:
cd:4f:fe:88:b8:4a:91:7b:b4:33:ba:35:a3:25:1d:
06:e4:d8:5c:40:d5:46:03:77:db:ba:53:ee:c2:55:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0B:78:A9:82:51:D5:6F:1C:2D:3B:8B:E6:7E:5D:6E:94:06:38:4A
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c9:99:aa:fe:a1:8e:cc:1c:3e:65:16:88:26:0c:20:fd:ff:
cf:97:ec:af:5b:9c:ce:ae:b5:68:f7:6e:83:58:cb:0e:a7:5f:
2b:de:b9:4d:5d:45:6d:ef:9c:89:4a:4b:45:93:4d:63:be:aa:
89:31:c9:97:3f:59:7d:c8:5d:31:79:5d:bf:c5:63:f8:a2:19:
66:6b:a7:e3:81:b4:96:b3:57:52:5e:93:0b:46:0e:91:85:11:
81:9f:57:01:ee:be:24:2d:0c:fd:4e:b3:bb:05:58:33:73:06:
fa:d1:5d:10:a1:d3:58:09:a9:fa:1a:4b:f0:a1:2f:23:86:72:
b0:88:f4:53:4f:45:cf:24:ad:9d:86:a1:8c:d5:7a:0b:fd:de:
86:30:1d:a3:7a:5f:5b:af:77:1c:f0:66:0e:2c:66:be:1a:ae:
35:c2:4b:b2:8b:6d:b3:22:11:6d:92:b5:b8:d4:0d:89:9f:dd:
8d:34:6a:0c:75:b3:0d:77:dc:65:8e:60:0a:2b:f0:30:ed:1f:
74:ed:d5:3f:a1:45:2d:45:d8:c9:be:25:c1:55:ab:f2:60:26:
d6:0e:01:57:0c:4e:0d:55:71:f2:dd:15:9c:5f:e2:22:f2:fd:
be:bd:c7:52:31:72:12:b0:b8:ee:65:ca:a3:7e:bc:e7:b4:f0:
5e:f3:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:33:20 2025 by rpki-client