Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
File: Ami5ML7spR-_NUP-efmxk0XPE9U.mft (raw, json)
Hash identifier: SUqOpfCUM7RtZ8Th0V4cR8veE7otXyiZD23Uh1h8S1I=
Subject key identifier: 5B:93:44:FF:5D:A9:9F:39:AD:7A:AA:7A:15:6D:43:CB:D0:16:0B:E3
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 0195E0EB0D2247A807D2F0F450DAD5301B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
Manifest number: 0A8C
Signing time: Sat 29 Mar 2025 08:00:55 +0000
Manifest this update: Sat 29 Mar 2025 08:00:55 +0000
Manifest next update: Sun 30 Mar 2025 08:00:55 +0000
Files and hashes: 1: 7ocFAoRHk3yJWF4ccbCKPsPczz0.roa (hash: 3rzZftACx3aNRwkNijs0bb/ATBefsoIo/62WXVgzLj8=)
2: Ami5ML7spR-_NUP-efmxk0XPE9U.crl (hash: EZ/zRTcWxAg06P4IJpBdUmHQbIC/8/SiWD/FfqTgAfA=)
3: KQ2gfKjDTAqDCIF8rg6ctK4u8jw.roa (hash: SW1oNVSy3V9mCkDE3DhSyTP3T2L66HAY6yybOJ8XTqM=)
4: z58icxsnW3D1G-Tg8oJfAEu4K30.roa (hash: 2xl+ZWAT8+7LeSxTlZeMXeVfz1ij8cub6sBtbC4Yv/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:0d:22:47:a8:07:d2:f0:f4:50:da:d5:30:1b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Mar 29 08:00:55 2025 GMT
Not After : Mar 30 08:00:55 2025 GMT
Subject: CN=5b9344ff5da99f39ad7aaa7a156d43cbd0160be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:7e:87:b1:c0:f0:53:3f:ba:17:99:46:a5:
b1:26:93:3a:37:31:e6:f5:4b:08:a1:28:0b:1f:43:
16:52:d5:9e:23:37:3f:95:75:f8:6b:42:c5:ad:7b:
b4:77:a8:a1:fa:b2:aa:a1:4a:a2:56:b7:5a:ed:e4:
6d:5b:c1:d1:88:00:41:e5:51:e1:fb:02:94:86:0e:
21:43:58:2a:d2:66:3e:83:a7:e7:64:28:e9:c2:8a:
ae:aa:6b:fc:41:d6:1d:41:49:0e:7e:c3:b9:a7:2d:
64:af:1b:96:e7:a8:c4:2e:b8:ce:b0:f2:66:39:69:
1b:9d:cf:bc:be:4f:e7:db:95:61:29:92:43:78:bf:
d9:c0:5f:6e:3d:cf:7e:06:d4:93:53:73:5d:ed:8b:
1e:8d:c9:d5:bb:f6:b2:10:41:4b:85:13:3c:aa:de:
c1:2e:5b:ad:31:ed:5b:ca:95:52:43:1d:94:00:58:
94:79:aa:ab:bd:57:29:40:98:d6:2b:d9:e6:61:5d:
05:65:42:cc:24:35:c6:8b:70:b9:d1:e6:96:03:63:
e4:2d:30:d0:7c:ab:13:b7:6c:33:5f:33:21:73:f0:
d6:f7:2e:8b:a6:18:18:f2:21:74:a3:25:e9:1a:c4:
67:0e:44:f6:57:50:de:20:67:1f:b1:2d:17:00:dc:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:93:44:FF:5D:A9:9F:39:AD:7A:AA:7A:15:6D:43:CB:D0:16:0B:E3
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:18:91:92:ab:fc:bf:a8:e4:6c:94:8b:58:72:1c:30:97:13:
4c:e2:19:23:87:9c:ee:f7:c0:8e:9b:1b:8b:29:e3:01:fa:0f:
db:84:e0:d7:79:ae:74:8e:ee:11:f8:a4:05:e6:f3:e6:4e:3f:
ef:db:34:44:5c:8c:73:0a:af:9a:d2:5d:de:73:b7:77:85:e3:
73:ee:f3:e1:82:51:e2:3c:dc:d1:fb:78:4e:a1:a4:84:7e:d6:
99:92:78:ca:7e:51:18:d2:75:b0:e6:cc:16:3d:ce:5a:07:3f:
80:bf:b2:94:af:cf:bd:28:6f:4f:2a:e1:64:f3:64:75:c1:b4:
2d:58:89:e4:84:f5:81:81:1b:2b:23:12:5b:c0:09:4f:43:76:
5f:e3:4c:dc:7e:50:8e:7a:10:03:f3:96:cc:7d:04:5a:fe:a5:
d6:7a:d8:f0:77:43:d1:c4:1e:0d:08:09:68:f5:01:8a:04:45:
f4:97:b5:6e:4b:af:95:c4:5d:5c:c3:84:91:dc:e8:30:22:c4:
b6:c5:e0:14:17:f8:a9:d0:c5:1e:1f:4d:05:a2:86:8b:51:46:
34:b5:57:26:64:fa:13:50:19:ec:30:e0:5c:7b:6e:94:5c:34:
9e:90:99:e5:43:43:12:b3:97:0a:8a:c2:1f:35:44:cd:9c:92:
4a:0d:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:39:39 2025 by rpki-client