Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: iVuY8Ekv+hdmKOy0Xq7bSiToP/C1OVaVWdBacnSkh8U=
Subject key identifier: D0:F3:E2:4F:BD:11:11:6E:FE:D9:0D:B8:05:2A:97:8C:65:0D:08:71
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0195E12200045584DD4C23E459B70D6CA09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 03C1
Signing time: Sat 29 Mar 2025 09:00:56 +0000
Manifest this update: Sat 29 Mar 2025 09:00:56 +0000
Manifest next update: Sun 30 Mar 2025 09:00:56 +0000
Files and hashes: 1: O9Ajtyg883LEr8Ee-m5Sgn7FXHw.roa (hash: Im6AzYvYZrYyzytszKHEKC4yclMHkP5K8b4hpoNpsHk=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: VMJ46ReOJLDUMdmdbeTSsOY/yNnOjXXC7DNMlN61K7s=)
3: tx8PeD2NpfiRfHK9lGj-BUDFkyM.roa (hash: d3qvWfloftoYFMAYjWvL1QMprH3WKAy7gGfoEkSLBEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:00:04:55:84:dd:4c:23:e4:59:b7:0d:6c:a0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Mar 29 09:00:56 2025 GMT
Not After : Mar 30 09:00:56 2025 GMT
Subject: CN=d0f3e24fbd11116efed90db8052a978c650d0871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:09:7e:c9:47:ea:9b:20:ce:2d:d8:97:e1:
d4:01:c4:72:7b:e8:01:d5:d3:ff:bd:42:7b:7d:fc:
46:32:e7:27:55:32:f9:e2:b0:09:06:f9:c8:32:aa:
84:93:2c:2b:7a:ca:4e:2a:14:8c:c2:a7:77:b3:d7:
3c:da:7e:68:f3:c5:3b:01:08:9d:be:a9:0d:1a:74:
e1:d4:33:5f:45:8e:05:02:f2:d7:ec:83:d3:c8:f6:
f0:c8:e5:06:94:43:e4:9e:a9:e2:61:42:8b:4a:d0:
b3:18:d5:58:de:da:0e:8b:28:a2:72:15:dc:a1:a2:
37:84:3c:21:da:9c:ac:15:d4:29:91:0c:a2:6c:e2:
02:b9:a0:06:34:aa:3b:4e:48:00:ad:be:9c:8a:eb:
4a:29:b1:74:0a:9d:ed:a7:c1:5d:f5:6c:e5:17:87:
09:92:3a:31:cd:3c:ec:a6:99:5a:a1:c3:1b:41:c3:
81:6b:ad:f7:c8:8f:3f:6e:6b:15:1c:54:a1:be:d4:
aa:3f:25:a7:71:e2:c1:d8:f9:b2:08:27:27:d4:61:
ee:48:2a:6d:16:24:0e:fe:f4:b6:0f:2e:b1:31:67:
74:6b:83:2c:03:b3:ea:13:fc:2b:d2:41:00:3a:8c:
31:de:cf:d0:14:c9:e1:dc:99:a9:5a:84:2d:cf:dd:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F3:E2:4F:BD:11:11:6E:FE:D9:0D:B8:05:2A:97:8C:65:0D:08:71
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e1:e6:c2:cc:ec:9e:05:53:64:90:aa:ba:48:df:eb:47:aa:
78:26:f7:65:a8:b5:54:84:ba:13:f7:de:ec:de:50:6e:6a:b4:
5f:85:38:f4:20:a9:3d:b6:69:70:b2:70:b1:18:5b:99:2c:a4:
55:4d:2e:ec:a0:a2:d7:b1:e7:05:e7:85:b4:86:9b:cb:06:a5:
63:79:69:06:14:0d:35:ef:67:6b:f5:bb:f5:fa:fb:99:c4:34:
d7:14:ab:04:25:b3:71:60:57:31:8e:f1:bf:1a:af:b1:c8:bc:
72:b1:8f:7b:f2:b4:50:11:4b:e9:14:0a:6f:ee:01:05:44:d9:
35:bf:d1:bb:27:fd:0e:23:e8:13:6c:c5:07:c4:24:dc:8b:42:
ea:5b:67:93:e6:6b:d9:0f:b8:07:60:52:a3:59:31:02:10:90:
60:a8:e9:19:f5:3a:91:63:df:aa:7f:00:47:f3:6d:20:db:b3:
47:e9:5c:ba:05:43:e8:50:4c:56:f2:1a:49:07:03:04:7b:b0:
38:5c:ae:cf:28:96:29:a6:ea:d4:31:34:57:c2:0e:80:b9:9a:
11:1b:d4:75:c2:4c:34:89:f4:eb:52:f1:b7:e9:e4:a5:a2:91:
8f:c9:e8:e8:1d:a9:96:00:fe:d7:87:ba:a6:d7:a5:58:92:99:
9a:26:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:44:18 2025 by rpki-client