Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: SmMAc+HXPJ+iAWcW5cLOwi49qxY1GSzVUcHjvL2CyQg=
Subject key identifier: 48:9B:0D:2A:1C:59:2A:95:1A:87:12:B1:9C:C8:E3:A0:5C:50:1F:73
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 0195E1590E34480D798AA7973F6CF8EA2503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 026E
Signing time: Sat 29 Mar 2025 10:01:04 +0000
Manifest this update: Sat 29 Mar 2025 10:01:04 +0000
Manifest next update: Sun 30 Mar 2025 10:01:04 +0000
Files and hashes: 1: Fc-IaUdYzYO5dqZAUEbmajEzC6Q.roa (hash: X8wYVxwVSi64eSBFgWeo409dfz2ei02HOXjRq1htjB0=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: f2tyitRZoCQ4RgDfmQkaEZO3Ys27sOxV8RvFy40Blzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:0e:34:48:0d:79:8a:a7:97:3f:6c:f8:ea:25:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Mar 29 10:01:04 2025 GMT
Not After : Mar 30 10:01:04 2025 GMT
Subject: CN=489b0d2a1c592a951a8712b19cc8e3a05c501f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:17:74:33:54:17:df:6d:9c:24:58:9b:1d:
e2:46:e5:21:2d:60:a0:ff:3b:17:7d:a9:97:af:ef:
ec:ec:bf:90:44:78:23:46:b7:6a:3b:ab:62:86:fb:
ec:a0:f8:db:66:27:46:0a:21:bf:8b:a5:6a:ec:98:
20:54:15:95:42:ba:4c:83:bd:82:dd:40:c8:83:70:
cd:f1:e6:13:c0:07:fc:17:c7:14:cb:0f:15:60:1d:
9f:53:e7:1f:b9:a3:9e:23:16:4b:ce:69:5f:7c:73:
34:cf:c3:15:68:c3:be:35:28:12:05:41:5e:82:65:
35:3c:4e:04:54:70:af:0b:ed:10:1e:68:ab:cb:91:
4a:47:b6:14:71:5a:ca:89:7d:1d:cc:af:18:76:cc:
dc:bb:af:c4:a1:6a:fa:2d:4f:fc:4d:cf:63:1a:ae:
52:6a:2e:b9:92:a5:e6:2c:ff:ca:93:c6:92:eb:9a:
85:3a:53:2b:c3:9e:cc:4e:c7:48:4a:8e:26:07:6b:
64:a3:e6:01:33:0e:75:e9:67:8b:1a:3f:78:4e:5a:
93:86:58:40:a9:f9:bb:13:42:e8:75:52:25:f9:00:
a9:47:5a:40:b3:b0:a6:a2:06:63:cb:57:c0:96:51:
6b:17:b0:31:91:d2:92:07:02:e4:ba:7a:8f:c9:82:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:0D:2A:1C:59:2A:95:1A:87:12:B1:9C:C8:E3:A0:5C:50:1F:73
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:50:7c:73:c8:4a:40:f7:0f:71:54:ec:e3:f4:0a:56:77:08:
3c:f1:2e:eb:96:90:33:86:45:16:cd:27:60:66:37:ee:18:bc:
b8:37:83:3d:e2:fe:4a:88:9d:95:68:21:2e:f5:47:a2:1a:05:
f0:d6:37:b3:9b:b1:df:ef:d4:eb:0d:b1:2f:b8:cd:82:05:0a:
f0:9f:bd:8e:48:b1:ee:37:10:5c:1a:3f:6f:85:10:15:9c:71:
90:99:b6:53:f3:53:fa:e4:40:83:88:63:74:e7:59:c0:6a:02:
d1:dd:bf:6a:39:99:72:6b:2c:38:76:d9:11:2d:1a:b6:39:48:
7a:c7:10:dc:ca:31:7d:66:8b:67:18:31:35:37:ae:8e:e2:28:
a0:7b:ab:fe:d7:70:82:7a:ce:99:d3:ef:ad:4d:fc:38:54:ef:
8e:84:92:04:41:19:34:66:85:d3:de:c6:66:6b:0d:af:1d:9a:
64:f9:fc:47:45:0f:42:e8:ba:22:12:75:35:35:d6:a4:98:c5:
b5:86:67:36:1d:9d:92:a7:d8:36:5d:c9:a3:28:69:e0:ba:c2:
51:dc:02:76:73:ca:65:e3:e0:6e:8c:c6:73:2e:d0:43:9f:a6:
90:f0:e6:09:f1:04:de:ac:f9:89:e2:8c:dc:98:50:05:9d:49:
5d:44:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:13 2025 by rpki-client