Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: SXFcHPna6pEYoac4Y6fJYuX+j2osMGzBSR364pyQGoo=
Subject key identifier: E4:08:3D:BC:4E:31:B7:FE:CC:41:9B:0D:5E:37:D4:F5:6A:A5:7B:89
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 0195E19072F3CCAFE2018990EE1ADFF2A77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 11:01:34 +0000
Manifest this update: Sat 29 Mar 2025 11:01:34 +0000
Manifest next update: Sun 30 Mar 2025 11:01:34 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: +XAwF+k7BQLAbceHKidFOlAidQAzHUXSl0swA8jsIt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:72:f3:cc:af:e2:01:89:90:ee:1a:df:f2:a7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Mar 29 11:01:34 2025 GMT
Not After : Mar 30 11:01:34 2025 GMT
Subject: CN=e4083dbc4e31b7fecc419b0d5e37d4f56aa57b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:f1:be:28:4a:89:27:ac:67:10:f5:22:df:
6f:1b:77:b2:32:53:e6:1e:e1:5b:c0:ed:a6:65:25:
43:25:cd:19:71:0d:2d:e2:ca:65:67:c2:99:55:2d:
e7:71:cc:cb:7f:af:93:46:f7:9f:46:5b:eb:67:f9:
a5:c6:75:e1:9f:d6:06:93:87:17:98:1d:9b:c0:4d:
c4:da:d2:4b:8c:59:d5:2e:cc:68:3d:c2:45:05:5f:
7c:d7:85:5a:ca:c3:d0:77:d9:a5:07:cf:23:2c:f4:
c6:59:23:2d:5b:a1:96:a9:c8:06:46:75:a0:e9:cb:
99:ad:87:33:ef:6e:cf:89:31:97:30:8c:44:8a:1b:
f8:ec:20:e1:b6:be:fa:4e:f3:1d:d1:93:64:42:d2:
fb:7e:3e:0b:3c:00:fb:44:5d:e6:b0:7d:e7:20:17:
aa:24:0b:d7:9b:11:25:36:2b:c8:83:5b:d9:28:71:
8b:f6:02:d3:3a:29:d4:bc:1b:ba:f8:f4:db:69:46:
b6:df:81:e3:a6:7b:48:f5:00:79:46:9c:c3:b2:b7:
22:aa:9d:99:dd:fe:24:56:49:17:4e:05:9a:17:03:
99:bb:b7:16:99:c9:2f:bf:2d:81:53:ef:f6:36:b7:
21:9e:c3:7a:a9:e8:c8:f9:39:bc:ec:66:c3:1a:03:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:08:3D:BC:4E:31:B7:FE:CC:41:9B:0D:5E:37:D4:F5:6A:A5:7B:89
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8b:4a:81:da:7d:ca:09:7a:2e:44:dd:c5:9e:10:e2:ff:64:
1c:b5:41:40:c2:14:57:53:02:e1:75:61:e3:bd:fb:bf:12:0f:
d2:e5:6b:a0:70:b3:aa:d6:91:b1:60:60:d5:79:24:df:e1:fb:
3a:8b:67:18:95:01:2b:c0:d6:f1:38:79:75:00:9c:5b:9d:ad:
bb:fa:7b:92:10:f0:b6:7e:b2:df:ea:b8:51:d1:49:67:95:80:
b9:45:c8:c9:d7:8a:88:f9:ee:2b:d0:13:46:a1:5c:0d:69:f2:
37:6a:5f:69:3d:98:4c:16:e4:e7:bf:b9:7a:36:48:ee:94:ab:
6b:3a:5a:ca:cf:cd:12:8c:c6:6a:55:c5:3f:07:59:58:32:80:
e8:af:21:c2:e8:d5:58:8e:47:a5:6b:25:48:5a:6d:e2:a7:12:
3b:a2:88:80:d6:56:51:52:e4:32:0f:6e:3f:1e:d6:4d:43:17:
de:89:42:4b:c1:52:3d:08:ec:d9:93:d0:c2:69:9c:26:e4:b2:
ff:67:38:58:15:ba:57:f4:b2:e0:c2:b8:ee:a6:21:16:cd:28:
74:65:f7:39:01:44:be:00:46:e1:ef:15:90:17:20:c8:e3:bc:
d7:93:c6:6a:c6:45:4a:ae:5d:89:b1:62:05:4f:9f:3c:8a:2c:
5c:fa:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:32:07 2025 by rpki-client