Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft
File: rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft (raw, json)
Hash identifier: WqAds5EkY1qb0iNj3voRR9F+O7iGGLaqH3b2sTbou5s=
Subject key identifier: 82:E3:9A:18:4E:FA:D7:34:CF:9E:07:14:2C:5E:BF:A1:4B:D9:CB:A9
Authority key identifier: AD:32:7A:E7:F5:B3:FC:00:82:64:97:1F:A8:1A:59:0A:9B:DF:22:38
Certificate issuer: /CN=ad327ae7f5b3fc008264971fa81a590a9bdf2238
Certificate serial: 01957E6D579D53808E772597A1B57C22FCD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft
Manifest number: 0437
Signing time: Mon 10 Mar 2025 05:00:49 +0000
Manifest this update: Mon 10 Mar 2025 05:00:49 +0000
Manifest next update: Tue 11 Mar 2025 05:00:49 +0000
Files and hashes: 1: p6qthrN8_e6stt0izeQsC_H8i0s.roa (hash: xtnHMRFtTRaKU4NhAA9P2QlXHUkeUgYSEJTI5w51nTw=)
2: rTJ65_Wz_ACCZJcfqBpZCpvfIjg.crl (hash: q+hPehhWmKjrmI80GBCgTNG9MgP1YY9uJh7EENNslKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:6d:57:9d:53:80:8e:77:25:97:a1:b5:7c:22:fc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad327ae7f5b3fc008264971fa81a590a9bdf2238
Validity
Not Before: Mar 10 05:00:49 2025 GMT
Not After : Mar 11 05:00:49 2025 GMT
Subject: CN=82e39a184efad734cf9e07142c5ebfa14bd9cba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:a2:f9:5f:2a:da:66:8d:11:4e:69:c7:69:
3f:cc:07:11:0b:8b:28:d3:0e:7e:31:6e:4e:a2:fb:
9c:e9:eb:88:ec:5e:4e:05:5a:39:ef:3b:92:49:e4:
74:e1:ad:e8:f9:26:5b:b7:16:b8:be:7b:71:4e:91:
43:39:34:49:21:72:42:5b:7d:14:b9:d9:78:d4:0d:
44:b5:52:33:61:bc:1e:35:b4:60:49:00:89:cd:07:
a6:1a:66:4a:04:84:95:de:7b:0c:2d:a7:e7:a2:a9:
d7:c1:d9:4c:e5:1f:5e:13:7a:4e:61:ca:ad:aa:dc:
38:7f:ce:12:a9:1a:31:65:23:87:f2:9f:60:a3:72:
5d:b7:48:1d:a5:09:0b:9b:de:ae:6d:6c:94:c1:06:
62:d1:e7:c5:b8:b6:e6:54:99:d0:95:17:d2:e3:83:
3b:a6:fe:b0:d1:4c:dc:d3:86:23:58:57:5f:e8:68:
97:55:ab:45:9a:08:be:9d:c7:59:68:ee:ff:44:a9:
c1:45:e5:be:da:2a:ee:88:45:33:5a:8a:52:76:15:
97:b0:40:58:83:fd:70:52:82:32:3a:bc:75:b6:73:
bc:41:55:3c:49:ba:1e:03:d4:12:fb:b3:61:d4:01:
85:2a:0e:7f:98:51:8a:20:7d:46:da:43:5b:1b:25:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E3:9A:18:4E:FA:D7:34:CF:9E:07:14:2C:5E:BF:A1:4B:D9:CB:A9
X509v3 Authority Key Identifier:
keyid:AD:32:7A:E7:F5:B3:FC:00:82:64:97:1F:A8:1A:59:0A:9B:DF:22:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9e:a4:ba:20:c6:60:d1:9d:0c:21:8b:10:87:74:4e:87:9e:
33:fb:90:07:ee:d5:18:3d:66:a4:85:18:26:b5:7d:64:89:40:
e3:1a:6c:a2:02:c8:b0:82:9d:33:fa:d5:81:82:72:bf:04:0d:
31:e9:5d:4e:5f:b6:08:f6:37:58:5e:87:a7:14:22:42:34:9c:
4c:a0:4f:c8:af:b6:9e:bb:93:16:13:82:e3:9b:0d:73:49:05:
5f:fe:bc:04:8d:b0:a4:22:68:5d:c5:08:2e:5c:b1:24:35:e3:
b4:b9:8c:66:6a:4e:1f:0a:6a:b6:ad:4f:f4:85:f8:d1:cd:0c:
92:2b:0c:de:ed:48:50:1d:2c:2a:93:ad:be:6d:c4:45:bc:ea:
3b:1a:eb:6d:4a:f4:a9:74:7a:40:7b:96:9e:0a:c9:71:d2:2f:
dc:5a:2d:f7:ff:ba:2d:50:b7:12:95:96:ec:99:3b:a3:1e:cc:
f2:2f:69:9b:27:ef:9d:b4:90:14:02:a2:d4:ac:7d:00:8f:39:
4a:64:85:72:77:1f:9c:e0:bd:5b:e9:a7:22:05:d0:a4:49:e1:
44:1b:f6:e3:6a:26:24:7f:d9:26:1d:ed:fb:6c:51:b8:37:1f:
8c:26:b5:6f:bc:d8:b5:ed:b1:e9:51:95:53:97:ca:ae:88:e1:
14:56:78:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:26 2025 by rpki-client