Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: UvUicoeQw21Wnl37saTaeNszMDjNahg1xaRg46kGsf8=
Subject key identifier: 19:1F:FA:76:16:8A:5C:F2:2C:99:77:66:FC:0B:52:05:D9:DD:B8:95
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0195DFD8ECACBEED331A2D9F1D6DFA8F8D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1443
Signing time: Sat 29 Mar 2025 03:01:30 +0000
Manifest this update: Sat 29 Mar 2025 03:01:30 +0000
Manifest next update: Sun 30 Mar 2025 03:01:30 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: Cqk6YzjsvBUFb11luhzNvDjUT/TFu7KZ9xSFEFxg8PQ=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:ec:ac:be:ed:33:1a:2d:9f:1d:6d:fa:8f:8d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Mar 29 03:01:30 2025 GMT
Not After : Mar 30 03:01:30 2025 GMT
Subject: CN=191ffa76168a5cf22c997766fc0b5205d9ddb895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:5f:3e:18:a8:be:10:4a:89:c1:47:13:b4:
a3:f4:ef:92:41:a3:e8:79:c5:35:3a:90:68:cb:39:
32:b4:69:57:2f:b4:36:60:2a:18:91:85:96:78:a6:
fd:e0:93:72:d7:e0:6e:ab:b9:a3:50:27:15:41:f2:
83:38:52:69:eb:a0:20:ce:89:ea:97:f0:3f:04:04:
cc:78:71:60:4b:7b:05:46:da:0f:97:2d:57:86:ad:
39:4a:40:fd:37:c9:19:b5:9f:e8:4f:54:49:18:d6:
d9:37:1d:04:75:41:87:4b:97:de:50:e3:09:e7:7d:
78:23:d2:7a:43:fe:ae:70:95:43:0b:cd:71:b2:e6:
29:83:27:6a:6a:3c:9d:80:c6:d8:9b:97:19:30:b6:
a0:90:e0:30:2c:a2:01:ca:fb:50:60:4f:0d:55:54:
8c:c8:4b:fd:1c:63:c8:f0:ce:b1:5c:f2:28:4a:1a:
94:b4:76:07:ab:ad:36:53:e9:82:ce:09:13:43:e0:
5a:cf:8f:db:dd:20:dc:8b:c4:68:95:8d:a0:0f:3a:
1b:22:70:3c:5e:e0:7d:f8:0f:9e:99:1b:6f:15:70:
d8:c2:e4:a3:a9:f9:a9:1c:2c:16:0c:aa:10:77:3f:
04:db:e5:f2:18:51:81:4a:e3:d8:c8:46:17:ef:a2:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1F:FA:76:16:8A:5C:F2:2C:99:77:66:FC:0B:52:05:D9:DD:B8:95
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:5a:43:3a:0a:84:7d:48:f9:25:13:49:a7:b5:3b:14:63:
80:6e:29:4f:d4:50:04:9e:6d:1e:f1:c5:b2:e7:92:be:82:15:
73:3f:76:3c:01:3f:a5:8f:cc:0f:53:60:46:0c:01:4a:6b:a8:
a2:2a:3c:2a:a2:4d:19:70:0d:f8:b4:05:da:bc:d2:5a:9a:ee:
ec:41:0a:68:6d:97:18:89:e9:7f:8c:96:3f:ca:8b:56:9b:ba:
73:32:09:46:13:90:72:6c:b0:89:e5:b1:d5:df:78:bb:e8:b9:
fe:fe:e8:37:71:ae:7f:eb:77:a8:7c:d8:eb:8a:15:b5:60:a5:
f3:e5:03:a7:3b:d2:57:2c:10:77:83:60:fd:d8:85:bd:6b:13:
7e:4c:21:99:92:44:a6:2e:fb:05:c3:e0:ce:4d:ce:ff:50:2c:
af:1a:5e:d9:9e:92:15:43:7c:bf:70:0d:23:e6:dd:68:36:38:
ef:5a:0b:5a:8a:8f:f5:fb:f6:17:72:ae:d6:25:0b:90:78:d3:
da:9b:17:5c:58:bf:76:5c:31:b1:c0:ec:63:49:75:0b:a9:7b:
2d:ce:8c:d3:e1:de:57:2f:cd:5c:cf:67:97:d8:b4:f0:8c:df:
7a:1d:12:eb:3e:1e:c3:dd:b2:d8:95:f5:66:a4:30:18:e1:b9:
bd:7d:60:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:35 2025 by rpki-client