Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: EDrObqCnmuZlDbDcclS3Bn0+R+gelGaYY6sEYPxqeAY=
Subject key identifier: 63:EB:C4:3F:32:83:E7:59:EC:59:81:05:3E:06:B8:0D:7D:65:E5:9C
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 0195DFD966E9CF00091127CE4DDC9EA2FA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 03:02:01 +0000
Manifest this update: Sat 29 Mar 2025 03:02:01 +0000
Manifest next update: Sun 30 Mar 2025 03:02:01 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: 2gio9i1CQVayvVQmkTNa+//9y5F6eekZOvc4MmqXlCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:66:e9:cf:00:09:11:27:ce:4d:dc:9e:a2:fa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Mar 29 03:02:01 2025 GMT
Not After : Mar 30 03:02:01 2025 GMT
Subject: CN=63ebc43f3283e759ec5981053e06b80d7d65e59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:7f:93:b9:39:07:b6:f3:5f:d1:65:6b:20:
d9:f2:3e:f7:d1:51:5c:20:0a:8f:29:f6:c2:b3:15:
9d:30:08:28:11:93:67:07:b4:e1:92:77:f7:32:82:
3e:da:7d:b7:ec:7a:e7:d3:72:ce:d4:75:b6:cc:66:
84:3e:f8:76:61:0a:1d:4d:a5:5c:45:ee:b3:c9:cf:
94:09:38:b0:3f:ac:ee:fc:6b:60:f1:e4:3d:4f:6d:
44:88:54:be:5d:51:7c:71:17:69:f0:91:f1:a0:ca:
95:6c:a2:c6:e8:4d:88:fc:e5:f0:63:5c:0d:d4:12:
ad:a4:83:b7:b9:d8:b4:ec:62:0d:d4:49:76:f9:8a:
f2:f6:da:4f:7e:ec:20:b3:67:03:ec:82:8e:9a:78:
b6:35:bf:8d:71:10:0f:93:44:69:ab:60:dd:73:b8:
7c:1e:fe:ef:db:79:c5:fb:b8:b2:0d:8d:95:02:15:
a8:ef:98:a2:23:b9:ac:82:64:89:5a:21:59:f4:9a:
18:96:ff:fe:27:cf:db:6b:d6:03:d5:7a:94:24:f8:
57:4e:c0:40:c0:81:b1:46:0b:95:3f:73:bf:c8:70:
74:2a:7c:be:f9:9a:c8:09:a9:55:5c:dd:59:7b:a9:
96:6c:89:17:ec:5d:35:4b:d2:5b:09:c3:1a:7c:cb:
8e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EB:C4:3F:32:83:E7:59:EC:59:81:05:3E:06:B8:0D:7D:65:E5:9C
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:70:8c:79:81:79:39:4b:af:ab:db:7e:62:ee:e3:d2:10:5d:
f8:ed:f7:bf:9b:0f:c6:ea:2b:1b:ab:09:c4:e7:66:78:c7:66:
2f:10:2e:d1:1c:c2:57:0b:09:32:bb:66:5d:81:a0:30:bf:66:
f5:4f:43:e3:f2:89:57:81:45:af:a3:2d:b7:7e:93:53:c5:66:
e6:0f:ec:70:b3:9c:6c:81:c2:93:01:eb:7c:af:49:87:4a:b5:
46:f5:d9:e8:cb:8c:a8:a7:a8:91:36:18:03:ce:d7:af:21:ac:
22:a2:3c:cb:63:a1:56:59:ad:c8:b1:6e:f4:37:0e:68:c5:5e:
a1:9a:af:f7:a2:f0:f2:04:58:41:c3:63:46:4d:90:45:e9:4f:
db:60:51:3e:03:ab:a8:0c:77:32:0e:d4:be:e0:c7:85:93:25:
18:07:24:8d:78:bf:46:82:94:3a:29:f4:c7:6e:d2:35:1f:ca:
7c:69:4a:c5:19:4e:e9:9a:38:a1:a8:cf:6d:15:47:0b:25:c0:
1a:2d:60:8d:52:c6:6b:f0:56:be:76:e3:14:25:4e:c5:a1:07:
b4:45:86:6c:ed:44:48:5f:ca:ae:ec:0b:80:90:5d:ec:77:17:
79:eb:ce:18:41:50:85:79:ad:87:c7:dd:a2:06:f3:2f:16:cb:
90:30:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:26:41 2025 by rpki-client