Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: p1+Ohc3Gxwo+DVWiRTuxQOZqQMRvz3HSwFdE6c8pBhs=
Subject key identifier: 63:7A:F5:2A:2C:6B:99:51:B3:46:3E:E1:5F:23:1B:92:91:B4:D4:C0
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 0195E00FCE66EC16F9204F66E6D0E1977136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0C07
Signing time: Sat 29 Mar 2025 04:01:27 +0000
Manifest this update: Sat 29 Mar 2025 04:01:27 +0000
Manifest next update: Sun 30 Mar 2025 04:01:27 +0000
Files and hashes: 1: Mep_oW6oSHpfM-EqADqLPxvIqFs.roa (hash: 6a8TBTQQpOa0vAb9MxuUWCM81ytCduZcl8Sm4ouPZoY=)
2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: RsJqEK93bdmW5VZL58Hy3mRhuR1NhHOVZwsp58JLrmk=)
3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
5: wH7YjQGC2kPbicIfKx1K6Iv4sBs.roa (hash: YR8jN4lQpTriIrl6/luq+DdE8e4Qj31ZZIIQj98pQoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:ce:66:ec:16:f9:20:4f:66:e6:d0:e1:97:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Mar 29 04:01:27 2025 GMT
Not After : Mar 30 04:01:27 2025 GMT
Subject: CN=637af52a2c6b9951b3463ee15f231b9291b4d4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:19:96:a1:dd:40:a6:99:77:d0:13:cf:b0:
09:7e:f4:f4:23:21:13:fe:00:c6:4c:20:31:e2:b4:
42:b1:cf:48:c0:bb:65:f8:03:59:b1:38:7c:e8:d2:
33:04:9d:96:d3:18:9b:8b:46:d7:bc:0f:54:fc:83:
ab:bd:be:81:ce:37:d5:de:e2:ef:27:46:1c:86:62:
aa:38:fb:de:03:24:62:8a:0f:c8:c7:b5:97:21:6b:
cf:2a:5e:fd:d5:fc:3d:32:7c:21:99:72:f1:0a:53:
f1:bc:d8:8c:fa:5a:27:b6:46:68:d1:6e:ce:d4:3b:
8b:33:8e:72:ad:a0:cd:78:a6:fb:0f:e4:71:9d:08:
3a:1b:bd:2b:8e:c8:3d:1a:71:3a:b3:89:64:d5:94:
d4:30:b7:bd:d6:e5:66:e0:f5:9e:47:d1:33:84:27:
f9:07:22:47:95:17:50:b5:b6:f2:5c:96:f3:59:2a:
30:8d:80:92:ca:c3:62:56:07:54:18:f7:a9:0e:a3:
06:14:0c:4e:e0:78:22:62:17:04:bd:fd:5d:13:d6:
eb:0d:d4:b7:7c:2e:70:5b:d8:ac:7d:52:d8:25:aa:
05:fc:85:e3:fe:58:f2:99:98:44:f5:14:e6:cc:1f:
2e:61:72:ac:7b:af:4f:8a:40:26:68:64:13:5a:7d:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:F5:2A:2C:6B:99:51:B3:46:3E:E1:5F:23:1B:92:91:B4:D4:C0
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a4:39:a3:9b:d8:31:e1:a1:6c:47:7c:38:de:2f:36:8a:6b:
1c:8c:89:fc:e8:2b:ae:1e:ad:08:31:93:88:71:0f:57:a4:ac:
ce:f6:ed:d6:02:04:2a:40:4a:93:ac:90:e5:79:f0:27:a9:19:
95:5d:11:8d:f5:32:9d:98:ae:47:ad:04:cf:a7:80:32:28:6a:
27:4e:b2:64:9b:ce:d6:b5:d9:23:82:d5:41:04:d2:08:58:da:
0f:58:e5:45:1f:1a:22:d5:31:3f:0e:f4:39:7f:e6:39:54:ad:
18:6a:e9:dd:11:48:21:83:e1:cf:28:53:87:c5:0e:9d:5f:6d:
7b:0f:91:ad:2f:53:2b:2c:96:d0:07:59:4e:d8:fe:f0:5d:14:
d9:ea:7f:f4:ac:7e:19:6e:87:cc:98:4e:8a:6a:35:6d:26:6d:
c9:9e:e4:72:6d:b9:7f:76:37:f2:36:83:aa:56:3b:16:27:15:
33:8b:1d:ea:60:38:61:54:48:6e:60:34:e1:29:65:f2:61:0b:
f1:19:54:eb:64:98:62:d2:cf:c0:b8:ff:01:e2:3e:20:60:f9:
e1:cd:ea:0f:ec:4c:ea:bb:a7:19:f4:c9:cf:a4:3e:f9:ff:f4:
4d:8a:bd:7e:f2:09:96:86:27:f2:d4:80:a4:2c:36:d5:86:eb:
3d:db:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:06 2025 by rpki-client