Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: rcSQ14Ew64xLw65UlNMXTbnB3bwTCWZEwxo2Cb4NmG8=
Subject key identifier: E8:83:2B:A7:C7:62:D8:92:4F:D4:A1:63:CC:E6:CC:C2:C0:E5:AD:0A
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 0195E121F80E7165D6B6F41C4757DE55992B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 14CC
Signing time: Sat 29 Mar 2025 09:00:54 +0000
Manifest this update: Sat 29 Mar 2025 09:00:54 +0000
Manifest next update: Sun 30 Mar 2025 09:00:54 +0000
Files and hashes: 1: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
2: qrvgnkiRlc7rMBlueEGY6GFR5f4.roa (hash: GRgjXdvuR0BuPnuResU3wvkGs+6BXCcEgxlm6k2P5XA=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: 67OBerj4s1JGUAIjPEDPaXj6annIspKlQKa6qAH82G4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:21:f8:0e:71:65:d6:b6:f4:1c:47:57:de:55:99:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Mar 29 09:00:54 2025 GMT
Not After : Mar 30 09:00:54 2025 GMT
Subject: CN=e8832ba7c762d8924fd4a163cce6ccc2c0e5ad0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:df:af:8f:86:ec:00:b6:00:9b:27:bc:0f:
1f:9e:16:bf:25:49:9a:35:85:3f:a1:d0:7c:ff:52:
41:10:64:33:a5:54:81:ff:9e:54:de:d7:3d:da:de:
1e:6a:9f:5e:e5:de:89:0e:29:7d:38:56:05:02:15:
7c:86:7e:24:67:34:fa:1e:0a:22:d4:32:d6:96:e6:
60:ed:91:b3:36:d4:89:30:b5:99:8b:f7:e1:bd:f8:
8a:00:3a:8c:2d:89:58:7d:58:14:a4:63:1f:e6:60:
87:ea:dc:5f:dc:62:ba:30:b1:58:f8:db:9f:64:9f:
e0:99:d7:86:6c:c9:a2:8c:3d:89:71:e5:80:99:83:
15:c0:68:f1:91:52:e9:82:c4:81:20:da:f5:27:1f:
22:1a:61:b3:67:cd:01:ad:e9:85:41:f6:4b:51:23:
c6:d0:df:8a:c5:82:b1:87:1b:64:27:d1:38:0e:7e:
45:16:f9:a4:48:cb:11:00:9f:b2:10:17:d3:82:b3:
46:ed:99:44:20:0d:2f:aa:1a:8a:14:2d:95:fa:5e:
a6:8d:dc:8b:1c:62:fc:73:92:eb:91:a1:4a:25:66:
97:41:ab:a8:83:5e:66:c8:e3:cc:ba:4b:8b:61:cf:
54:d5:54:5f:b4:a9:60:36:09:82:80:28:94:a9:64:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:83:2B:A7:C7:62:D8:92:4F:D4:A1:63:CC:E6:CC:C2:C0:E5:AD:0A
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:01:34:4b:6f:42:09:e0:f8:6d:d1:7e:a7:d0:f5:f1:55:0e:
69:3a:fe:ae:fa:67:59:e5:a5:45:69:de:fa:14:53:ae:c9:ca:
df:61:28:3a:30:78:4e:fd:40:d0:c9:9a:01:4d:e7:f8:54:71:
25:62:fb:11:f1:e2:d3:75:d1:df:6b:e3:ad:8f:ac:82:76:81:
f9:ff:f3:1a:6e:90:c4:21:e9:09:9c:36:ef:42:d3:0d:bb:c8:
c0:6a:fe:dd:9d:4e:ce:28:fe:7b:ab:9a:75:18:16:0d:ea:51:
0f:7e:a0:55:48:19:43:f3:61:23:75:b3:97:cd:f7:98:2d:b2:
ef:6a:19:9d:0d:07:0a:eb:05:52:77:ba:f0:57:61:ab:0c:69:
26:df:7d:92:2b:73:f2:21:2a:22:f4:ba:23:f2:74:d6:aa:31:
e2:0b:28:f7:30:47:4f:8f:f1:58:02:ed:9d:76:f7:62:b4:83:
29:ac:17:85:e1:63:54:36:1d:6c:f2:7d:55:f6:05:a4:d2:ca:
58:7e:eb:58:71:d5:19:0c:44:53:e4:73:7d:22:16:b6:41:c6:
db:b3:49:80:41:07:ab:a2:f5:3f:8b:4e:c3:29:e0:87:6b:11:
3b:c5:e0:35:df:95:4e:36:e0:01:56:0b:1e:0d:a4:04:80:3f:
ba:b5:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:35 2025 by rpki-client