Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File: r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier: UnHFMB2Nd5Xc1NBJ2J/4tIS8OxFF0+pbZUqEUFMqGe0=
Subject key identifier: 8B:E9:D2:41:4F:96:1E:8E:DC:E3:15:78:23:F1:3C:D0:32:DB:92:A2
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial: 0195DFD8958D20197B134A402A91A09B1935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number: 04E9
Signing time: Sat 29 Mar 2025 03:01:07 +0000
Manifest this update: Sat 29 Mar 2025 03:01:07 +0000
Manifest next update: Sun 30 Mar 2025 03:01:07 +0000
Files and hashes: 1: 4FPxHmFFi8FhwJTxhTVfGxLgeb0.roa (hash: DAkyKbIc/vzHYQCVTOxWR8OPdTTpNjZGMzs7QrhE8O8=)
2: Xje5uU3T9TbH4JJyT4gZJ5Wfu20.roa (hash: GIEcr4GCOYUurd6bJwNhKNeysjD37nKkx50Iee+P/nk=)
3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: wZrTsrUPACC2Ziu8qtOw8gtW4GygJ4xw5Pm8GMK9cxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:95:8d:20:19:7b:13:4a:40:2a:91:a0:9b:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
Validity
Not Before: Mar 29 03:01:07 2025 GMT
Not After : Mar 30 03:01:07 2025 GMT
Subject: CN=8be9d2414f961e8edce3157823f13cd032db92a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:05:58:29:20:ab:f5:07:06:40:e7:ee:6d:
6e:66:10:d9:30:32:e0:de:5c:9c:6e:51:4e:81:84:
b7:8e:7b:75:39:21:ca:6d:aa:5f:1e:19:3a:24:a7:
17:be:87:a1:ac:c0:c3:d8:ff:d6:c8:78:e5:bd:26:
d9:33:0e:35:71:99:66:01:8d:8a:73:87:be:58:1e:
43:f9:19:d1:04:3c:97:9f:5e:79:75:b0:49:6b:8c:
f0:05:a7:e3:f6:7c:0c:49:ad:6f:85:4d:b1:b2:81:
03:42:f7:9c:68:d8:84:a7:d4:06:9a:14:51:03:07:
ec:d6:36:07:d5:b3:a2:e0:c1:d4:99:d6:d5:8a:08:
f6:ef:6a:b5:25:59:13:75:d7:77:0f:8e:86:75:c2:
df:26:85:cd:f3:df:be:0f:26:a9:a6:8a:9e:31:c7:
cf:e6:fd:49:88:62:1b:77:67:57:ca:2a:27:8d:be:
e3:c6:2e:8f:7e:7c:23:48:4c:0e:ce:8c:76:9e:c4:
c1:f9:31:e7:fa:19:44:09:fb:28:a6:5c:ea:47:fa:
ba:97:89:f0:b3:5a:b5:fc:c5:68:82:2f:71:15:ae:
8c:f1:e8:b4:b3:bb:a2:11:f0:f3:09:88:88:6e:8e:
ad:d1:e2:b4:0b:0f:6a:2f:ae:08:ea:c3:5e:f4:92:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E9:D2:41:4F:96:1E:8E:DC:E3:15:78:23:F1:3C:D0:32:DB:92:A2
X509v3 Authority Key Identifier:
keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4f:d8:34:7e:f0:92:ad:04:2a:46:58:10:e1:5b:7f:0d:51:
6e:53:75:11:18:ea:61:a9:44:70:4c:93:19:a9:46:a3:08:64:
8a:9e:ca:60:c2:1a:7f:7c:7e:da:e8:b8:bf:91:e6:55:ca:d3:
30:90:74:e4:77:2f:b9:e4:0b:48:98:c7:9d:f7:2d:a1:81:89:
a8:4b:3e:3e:07:d7:d6:eb:ca:5a:03:f5:c0:c3:f6:24:68:f1:
21:a5:9b:b0:3a:b0:db:e2:30:63:35:6e:7b:06:92:bc:9c:a6:
0c:77:f2:df:22:14:1d:56:03:aa:39:18:e1:b5:46:b9:d1:ec:
33:25:2f:80:a6:52:c2:5f:47:fb:39:2d:10:fe:6c:64:a3:23:
13:bf:19:a4:0f:63:82:28:94:3e:c6:9b:b3:b3:ce:a0:57:c6:
9c:3f:26:95:db:47:87:93:74:42:b9:8c:09:40:b3:5f:70:2e:
ff:c0:59:a8:45:b9:65:cb:5f:e3:34:47:13:12:5b:e9:9a:ce:
dd:02:29:72:01:a3:e5:37:ad:4e:44:2d:09:82:36:8b:47:6f:
ea:1e:4b:d1:ea:3e:5a:f7:b0:e1:7c:0a:9d:b5:18:c8:d7:c3:
92:05:12:e8:cd:3e:14:5f:ce:58:32:bc:28:e7:6d:e4:1b:b2:
96:ca:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:18:53 2025 by rpki-client