Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: P3JmW/GdafFZqk98GiTpkgXoEELSwO8zwmjwmjDJKmo=
Subject key identifier: FE:4A:95:B3:DC:4A:66:5E:52:75:32:16:AD:4C:E7:A0:FC:6F:1C:B7
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 0195E1596DB1D7AD8E40647BF53759BE5ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 05F1
Signing time: Sat 29 Mar 2025 10:01:29 +0000
Manifest this update: Sat 29 Mar 2025 10:01:29 +0000
Manifest next update: Sun 30 Mar 2025 10:01:29 +0000
Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: U176daePRjyC9ZI9IB5VatQnI9Ucuv0U6fBV2CsPp18=)
2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:6d:b1:d7:ad:8e:40:64:7b:f5:37:59:be:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Mar 29 10:01:29 2025 GMT
Not After : Mar 30 10:01:29 2025 GMT
Subject: CN=fe4a95b3dc4a665e52753216ad4ce7a0fc6f1cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:c0:9f:06:af:fa:6c:7c:ea:be:b5:61:3c:
a6:09:19:56:bb:74:83:3f:d9:83:c0:5f:4e:07:d4:
95:b2:7e:15:19:2e:64:a6:61:59:eb:bf:87:c4:0c:
25:a1:19:fe:24:36:33:b4:7f:63:37:f9:61:19:17:
5a:f0:b3:c1:f2:48:b7:b2:bf:19:96:8e:3a:b7:9d:
75:1a:d5:4f:ba:f0:74:16:e6:fc:1d:dc:4c:21:de:
14:52:97:25:82:7f:22:12:58:f0:7b:42:27:f2:18:
74:6e:5f:16:3a:bf:2c:a7:44:17:0b:80:c2:c5:d1:
d5:1c:a8:b3:8d:2e:c5:f3:06:a2:01:f8:6b:c3:55:
5c:39:70:bc:6b:df:ae:e1:83:7d:24:4c:26:de:ee:
b0:75:ea:8e:5b:4e:7f:b4:74:38:72:18:14:71:2c:
e2:ad:16:4c:c1:eb:76:40:72:8b:92:9b:16:d7:23:
40:01:58:e2:e4:52:a7:6f:53:8d:84:e8:f3:04:c8:
47:82:0d:68:9b:4e:93:16:da:74:96:7d:16:40:54:
49:b6:e1:b6:1c:6b:a6:44:8a:56:44:f8:02:cf:69:
ca:fb:e2:ad:b2:97:2d:a9:a5:8a:77:92:66:eb:cf:
6b:24:df:0e:b3:0b:35:ae:2e:31:3e:64:26:b6:bd:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:95:B3:DC:4A:66:5E:52:75:32:16:AD:4C:E7:A0:FC:6F:1C:B7
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:47:65:65:8a:2b:5c:23:c7:db:a7:62:69:a2:3b:5e:21:b1:
6f:30:21:a6:34:c5:be:24:a8:08:ab:3f:40:43:9e:60:d2:55:
c3:1f:ad:3b:89:06:da:fe:f4:b6:89:25:71:81:06:ff:33:f5:
dd:e0:f4:2b:ac:e6:d1:de:45:0c:13:8e:87:a8:68:ff:70:28:
3e:2a:bd:d8:24:42:c5:2d:02:dd:db:46:4e:c1:1e:0f:48:97:
e4:49:29:d8:25:61:f9:c1:20:d9:d8:e3:29:7c:98:36:37:54:
86:67:80:eb:49:e2:1e:65:d5:73:ab:49:c3:c9:ac:23:61:79:
20:95:89:13:94:81:92:8d:ce:bb:97:57:45:a2:6e:6a:99:86:
49:2b:10:8b:90:60:bf:d1:b6:65:48:94:cc:04:25:ca:fb:5a:
98:84:4d:5c:f3:e3:f3:32:98:1c:ac:62:42:a2:08:19:53:1d:
b2:8b:cf:dd:79:26:e9:44:bc:ac:89:0a:49:07:29:47:1c:12:
03:bc:fc:d1:46:35:ea:09:b4:30:e1:05:2c:31:18:83:58:9f:
5e:91:9b:c3:b1:5b:a3:43:18:64:84:7e:a4:f0:f3:a5:e6:5e:
86:83:ab:3c:22:d1:90:ee:c8:f0:8b:e3:2b:48:01:9f:d2:5a:
4b:e7:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:21 2025 by rpki-client