Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/mNs9zyXSwixbmX0VenzvrE1F92I.mft
File: mNs9zyXSwixbmX0VenzvrE1F92I.mft (raw, json)
Hash identifier: PD8L5MM8NR0XFJO0NDRNOpkEiWHGnIA7EAkke8ExVBU=
Subject key identifier: 3D:78:EF:F8:C3:9D:B8:0F:BE:BA:F5:12:A4:AD:98:4F:4A:8C:03:C3
Authority key identifier: 98:DB:3D:CF:25:D2:C2:2C:5B:99:7D:15:7A:7C:EF:AC:4D:45:F7:62
Certificate issuer: /CN=98db3dcf25d2c22c5b997d157a7cefac4d45f762
Certificate serial: 01959299B4114B7B1FCD1D474F0CCA73F82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNs9zyXSwixbmX0VenzvrE1F92I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/mNs9zyXSwixbmX0VenzvrE1F92I.mft
Manifest number: 07E2
Signing time: Fri 14 Mar 2025 03:01:41 +0000
Manifest this update: Fri 14 Mar 2025 03:01:41 +0000
Manifest next update: Sat 15 Mar 2025 03:01:41 +0000
Files and hashes: 1: kDzvgB_NRFmAkvFmWwXdAAjTFCw.roa (hash: Je9V/SETkk0rgpci9CjD3RfuSHpDZJpA+Ok7E2xKrCw=)
2: mNs9zyXSwixbmX0VenzvrE1F92I.crl (hash: nbm7acWo2aMUudw3ph2ogcCdLexa1bNRqZLrmSUFUck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:92:99:b4:11:4b:7b:1f:cd:1d:47:4f:0c:ca:73:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98db3dcf25d2c22c5b997d157a7cefac4d45f762
Validity
Not Before: Mar 14 03:01:41 2025 GMT
Not After : Mar 15 03:01:41 2025 GMT
Subject: CN=3d78eff8c39db80fbebaf512a4ad984f4a8c03c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:cf:05:7a:e3:a0:a1:ec:6f:cc:3f:ff:ca:
be:af:93:0c:0c:91:2b:11:0f:50:71:87:04:b2:80:
b9:14:35:81:df:db:9f:16:29:f1:b9:b8:8c:2d:55:
14:65:09:a2:a5:34:74:9e:71:aa:75:c5:c0:39:7c:
67:eb:9b:1a:6f:4b:93:c1:62:2d:83:d7:32:21:8c:
b8:ce:34:f2:41:e8:1e:60:23:2a:12:1d:94:3f:02:
bc:d1:13:e0:cb:92:db:9d:81:fb:b1:28:01:ca:79:
e4:b0:d4:b1:00:b3:b1:5e:bd:62:c0:17:11:f8:82:
9d:a6:14:b6:c0:f7:71:aa:28:44:6a:29:7b:72:98:
ac:4b:94:46:a0:5c:df:55:62:41:22:be:8f:3f:5e:
ae:2f:8e:8b:ab:eb:67:10:c9:cf:b3:3c:d7:5d:0c:
ff:be:43:64:24:41:5d:ce:b2:c1:3b:8b:7d:ad:73:
58:2e:0f:cb:0a:51:2e:62:de:ab:bd:e0:97:35:92:
ab:56:84:23:ea:06:b4:db:03:3d:68:b9:2e:b5:6b:
a3:92:24:c1:a5:18:f0:89:da:3f:e0:01:10:b0:ee:
77:65:71:c8:75:06:1b:f4:e7:d2:a6:06:cf:f9:21:
c5:88:f3:a7:26:22:59:c5:98:68:f6:33:cf:c9:f6:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:EF:F8:C3:9D:B8:0F:BE:BA:F5:12:A4:AD:98:4F:4A:8C:03:C3
X509v3 Authority Key Identifier:
keyid:98:DB:3D:CF:25:D2:C2:2C:5B:99:7D:15:7A:7C:EF:AC:4D:45:F7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNs9zyXSwixbmX0VenzvrE1F92I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/mNs9zyXSwixbmX0VenzvrE1F92I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/f3eb66-d7d7-411a-ad0b-e538e29fb1c0/1/mNs9zyXSwixbmX0VenzvrE1F92I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5a:36:d0:46:6a:3c:13:d8:87:e3:2b:43:f1:9f:ed:91:60:
10:e9:69:4a:ee:0a:3e:c2:b4:8e:be:9e:54:e2:12:36:fa:75:
28:32:ee:47:1d:6a:eb:11:5b:ba:3d:c7:16:f1:02:10:ea:f8:
ec:c0:d7:58:02:71:e5:e3:0e:ba:f6:42:c2:d0:c7:75:ab:ea:
ba:94:6e:d8:e3:c1:c9:f2:d2:b0:e6:31:3d:00:cf:b6:97:d2:
e9:dc:89:6b:ec:ed:02:e6:8d:db:48:66:1d:73:04:07:37:f7:
68:1b:7f:62:b6:d8:28:76:24:45:3a:75:89:04:ac:84:c8:b0:
17:7f:1e:84:cd:33:10:fb:21:9a:3f:f9:2d:20:32:fd:cb:a1:
9e:38:9a:26:37:1a:2d:a7:89:68:2c:d2:8a:28:a3:9a:ea:8b:
ce:98:96:29:4e:15:e4:e4:b4:9f:04:7b:5b:5d:e8:11:6c:f2:
c0:d2:ae:1b:76:81:01:b4:09:54:23:9b:14:fd:0f:9f:1b:3a:
d6:8c:0a:6b:e2:69:aa:75:9e:6d:3e:22:0a:a8:7d:ef:20:35:
da:d2:98:b6:58:3a:5d:63:6f:1c:63:1c:f4:a0:e3:06:29:09:
d9:2c:ba:b7:51:5e:15:b6:c9:65:9d:35:64:f6:45:f5:53:3e:
48:8c:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:38:11 2025 by rpki-client