Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File: k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier: OvHY8kuEJopGctI/vvXxMC2dOHtEA2C8qPhz2avKjws=
Subject key identifier: 4A:7C:56:94:88:39:53:1F:55:90:C5:6E:AF:FD:65:37:2A:B0:04:92
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial: 0195E0B44C6CD956E8AB742E325627B35675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number: 03F9
Signing time: Sat 29 Mar 2025 07:01:07 +0000
Manifest this update: Sat 29 Mar 2025 07:01:07 +0000
Manifest next update: Sun 30 Mar 2025 07:01:07 +0000
Files and hashes: 1: eXKi70pVOkSciah0yxPymcceP7o.roa (hash: /QwJ8MrFkVplCOmNYJ6qPcPj5JI/tOF/FJ4aI1f1YYQ=)
2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: NN+7wqaqO2eikktaJjT6nt9J8xUEEujnv5PLiyAUuRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:4c:6c:d9:56:e8:ab:74:2e:32:56:27:b3:56:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Validity
Not Before: Mar 29 07:01:07 2025 GMT
Not After : Mar 30 07:01:07 2025 GMT
Subject: CN=4a7c56948839531f5590c56eaffd65372ab00492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:90:20:0f:3f:ac:a8:b3:13:0c:e9:83:27:
87:a7:03:d5:e2:26:be:99:40:14:92:bc:d1:70:25:
e9:9e:d1:60:0d:f8:6d:2f:8e:a4:8d:4a:ce:37:99:
39:a6:75:e1:6c:a6:0a:35:00:1b:c1:41:28:fb:08:
85:55:20:2e:1a:6f:30:45:ff:0e:83:e6:a8:a6:81:
6a:d7:df:e6:fc:24:9d:17:14:93:83:76:f1:18:58:
bb:f0:5e:f4:15:ac:46:6b:45:7f:89:94:80:c3:2d:
ce:b2:8f:d0:4b:49:92:eb:55:fe:40:09:2f:8e:34:
d8:de:87:03:37:df:68:d5:48:4f:ba:df:e6:67:7a:
df:db:1e:3a:bc:ac:2a:ef:24:c7:ef:cf:97:74:d6:
29:37:66:75:cc:96:77:8f:9e:29:0c:12:d1:47:f3:
5b:50:92:7a:b6:36:d9:cb:bb:09:e9:7b:a7:53:ec:
e2:9b:48:91:c9:5b:f3:4f:87:1c:3d:a2:83:52:bf:
af:51:e6:b5:2e:32:e0:46:f9:04:30:85:a5:e9:cc:
0a:3a:79:6f:b6:20:ec:45:2d:c8:8d:12:0d:f5:87:
db:e3:a7:2f:10:33:af:30:4d:41:12:ac:1f:fe:76:
b3:21:af:e9:e1:2a:c6:67:c3:01:90:98:2b:4f:4a:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7C:56:94:88:39:53:1F:55:90:C5:6E:AF:FD:65:37:2A:B0:04:92
X509v3 Authority Key Identifier:
keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d9:db:5d:0f:dd:b4:c2:94:e8:fb:b0:e3:79:0d:89:01:41:
42:13:84:81:14:fd:d7:92:90:81:30:b4:97:6c:0a:66:71:13:
6a:11:f9:78:4f:79:19:62:15:47:f6:f5:19:7f:96:f2:47:6c:
f5:04:fd:6e:ce:5e:e2:56:c2:f1:8f:de:d1:7c:ba:e7:48:44:
04:1b:87:b4:55:1d:0f:d9:18:84:06:03:95:7c:f1:92:26:7e:
43:86:cf:13:66:e1:0c:0b:02:6b:6f:a6:2b:9c:49:3a:7c:18:
dc:17:23:d5:ea:10:29:ad:5b:f9:74:20:9d:28:2b:6e:f1:be:
01:66:f4:45:57:f2:29:db:d5:cd:ed:71:b8:52:e2:00:75:77:
20:f5:b2:79:4b:80:e1:6f:d9:71:62:5e:ae:0c:0e:71:b1:99:
19:3d:22:f6:1d:cb:99:2a:6a:55:78:5a:1f:99:97:49:be:4f:
b1:2d:25:70:6b:5f:53:2e:65:17:a1:48:71:0e:da:de:7c:0d:
b2:0b:67:fe:47:a9:7a:b4:a6:b6:8b:f0:21:bf:a3:60:d5:bf:
cc:f4:4c:f6:89:eb:6b:5d:66:c0:25:77:53:d8:fa:6a:19:af:
fc:3b:2f:cf:a4:3f:b8:c4:34:38:b7:18:4e:29:84:8b:d5:82:
07:34:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:03:09 2025 by rpki-client