Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: z/nPson3BClGmJHoIwmbUYc4V5LILFEv3irrZsAWk1o=
Subject key identifier: F9:A0:1D:F2:48:C3:77:85:98:0B:20:E1:2C:46:1F:19:32:0F:26:43
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 0195E15A400064F5CD4049A7A5ACC4EE7EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 063D
Signing time: Sat 29 Mar 2025 10:02:22 +0000
Manifest this update: Sat 29 Mar 2025 10:02:22 +0000
Manifest next update: Sun 30 Mar 2025 10:02:22 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: YrkrooiymeevyHRAz28MbWSHA55oqy0NDDBAcnXoy0Q=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: u0FRx2j9PY9XanBbcgTrVe_Co_s.roa (hash: 1340NaWcsmaESfpzP0gVpyoyLiK505bktgSP6n8xPII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:40:00:64:f5:cd:40:49:a7:a5:ac:c4:ee:7e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Mar 29 10:02:22 2025 GMT
Not After : Mar 30 10:02:22 2025 GMT
Subject: CN=f9a01df248c37785980b20e12c461f19320f2643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:f4:e0:dc:d4:73:db:75:04:df:84:87:28:
5c:5b:78:c7:fa:67:ca:2c:77:b7:49:6b:fc:e5:40:
87:b4:73:e1:4c:20:1c:f8:88:62:52:aa:e4:24:54:
f1:bb:7b:b9:07:34:40:18:c4:a5:4f:3e:6f:3f:e9:
2c:90:db:38:f9:5f:85:2a:e0:61:e2:f2:c2:c0:3e:
50:3c:7a:55:c4:e0:07:fd:2e:92:4e:f8:24:80:b0:
20:99:b3:4f:5a:89:8a:17:26:42:d4:e6:5b:48:00:
08:95:dd:cb:17:5a:bc:e2:bf:b5:c2:20:cc:16:09:
25:c3:86:f7:1b:58:c8:c8:d3:d6:17:34:2d:9b:9c:
14:7a:53:ae:40:1e:3a:90:7c:1f:85:80:d2:b2:33:
9f:b3:34:2c:f5:f8:1d:48:a0:ed:fa:a1:ae:33:86:
6e:e8:18:a0:4c:b0:2d:91:fe:08:3d:0c:2d:53:20:
00:c3:df:39:6a:c6:da:74:80:91:36:43:2c:3d:7e:
8a:9e:ca:24:82:73:e5:66:ac:a4:74:a8:ce:89:16:
50:94:f3:68:cc:db:17:3b:f1:20:95:d1:ef:77:fd:
95:3f:00:16:dc:d2:4d:6c:0a:c6:a9:66:32:d3:ba:
71:1c:59:5e:7c:a0:1a:74:1b:d1:95:ca:ba:f9:f7:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A0:1D:F2:48:C3:77:85:98:0B:20:E1:2C:46:1F:19:32:0F:26:43
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:27:8c:8a:2e:b6:9e:ad:19:27:5d:f0:08:d5:38:55:fd:bc:
cd:5d:d8:a3:ce:5a:94:e2:20:61:62:30:7c:26:c6:d5:50:03:
3e:f1:42:27:2e:04:fd:ce:81:e1:00:52:2c:03:35:c9:ac:dd:
d8:7e:4e:6a:7d:b4:ba:97:9e:29:a0:be:6e:bd:98:6c:9a:dc:
1f:dd:31:53:61:00:31:bd:0b:1c:ba:0d:86:f8:51:80:f0:56:
8c:c9:3f:3c:f4:4a:18:37:ac:40:d0:58:37:29:5c:05:74:04:
dd:dc:81:26:4a:f3:93:82:3e:d2:0d:95:bd:06:39:a1:08:6e:
2f:bd:e3:24:92:2d:87:25:59:16:13:57:03:aa:90:5b:e5:cd:
8e:6c:7e:27:09:3f:ea:61:54:67:73:87:ba:8b:e9:95:3b:0c:
3f:6a:35:71:32:aa:61:d3:fb:8b:c9:36:52:be:15:26:f1:35:
3c:3a:66:5a:fa:cc:b3:89:32:22:25:91:53:15:36:d0:d4:96:
a1:fb:29:ed:ed:e6:b3:ce:8b:2b:1c:07:d2:84:2b:dd:d9:54:
37:81:09:09:f0:02:4f:46:5f:6b:77:6e:f4:36:7f:90:db:7b:
00:4f:9e:cc:23:5e:2f:bf:3a:be:f2:b9:13:bf:26:de:67:5d:
3d:83:c4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:32 2025 by rpki-client