Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: 8cTy1DuLxkezDrxn9mn5uqSSqOqLrXdgXIHJKgkMiSk=
Subject key identifier: 3D:F8:8A:28:16:85:0B:A7:07:6E:1D:71:61:6A:9C:EB:66:22:58:F7
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 0195E15930550114B53FFD7C8FF3667A7781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 14C6
Signing time: Sat 29 Mar 2025 10:01:13 +0000
Manifest this update: Sat 29 Mar 2025 10:01:13 +0000
Manifest next update: Sun 30 Mar 2025 10:01:13 +0000
Files and hashes: 1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: UL3Og5p8OV2QDR3LHx/2rvKnmxZ/RzAcf77zyN1RYaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:30:55:01:14:b5:3f:fd:7c:8f:f3:66:7a:77:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Mar 29 10:01:13 2025 GMT
Not After : Mar 30 10:01:13 2025 GMT
Subject: CN=3df88a2816850ba7076e1d71616a9ceb662258f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:07:43:4a:ce:1f:3d:d5:f0:6a:f1:b9:72:
fa:6b:99:99:3d:ec:a2:f1:00:f5:29:a7:9e:b0:fd:
e0:43:ea:ac:56:00:fe:0b:34:6f:f4:e1:6b:f0:3c:
64:05:80:56:44:23:fd:96:97:25:2b:5e:b5:88:eb:
9a:84:c7:03:cb:d7:3b:96:1e:77:e0:13:a2:b0:57:
94:71:aa:df:63:e0:a1:59:43:58:be:af:c9:bc:7a:
3b:bd:93:95:ee:3d:d1:29:39:e9:f2:d0:46:dd:4b:
24:88:d6:ca:7e:71:f8:97:14:32:f4:ca:bb:7b:56:
b0:3a:db:45:73:30:d3:47:95:87:6e:8c:fb:73:2c:
81:98:fa:7e:47:3f:19:7f:81:a2:5a:a0:ca:77:b8:
2a:e4:10:a7:ee:79:cc:bd:26:c1:7d:9c:e3:8a:60:
46:0f:cb:3c:2c:dc:9d:e8:f7:4e:11:2f:fb:a4:91:
fc:ea:04:c1:b1:d6:b9:51:6f:b0:79:c4:bd:40:ff:
22:31:49:8d:9f:f5:e1:48:c2:54:06:3e:bf:6d:d5:
f5:2d:52:86:6a:8e:5b:c7:84:5c:e7:7a:bd:9e:2e:
96:3e:e9:5d:25:f1:e6:09:39:9e:bd:80:07:3b:76:
ed:9c:e0:7b:88:15:ca:78:25:b9:73:ab:b6:a1:93:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F8:8A:28:16:85:0B:A7:07:6E:1D:71:61:6A:9C:EB:66:22:58:F7
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:d4:9e:4c:ee:e4:84:70:b2:c4:ba:e1:98:5a:2b:7e:f5:
cf:48:1b:f5:07:d3:01:f2:7e:a1:6f:eb:fa:c3:43:18:04:b9:
c7:09:18:00:ad:a1:18:a1:ef:4d:30:20:08:24:16:ad:38:f4:
1d:c4:60:8c:17:c8:7b:84:f0:29:ac:3a:e7:48:a1:f2:5b:ea:
cf:3c:47:74:84:d5:33:cd:98:47:7c:63:7b:91:b8:d3:3a:a4:
dc:7e:f9:fd:d3:60:3c:7e:43:e2:5e:9a:87:5f:c8:81:d5:1b:
48:e4:86:06:b0:d7:e6:41:dd:46:01:8e:09:fd:c1:6b:d4:2d:
9a:28:49:c8:c1:04:44:1f:e8:e7:d3:fd:69:e9:04:12:90:bb:
49:77:a3:bf:48:f0:2e:95:f3:39:61:3b:81:d7:c3:03:04:89:
23:44:c6:41:96:8e:5e:9b:16:87:ce:61:98:9e:60:c2:19:bb:
da:70:e2:21:5a:ff:ec:16:f0:aa:91:f2:77:2d:db:f8:41:e9:
65:8a:ae:bb:d2:29:be:a7:d2:aa:08:a5:4a:e1:2f:0a:c0:4e:
3d:da:9b:f7:a2:46:ef:bb:df:ef:29:a6:1a:fe:b8:af:94:4a:
61:91:12:7b:01:97:76:16:67:c7:03:f1:96:11:25:32:30:bc:
d3:08:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:50:08 2025 by rpki-client