Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: 00yGs5W9eAjQ7k0ey6ycpauB7MqKcC30newjvPWrnGs=
Subject key identifier: D4:A4:E9:34:6E:27:58:A6:8B:32:18:DD:1B:71:99:AA:62:D1:8C:FE
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 0195E046BFED98600EB698D0F315D2011942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 05:01:27 +0000
Manifest this update: Sat 29 Mar 2025 05:01:27 +0000
Manifest next update: Sun 30 Mar 2025 05:01:27 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: 1Wd83qnXVihZEEorVIX84WzEepcMQT7vZohkjuiyZTY=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:bf:ed:98:60:0e:b6:98:d0:f3:15:d2:01:19:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Mar 29 05:01:27 2025 GMT
Not After : Mar 30 05:01:27 2025 GMT
Subject: CN=d4a4e9346e2758a68b3218dd1b7199aa62d18cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:62:7a:9a:d8:44:a0:25:6d:23:75:9e:3e:
5e:1e:58:e4:d1:be:11:25:44:4d:e3:ae:20:4e:60:
58:18:5a:60:d0:08:cb:d3:cd:b1:59:32:c3:f1:83:
16:76:cf:d3:dd:e8:f0:01:02:6b:56:22:8c:92:39:
5d:64:e5:b6:62:b0:02:70:8b:a0:5a:0f:bc:f6:80:
ba:9f:84:02:26:55:e1:42:18:7f:b4:67:ab:54:73:
d3:b4:b0:00:e0:9d:e6:ab:f1:63:6f:6a:14:1a:85:
9e:19:7f:ab:8c:03:e3:20:06:03:3b:dc:64:06:a1:
32:6a:a2:17:e4:5f:97:5d:dd:bf:bf:8e:b9:46:62:
2f:35:56:84:1b:bc:db:1f:4e:00:05:dd:9c:9b:10:
9a:18:1c:fb:ac:9e:81:73:b5:2d:49:dc:e6:ae:bf:
81:48:55:a6:a5:80:5d:ab:c1:41:59:16:33:ab:8c:
54:2f:db:8a:60:ef:7d:17:b6:84:8c:f3:18:d4:f6:
f8:a5:af:81:12:7b:5f:4e:0c:ed:7d:44:f0:ee:52:
e2:7d:2b:35:d4:43:ea:f6:91:4f:39:0b:63:ff:ed:
e8:24:db:73:2d:ef:95:8b:b3:0d:f1:df:1e:28:9e:
23:de:a0:63:30:ea:43:1a:bb:87:e5:e8:b3:7d:73:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:E9:34:6E:27:58:A6:8B:32:18:DD:1B:71:99:AA:62:D1:8C:FE
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:42:fd:e5:91:83:f2:52:14:ac:14:d3:81:5f:97:ba:ab:34:
f1:1f:cb:e1:4a:ac:e6:e5:fb:2a:53:b7:21:e6:41:a4:91:46:
0e:02:00:10:bd:26:41:c7:26:23:59:74:3a:f5:19:fd:9d:58:
92:4e:15:14:88:3c:3e:77:7c:f7:bf:8f:3d:54:42:63:58:08:
af:44:a4:4d:99:05:a0:cc:70:e2:4e:78:88:85:0d:06:0c:fd:
52:a6:43:0c:e0:92:a6:73:e7:69:51:9a:31:85:7c:ff:db:63:
06:0a:8f:7c:42:b9:1c:15:29:66:29:0c:e2:c4:1d:95:ed:8c:
eb:0b:7d:e1:df:3c:b0:36:cd:30:dc:c5:e8:d4:a4:83:76:82:
b0:5c:40:3d:e7:01:8d:df:a6:1a:df:9c:bc:99:54:26:ea:9c:
fa:f2:6b:1a:c2:17:ba:3b:1e:98:50:9a:c4:23:d0:c1:60:01:
bf:3c:29:d8:53:3e:e7:dc:8d:80:84:e3:bb:01:07:5f:dc:0f:
67:6b:12:3e:8d:76:e6:48:64:c0:f8:2f:1e:cb:07:a7:57:27:
27:dd:1a:0f:74:9b:f5:0f:be:38:ed:da:14:52:ce:df:c9:6d:
8e:64:2d:7d:05:f4:ed:1e:85:fc:64:5a:4f:94:31:7e:bd:36:
b5:6d:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:58:10 2025 by rpki-client