Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: nNohYWeWK9VZ2ARCltYt6SA+CBL+fgQTsW2vp7InfgY=
Subject key identifier: 9F:8D:D4:93:7C:8A:77:06:EA:E0:76:A6:36:AE:CC:B0:DA:C8:2B:22
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 0195E0B4C355C401DAD8361D919000094AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 07:01:37 +0000
Manifest this update: Sat 29 Mar 2025 07:01:37 +0000
Manifest next update: Sun 30 Mar 2025 07:01:37 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: A+t/fDJXXE+IqQxfsE6oXK56MUe1SSRqBNMT+L/K1wE=)
2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:c3:55:c4:01:da:d8:36:1d:91:90:00:09:4a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Mar 29 07:01:37 2025 GMT
Not After : Mar 30 07:01:37 2025 GMT
Subject: CN=9f8dd4937c8a7706eae076a636aeccb0dac82b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:9e:2d:af:0f:1c:ce:71:75:b0:cd:93:2c:
6f:93:17:cc:bf:1f:6f:3e:b2:9c:c0:3b:98:84:b6:
f8:f1:1c:46:0f:c4:3e:65:e9:60:e7:63:33:a2:6d:
ed:f6:39:62:ff:b0:e0:3b:6f:25:a1:38:2a:7c:55:
b0:00:f8:23:b6:56:16:5d:dc:30:94:38:0f:1e:62:
f9:bf:24:a0:95:d6:e9:be:d9:0f:2d:a4:9b:2b:b7:
c2:e7:5d:5a:6e:72:15:dc:5d:1b:bd:a1:54:f2:28:
49:e0:03:5a:54:2c:55:02:b1:48:48:2a:1c:27:6c:
9a:46:6d:96:f6:cc:a6:04:a2:38:92:08:9e:6a:1a:
93:2a:3b:2a:a5:0b:ad:e1:10:36:27:cb:6d:7d:3d:
26:df:fe:b2:d6:8b:01:84:21:6f:00:1a:fa:07:e7:
36:8f:9a:cd:b3:48:d9:52:5b:d2:12:02:c8:7f:14:
44:2d:02:f9:54:10:38:83:1a:6f:be:83:ed:4e:fd:
6b:af:0a:9e:0a:1f:a5:71:e6:29:ab:05:95:75:66:
7e:37:a9:5d:bc:fb:d9:89:c3:e6:4a:4e:c1:8a:89:
75:fc:71:7d:82:e6:f4:ae:50:15:13:ba:95:86:55:
61:b7:53:ba:6e:e0:c3:e2:34:eb:e9:db:23:07:35:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:D4:93:7C:8A:77:06:EA:E0:76:A6:36:AE:CC:B0:DA:C8:2B:22
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:63:11:24:d2:58:52:a1:33:8f:6f:ca:25:e2:e8:f3:a9:0e:
ff:e7:1e:6f:b2:a6:ea:28:75:82:06:57:9f:67:51:df:71:bd:
85:93:84:a1:52:eb:5c:42:e2:16:af:85:4e:ff:c8:9a:a7:52:
aa:e5:76:df:2e:5e:23:34:07:c3:77:d9:9d:e6:3d:82:f4:40:
0c:f1:00:cd:c1:90:cb:11:d1:ff:74:41:43:bd:93:ae:22:83:
73:2a:21:79:c6:fb:bf:2f:26:08:1f:65:9d:4b:f3:ee:da:6a:
aa:ac:5a:b5:6d:ca:87:6a:6c:c6:e3:88:ee:19:b2:c7:a9:fa:
a7:1d:68:43:63:d6:81:fc:07:db:0b:31:f2:fc:1f:dd:15:61:
62:30:39:2a:89:df:e7:fe:17:30:f7:46:93:4b:73:48:f7:9e:
bf:18:80:8a:dd:8e:e7:7c:e9:a3:a5:a0:e3:41:21:dc:1f:f8:
77:3d:8d:37:64:31:b8:de:17:40:65:9b:da:e4:be:b2:62:01:
ab:27:bc:48:9f:f3:52:f4:f6:1d:fd:9c:ab:7d:a1:e8:e6:a3:
9c:e9:6b:90:02:83:9c:10:34:5b:d9:4b:80:f9:b8:0e:38:37:
83:40:66:a0:94:01:ff:18:8e:90:e8:8f:05:b1:af:56:ba:51:
61:ce:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:59 2025 by rpki-client