Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: kxhzkNnN9RxlBxC5UCKuDfsSI200c/OYLgEVfOojA0U=
Subject key identifier: 48:DE:49:A9:A8:CF:6A:54:21:7F:39:70:CE:A0:2A:96:6D:06:46:0A
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 0195E00FE3BD431F31EFB4C92F79C8DD16D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 04:01:32 +0000
Manifest this update: Sat 29 Mar 2025 04:01:32 +0000
Manifest next update: Sun 30 Mar 2025 04:01:32 +0000
Files and hashes: 1: Z406JsldDq5gjN_1Lio77tcegQc.roa (hash: M3kXHnMtNow14QpQkIkQl70hqTwzolvy5YYpOz5DGxs=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: GuhSWROnAfxXjmeKmXn89nNaTPazJh4sYCVZZNymJ1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:e3:bd:43:1f:31:ef:b4:c9:2f:79:c8:dd:16:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Mar 29 04:01:32 2025 GMT
Not After : Mar 30 04:01:32 2025 GMT
Subject: CN=48de49a9a8cf6a54217f3970cea02a966d06460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:24:0e:55:27:85:05:82:3d:3f:a3:ac:9a:
2e:fd:41:c5:f0:4d:b1:c9:95:91:04:18:61:50:a5:
47:41:8c:e4:6d:15:d1:d0:d0:9a:69:17:0a:35:35:
26:86:a3:f0:5d:e0:0a:7d:9b:dc:c9:03:40:b4:ae:
ed:a1:05:c4:7f:b0:4c:d3:52:c8:ba:c8:83:07:4f:
a4:17:12:75:dd:55:d9:df:38:33:2b:c4:77:d8:8b:
c4:e6:cd:0b:14:76:e6:bd:32:85:a5:ab:4f:53:4e:
85:1d:15:a3:83:40:e9:f1:5a:91:91:d5:4b:8e:dd:
0c:bb:0a:bd:db:36:ab:b7:75:df:45:01:9b:16:0c:
87:19:8b:2a:4e:9e:31:3f:b6:ae:9a:7a:4a:1c:c1:
a4:b2:60:2c:94:31:9a:46:0d:86:c0:07:15:04:ce:
e9:f9:2a:b4:cf:6f:ab:d2:43:92:b1:d9:12:ff:2a:
c1:06:5e:40:e7:f5:b2:31:1d:4f:13:68:01:63:2a:
96:61:90:13:7b:77:c5:50:84:43:d0:7b:a1:a0:01:
73:5d:9f:64:b4:db:e7:f8:8c:4a:0b:b5:b7:99:f3:
27:27:aa:f2:fc:bc:c2:f7:d0:8b:cb:73:f9:f1:7a:
c9:cb:c1:c9:1d:f3:74:b1:19:31:75:93:e9:dd:3c:
c8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DE:49:A9:A8:CF:6A:54:21:7F:39:70:CE:A0:2A:96:6D:06:46:0A
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:07:36:67:f5:64:4f:12:91:28:53:43:45:f6:d6:d8:9a:
6e:79:ff:29:af:3f:2e:c3:8e:7c:a4:c3:14:00:62:d7:77:d9:
c3:92:33:eb:ed:81:22:f6:ed:63:45:cb:d9:49:9f:cb:1a:dd:
cf:cd:58:79:00:ae:71:f2:94:ef:fd:91:29:ef:d8:4d:f3:73:
f8:42:07:0c:7f:af:f5:c0:a5:32:8c:65:81:6b:e4:49:c3:75:
9e:8b:55:d7:d0:a9:29:74:2c:ba:ed:f7:3e:a0:04:2e:b5:ae:
0c:3d:a3:1b:62:f0:67:68:84:80:52:e6:33:bc:63:0e:8f:a3:
9f:b7:7c:ae:58:93:50:4c:1e:e6:46:d2:ba:33:ad:78:dc:0f:
c0:73:97:bb:5e:6b:7c:71:9c:72:01:90:e4:71:8b:70:d3:9a:
e0:37:74:49:5f:74:16:f0:74:28:d9:28:a8:94:8b:fa:18:54:
6b:2a:7f:32:d8:fe:2b:d5:d6:3e:3e:53:e2:6f:ef:15:bc:6f:
d5:21:c0:ca:ef:ac:8a:65:33:dd:2e:1a:42:3d:86:03:ec:09:
b4:b5:bd:71:8a:20:40:1b:bd:6a:78:92:a1:ed:b4:dc:ad:76:
66:19:95:12:b0:9c:77:0c:2e:90:c0:39:87:ec:cc:cb:2d:6d:
89:89:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:17:20 2025 by rpki-client