Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: HpSZLBbMb9bqJLPdOMEhRDQCTUkvru1NMX9P2vuXuaI=
Subject key identifier: A9:FC:52:DB:62:B9:17:5E:33:10:FD:66:99:18:BE:E5:28:CB:3E:F3
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 0195E07D55CA18944630ED19F87B8B8EDE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 14C6
Signing time: Sat 29 Mar 2025 06:01:05 +0000
Manifest this update: Sat 29 Mar 2025 06:01:05 +0000
Manifest next update: Sun 30 Mar 2025 06:01:05 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: c7mw6m7TwUbS8udXAbFSJ6RRWugLcgNmjpfxgyo5u28=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:55:ca:18:94:46:30:ed:19:f8:7b:8b:8e:de:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Mar 29 06:01:05 2025 GMT
Not After : Mar 30 06:01:05 2025 GMT
Subject: CN=a9fc52db62b9175e3310fd669918bee528cb3ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:50:8b:e2:b2:c7:c9:b7:cd:14:e2:f9:20:
b8:8d:8e:00:aa:82:68:c3:78:4e:3e:ce:2d:81:e1:
4d:aa:22:43:82:b7:16:20:85:18:7a:7d:54:ec:a1:
f1:37:1a:7f:c8:bd:c7:a0:05:20:ac:08:a9:06:91:
31:35:77:a7:99:6b:00:d3:59:92:de:d4:46:73:e7:
d1:99:3c:13:74:3b:b9:7b:39:89:10:dc:a2:6b:7b:
d1:4a:f4:86:4b:43:80:95:14:d9:30:92:98:c9:b5:
ef:0c:29:a4:0f:a3:e3:64:63:e0:eb:eb:5e:5e:8c:
05:cb:1d:9f:04:94:87:a4:c0:e8:35:94:54:aa:9d:
2b:3b:6e:8c:d0:f6:5c:7a:ee:2a:e1:d6:f2:ad:61:
ee:8c:ec:98:d6:23:67:15:4b:0d:25:b9:8f:8a:01:
a9:d5:09:2d:4b:aa:b8:35:27:04:10:6a:77:8b:d6:
82:b6:18:ff:ef:59:fc:58:fb:90:a5:88:27:bf:d7:
34:39:58:c6:aa:91:73:01:76:82:86:5e:2c:a4:89:
f6:2f:65:64:88:b0:bc:c0:28:08:fb:9f:35:df:c8:
ed:07:ff:60:37:e0:93:79:5a:18:d6:4c:64:9b:63:
f7:03:c2:fd:09:87:05:08:d3:3e:52:78:37:da:f0:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:52:DB:62:B9:17:5E:33:10:FD:66:99:18:BE:E5:28:CB:3E:F3
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:00:23:bd:75:54:e1:26:25:ee:a1:c0:53:d9:a5:0a:65:14:
eb:0c:3a:32:12:f2:ec:55:d6:10:7c:bc:42:98:44:1b:43:77:
ab:a1:34:f6:7e:d4:72:73:6e:34:d0:d4:8a:02:70:80:84:62:
8c:13:fb:85:19:9c:1c:04:81:58:6a:33:3b:d2:fe:03:74:83:
58:7e:c0:20:f6:12:e2:33:75:05:42:9c:76:19:32:61:c7:8a:
51:9a:79:af:77:4a:c0:46:a9:bd:bd:41:91:98:57:65:70:b3:
1d:ce:32:91:f6:0e:03:b8:df:32:17:52:fc:a1:6e:b4:89:b7:
9d:96:b1:79:77:d4:17:ae:a4:c9:db:22:0e:a6:12:25:46:e4:
de:c8:55:4d:f3:bc:e7:3c:e8:77:7d:97:e8:f4:e2:51:6b:d4:
8a:6e:7c:29:65:6e:ed:c4:e8:10:a4:d2:1a:00:60:54:16:6e:
ad:9b:10:59:9e:ee:6d:35:6a:57:4c:87:eb:95:68:20:e6:11:
e8:0f:9c:b2:c7:4e:4c:0d:08:09:3a:1f:40:95:13:e1:98:dd:
48:a9:15:73:45:ef:35:d2:66:e9:19:42:e9:d2:bb:93:22:f0:
5e:7a:fd:3c:d2:e4:e8:1d:5e:b8:71:e6:42:4c:9a:63:fd:2e:
6b:ba:06:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:35:07 2025 by rpki-client