Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
File: _Jvk7U5UtgHmtqQtC6BM-3qyw78.mft (raw, json)
Hash identifier: FR2YEn/Td/ozi+X2Q4aFMUjvwmRmfzMLodpx6kO0XKM=
Subject key identifier: DA:EC:0E:76:C0:66:2C:D3:39:E9:F7:03:B6:22:4C:0E:5E:40:A9:76
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 0196C2394C9B7937163620925ABDCE3A1FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 02:00:57 +0000
Manifest this update: Mon 12 May 2025 02:00:57 +0000
Manifest next update: Tue 13 May 2025 02:00:57 +0000
Files and hashes: 1: UT4NXn4ZcTkJwvgQgl9dQtMGQHY.roa (hash: nylFSQWGan1W87gYguk9ri6Ziw1VxhwDfj3K/sUzuCM=)
2: YrzvUNT5M4hj46aUuOCmh4XVM5A.roa (hash: rUaB6yYaD6EfXVc/GJmri33jh5n71ZBoGI/gA7B8G6I=)
3: _Jvk7U5UtgHmtqQtC6BM-3qyw78.crl (hash: 2sVv8GSY0eSX1NRkilB1Csjs4vVFoDpubJ/KIJkIFqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:4c:9b:79:37:16:36:20:92:5a:bd:ce:3a:1f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: May 12 02:00:57 2025 GMT
Not After : May 13 02:00:57 2025 GMT
Subject: CN=daec0e76c0662cd339e9f703b6224c0e5e40a976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:48:81:67:88:8a:91:5e:7d:39:e2:b0:b3:
a5:f2:cf:3c:ff:bb:41:65:13:91:58:c9:d6:72:5b:
cf:d9:78:ca:79:a2:fa:51:e8:13:dd:84:46:be:01:
da:ce:eb:c8:64:a6:aa:af:ae:bf:f1:ca:6f:44:b1:
e6:16:a8:46:59:86:d7:cd:07:05:c1:3a:28:ab:f3:
44:74:c5:dc:6d:97:20:8c:7a:9a:96:47:51:4b:0a:
28:19:4d:3b:5b:c6:e7:9c:34:47:d7:56:35:51:7f:
69:92:49:34:6a:da:5b:9a:7b:f6:f5:c8:9d:ca:90:
26:12:f1:df:5c:54:e3:3e:d7:11:00:36:57:f9:2c:
f7:ac:35:d5:65:52:fc:95:bb:41:5b:15:2d:41:0e:
2b:1f:d6:29:fc:a3:f7:8d:2c:2a:fb:9f:55:34:ec:
47:04:21:a3:92:be:7e:be:a2:cc:bd:90:82:cd:79:
34:1c:cf:4c:d9:fc:92:b5:c9:5c:ff:72:5c:15:b3:
f9:1e:a2:df:1b:f4:f0:38:5a:86:84:95:41:73:53:
ff:1e:31:d6:3c:6f:03:0c:ba:20:52:4a:6b:47:7e:
0b:f1:7c:35:1f:90:0a:7d:2a:83:0a:7d:b5:58:f4:
75:89:ec:cf:22:10:87:72:0f:ff:88:ff:f6:31:b5:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EC:0E:76:C0:66:2C:D3:39:E9:F7:03:B6:22:4C:0E:5E:40:A9:76
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:97:e2:bc:13:4a:3d:a6:5f:38:ff:d5:40:07:ec:62:56:b4:
78:07:3c:1d:95:a4:ec:19:61:26:12:02:07:59:07:16:70:48:
f0:03:13:34:47:fc:66:15:e5:5d:e5:3f:e2:10:ae:48:e2:88:
54:92:c4:d9:ba:6a:05:96:62:c2:61:d8:b3:1d:e9:08:49:80:
10:0f:61:8c:c0:d0:8f:77:bc:9b:fe:13:69:e4:1d:f1:d0:91:
d6:f8:dc:f7:31:45:cb:6e:56:e9:a7:5b:dd:78:42:44:24:0b:
c0:c2:28:cd:8f:ad:25:eb:a9:c6:4d:fe:2b:aa:12:3f:e8:57:
58:7b:71:00:e8:49:af:c9:b3:54:94:f7:36:b1:29:17:fc:1f:
62:a5:4e:99:c1:b2:3f:c4:cf:1e:b6:84:2d:fe:17:0c:4a:36:
f0:ee:31:98:b2:02:32:bf:67:18:48:83:3f:fa:57:a5:14:d7:
79:68:16:62:f1:f1:35:54:9c:db:5e:64:68:e1:3b:91:b6:0b:
14:5c:4d:2a:d4:c2:43:a6:ee:69:3c:12:6e:5c:68:1e:fc:e3:
1a:9d:15:99:7f:4b:7a:3e:2f:42:83:79:c1:d9:9b:f1:35:64:
62:5d:cf:e9:5f:5f:bb:2a:b2:fa:cb:6a:46:29:f0:a7:47:c7:
3d:5b:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:20:19 2025 by rpki-client