Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier: qRzCTKk02MWmS/WU66GKvtPZRs31YV7s43NfLmtwhVQ=
Subject key identifier: 6A:0A:67:85:B9:A3:D3:2D:3B:F4:E3:5F:98:09:AE:76:94:7B:C0:CE
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 0195E04653DE69E386B8284C068F4BBE66F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 05:01:00 +0000
Manifest this update: Sat 29 Mar 2025 05:01:00 +0000
Manifest next update: Sun 30 Mar 2025 05:01:00 +0000
Files and hashes: 1: ExN9i5VesHU3F7YUwnAG8cmmWIY.roa (hash: ohUReGOM59d9wdFacF3liO8XNYgM9oH2+Bntxv7lM1Y=)
2: L3NZE3diqCfrOMqlaqYV4hdJSf4.roa (hash: vcQOyWenVbLS69il7j69IF/EsJjMjN7DJNMQo/ozyO8=)
3: LHiOtk6tL1CXrv20IpGcmi0303Q.roa (hash: V/XoU0KL7XbTl000bnNR3hPbksWkdzPpz1xOimffKQc=)
4: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: tP4FReFZVRw+S1ncPOgepLwtWvnIfbWcZiQghdN0dhU=)
5: nc6Tssi0fJUCdpIrzpS6gtLsknA.roa (hash: +UGU2rdYiUMrGCv6hqB6GXiHSsxfMHPA919kyoWQjQg=)
6: sAtItIdVW20mI2NFNh8XtGHWZOE.roa (hash: dKze9gkE7+w/iOUYyZPsFpG7X/XK0rolO2v25V1/rGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:53:de:69:e3:86:b8:28:4c:06:8f:4b:be:66:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Mar 29 05:01:00 2025 GMT
Not After : Mar 30 05:01:00 2025 GMT
Subject: CN=6a0a6785b9a3d32d3bf4e35f9809ae76947bc0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:66:d4:7f:97:c7:bf:da:b7:c4:20:26:37:
2e:66:a2:4b:a7:8e:99:58:22:62:bd:27:fc:0c:46:
3e:49:19:97:f0:91:23:fd:99:15:14:9f:a3:f4:33:
db:46:16:90:a1:5f:91:67:79:cf:d1:08:0c:03:4f:
9e:aa:79:45:44:84:ff:1a:2a:cc:ec:22:24:c0:11:
ed:09:16:74:d4:d8:8b:eb:db:ef:81:ca:38:28:de:
e2:f4:25:d9:6f:ba:50:f1:39:00:ec:41:c5:5e:57:
d7:68:1e:a4:9f:4d:7b:47:de:41:e6:91:78:64:14:
51:19:93:08:92:cb:1d:8a:db:13:39:8a:83:2c:84:
d4:72:91:f8:e2:79:a4:ac:04:c8:c0:38:a4:37:f9:
fe:38:7e:fc:80:31:47:1c:09:42:89:ac:0c:dd:15:
82:7b:1d:03:c9:03:d9:3a:ba:8b:07:c3:6a:15:be:
b6:e4:28:5b:97:7e:38:7d:db:d5:5a:c3:2b:9c:e3:
50:18:b6:76:87:74:c4:48:c9:73:83:6d:89:ab:44:
d8:d9:21:38:f7:0e:fb:e5:ed:b9:9b:a8:a7:49:a6:
e8:d4:1f:30:ff:39:85:99:f2:c5:81:52:f0:9a:a2:
8c:c7:fb:2a:0a:51:6f:7e:b0:d3:43:6e:32:9b:53:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:67:85:B9:A3:D3:2D:3B:F4:E3:5F:98:09:AE:76:94:7B:C0:CE
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1c:6f:b0:96:00:b0:62:c7:d6:aa:60:44:41:95:91:06:b6:
43:93:ab:a6:26:2e:2d:90:bf:9c:df:83:45:93:ac:4b:81:11:
7d:a7:c3:7e:78:bd:6a:65:92:f3:75:12:64:a2:56:83:d7:5d:
93:f5:29:f5:62:48:de:20:d3:a3:a1:1d:04:73:c1:f3:91:e8:
32:ec:88:f0:67:6a:4d:64:eb:2b:d3:f9:17:99:9d:4f:6e:b8:
77:de:16:4e:44:66:4f:ab:bc:d9:ad:62:1a:df:68:32:6a:c1:
1b:9c:6d:d9:96:56:bb:4b:96:5e:f2:e3:b9:fd:5d:66:7e:d8:
42:87:9f:9a:fd:32:6a:39:4c:89:c3:2d:ae:d2:a6:75:1b:a4:
eb:3c:66:c1:64:fd:76:e8:98:dd:60:32:11:66:8e:11:ff:2f:
c4:a5:5a:6a:4b:d1:0b:d6:21:ba:84:56:0f:27:04:73:2c:65:
c1:06:26:bb:eb:12:d0:44:50:11:51:6c:1f:41:b2:1c:0d:90:
59:00:59:4f:9a:45:dd:90:24:10:74:43:28:1b:9a:1b:09:10:
8f:35:96:2c:e4:89:ee:ea:5e:ea:2d:2d:6c:28:bf:14:4b:e7:
9c:6a:61:c0:b8:18:4d:49:f5:aa:fc:7c:e4:72:b9:ed:8d:6e:
92:ff:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:06 2025 by rpki-client