Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File: 66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier: JiV08QGuOCkUYxFEIX9l+Zp6OOAqxFnAjl7AmK3VRCU=
Subject key identifier: 20:8C:21:98:DC:94:F2:AC:9E:98:C1:39:78:01:17:D9:35:1F:2E:C0
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial: 0195E0B41DFB2EE28840A3829B0332B336CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number: 0FA1
Signing time: Sat 29 Mar 2025 07:00:55 +0000
Manifest this update: Sat 29 Mar 2025 07:00:55 +0000
Manifest next update: Sun 30 Mar 2025 07:00:55 +0000
Files and hashes: 1: 1-mBckpLEw9UGTfJd1V4E5TNfyV8.roa (hash: M/XKBZLQ+3xBfpkOhilnQwbN0qvFhcpTK4PjZ6r6TmI=)
2: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: tKpnlMUObG/Cd2iwIXUBpssUXqZ4NWq1iRjTMgydnvo=)
3: X59ioMe9M1azoJ6cRzkgIdEAa8w.roa (hash: Ldadp9gWZoAj6JkNflGn39JNMaPrFhlEg4BvEteUS6k=)
4: bvd1QkEb9SyVP1-MG1wkMVZ-iKE.roa (hash: H7HXfAZbCHLAR5KhYd5VTNdDAtOCH60344oqrEfBcQ8=)
5: z9Yv58abFhPjrR8RFukcWH5etZM.roa (hash: liHiIFHDq5nMOD1zCG5Omq4zbgZPC8dhY7RR/YINHTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:1d:fb:2e:e2:88:40:a3:82:9b:03:32:b3:36:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Validity
Not Before: Mar 29 07:00:55 2025 GMT
Not After : Mar 30 07:00:55 2025 GMT
Subject: CN=208c2198dc94f2ac9e98c139780117d9351f2ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:8d:9b:03:27:01:49:ca:65:f6:58:53:5f:
55:87:17:ea:28:aa:1b:e7:78:f2:5f:47:fa:81:75:
59:93:f9:7a:33:a8:b0:37:b4:7a:61:80:69:6c:a4:
8f:83:b1:8a:1a:75:ff:41:05:91:7a:bb:4c:6f:8b:
42:b9:b6:20:14:05:0a:16:f3:ea:40:c3:82:b0:ad:
7e:de:b4:78:c1:68:78:41:cb:3c:dc:9c:9b:7e:b4:
b9:cc:e8:bb:06:70:e3:19:d2:e0:3f:0e:b6:01:97:
88:02:4e:c0:34:79:ab:2f:e1:4e:b6:e7:d6:94:23:
18:f7:b8:d4:07:79:7e:89:0e:bd:03:de:24:95:42:
d8:07:70:9a:e5:3b:2f:fb:88:53:a8:37:c4:17:c1:
28:a2:9b:fe:ec:1e:cc:c5:68:8f:49:db:31:b7:b3:
2c:9e:e2:50:13:cd:4e:08:c4:1f:1c:74:91:13:fc:
bc:70:f8:ae:ba:f4:ae:2b:89:c0:2b:c1:6a:3a:1c:
48:6d:e4:69:68:7d:5f:a5:7c:02:0f:26:fc:43:b5:
f6:75:af:0a:ba:94:16:78:02:12:a4:b6:aa:3e:a3:
78:a3:d7:4a:df:05:d3:80:65:21:1d:c0:a1:97:aa:
c7:17:f0:fc:90:32:18:20:7b:ff:73:d5:5b:6b:85:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:21:98:DC:94:F2:AC:9E:98:C1:39:78:01:17:D9:35:1F:2E:C0
X509v3 Authority Key Identifier:
keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ae:a8:52:04:c4:84:42:45:f0:95:8d:bc:a3:10:c4:3f:49:
ff:3c:32:f6:22:9d:05:30:f4:6f:57:62:54:92:2f:40:90:a6:
58:cd:8d:47:cf:0b:0c:8e:f1:00:3e:ed:f1:d3:7c:91:c3:15:
d7:28:d5:1b:56:f3:cb:30:29:da:68:63:5a:26:e6:ac:74:ff:
d5:30:77:3f:15:07:4d:33:57:f5:f9:e5:3c:03:2a:73:a6:50:
da:8a:8f:c3:ed:e7:39:0c:75:67:ff:c2:24:36:2e:93:31:0f:
30:a2:30:31:c2:8f:e9:c4:6d:25:69:2c:7f:5b:ab:21:80:c0:
16:4c:3b:61:4d:52:4a:47:c7:75:a6:40:3b:2f:f4:6a:ae:cc:
68:a7:e7:92:67:72:71:db:c0:97:5c:74:c3:9e:e3:10:e1:21:
1c:dc:58:34:bc:24:f2:ee:ea:c4:f6:4a:3a:4a:a4:78:05:51:
7c:f0:50:0f:bb:0f:5a:0e:d6:af:f1:5b:dd:fb:d6:9d:24:11:
a2:0f:26:cf:9b:ba:43:5f:53:09:48:7b:16:c3:ea:9f:84:ef:
ac:73:23:3a:7f:10:29:60:99:7f:91:17:71:f1:fe:fd:5b:77:
93:15:2b:4f:2d:75:cb:cc:9a:ff:2f:ff:24:a0:9b:76:30:3a:
17:47:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:18:31 2025 by rpki-client