Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: 21/vq31UZ/S5VL5S6k5sbuwQzFl0sbL1SAALs0P+Uns=
Subject key identifier: 5F:42:C5:47:E1:6E:D2:3F:33:FF:23:BA:D9:3E:B2:76:BA:81:7D:03
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 0195DFD8D991018ECBD7C84ECE8408D6F2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 03:01:25 +0000
Manifest this update: Sat 29 Mar 2025 03:01:25 +0000
Manifest next update: Sun 30 Mar 2025 03:01:25 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: tbW2RSXkIqjX+2o55pY+UlSs+x0pB2Ad2vT4afshUwY=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:d9:91:01:8e:cb:d7:c8:4e:ce:84:08:d6:f2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Mar 29 03:01:25 2025 GMT
Not After : Mar 30 03:01:25 2025 GMT
Subject: CN=5f42c547e16ed23f33ff23bad93eb276ba817d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:aa:0c:67:6e:c6:f2:a7:cc:c7:35:0d:40:
42:9c:50:9e:39:6a:5e:a2:c1:78:b7:26:bc:82:82:
ef:de:2e:e7:97:a0:b5:17:14:1e:d3:47:04:92:4d:
bd:4b:da:6f:27:98:21:cd:06:d1:80:91:ac:5d:61:
94:50:77:ac:d5:c6:71:8a:13:fc:d4:4e:38:49:9b:
d0:cb:db:3c:bc:de:4a:87:91:f0:cb:6f:2f:df:03:
a7:58:b6:eb:75:35:fb:03:2b:e1:21:e2:94:13:5b:
69:35:8f:0b:2d:48:b0:2c:91:1a:6f:70:98:7c:33:
75:e1:b9:97:7c:81:ac:3d:e0:28:68:42:8d:92:77:
f3:9a:f9:01:a9:29:7f:9f:62:51:60:b0:d6:52:db:
61:24:06:24:80:91:18:29:d0:aa:9f:2a:c5:fc:d1:
64:4c:c2:0b:8e:24:81:ee:6a:5f:ae:e9:af:f0:40:
3a:fa:3e:e3:20:fc:5b:b1:94:48:86:6b:3c:a2:d7:
10:d8:63:84:9e:fb:69:d1:6c:66:3e:46:c3:7e:24:
11:22:dd:fc:02:53:df:9e:dc:04:f6:0b:d2:6f:81:
c0:66:08:ab:75:fe:ec:d9:58:41:c0:90:ed:dc:f2:
29:48:f5:6d:a6:b1:40:98:bd:98:e6:53:9f:ef:9f:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:42:C5:47:E1:6E:D2:3F:33:FF:23:BA:D9:3E:B2:76:BA:81:7D:03
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:be:0b:33:4a:6d:d1:f4:ca:a8:66:de:c4:3f:6c:ac:a6:0d:
5e:74:b1:95:69:01:b2:25:a2:d1:59:5f:95:0c:37:4f:0a:5d:
b7:98:f0:37:89:7e:ec:c0:fa:e4:f3:e3:c1:e7:b2:55:19:bf:
58:18:7c:4f:4a:00:7b:a4:a4:05:32:c1:d6:d3:a6:91:9b:7c:
27:6e:a4:8b:4b:8e:0a:d5:bb:a4:20:e4:c0:52:56:bd:a9:f1:
b2:8c:95:e7:66:1d:30:b5:a3:33:89:56:58:64:77:67:45:1a:
c6:2a:f6:13:5e:d1:ae:96:1a:b6:28:0f:97:f6:e2:56:26:a1:
2b:28:c9:c9:dc:b1:dc:a6:36:ac:13:00:3b:ea:10:f4:a9:38:
99:e6:b6:fb:20:9e:11:db:01:8a:0b:cb:4f:57:46:e0:55:2b:
df:62:c5:02:66:f5:e6:55:a0:ae:f9:71:15:44:4a:98:23:66:
4d:0e:02:ae:88:8e:53:20:13:d3:a6:a8:d3:02:b0:7b:6d:b6:
51:de:b4:42:2a:9d:ba:2a:69:44:7e:d9:5a:e9:c5:77:34:c5:
14:d9:d4:d0:5e:37:9a:e4:17:51:a1:99:34:73:fb:ee:77:91:
1e:4a:f2:e9:6c:ac:ed:20:d9:89:52:e1:e6:82:fb:ed:18:9e:
ce:b5:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:18 2025 by rpki-client