Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: na6YvjAfRKcL9Qo7m0jzoBB6GdO04y4garpUyRV1wvU=
Subject key identifier: D0:C5:B0:6B:79:F1:F4:C6:0C:C0:8F:E5:91:84:32:7F:46:34:42:C0
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 0195E00FCD81D5ABEFE9F532D46015071AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 11FD
Signing time: Sat 29 Mar 2025 04:01:26 +0000
Manifest this update: Sat 29 Mar 2025 04:01:26 +0000
Manifest next update: Sun 30 Mar 2025 04:01:26 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: 1X410XsED6831GEVhcT58A6gsTT7t0VAd1NRhSSKhO4=)
2: VBSMUM2E1eY-HeRIXiGsI4i681A.roa (hash: 9hPqZnbB+hAnaLIqMz7J1BKYjhJ96B3SoRz8LPWNz7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:cd:81:d5:ab:ef:e9:f5:32:d4:60:15:07:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Mar 29 04:01:26 2025 GMT
Not After : Mar 30 04:01:26 2025 GMT
Subject: CN=d0c5b06b79f1f4c60cc08fe59184327f463442c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:a6:d5:56:8c:95:84:9e:c8:e7:ba:04:28:
ed:cb:cc:bd:02:f0:45:12:6d:05:23:ac:bd:1c:da:
4c:3e:12:0e:46:91:b3:69:8a:5f:86:b8:23:04:68:
af:12:c1:a1:df:8c:fa:d5:c9:9c:1f:93:c6:a0:2c:
85:af:f5:08:70:c5:cb:84:f1:4a:0b:a9:41:41:49:
51:27:9a:c2:93:18:bf:b1:2e:75:48:32:79:9d:fc:
b0:83:2d:f2:e1:01:3e:77:fb:9e:f0:ed:91:07:06:
f9:a8:1d:14:10:b1:8e:76:7a:7c:07:9a:3f:af:f4:
bd:9b:45:19:92:88:c3:02:10:1c:51:ae:cd:8b:ac:
34:50:7f:83:17:3e:fd:0b:91:8d:3b:41:96:ba:51:
ba:fe:6f:00:41:8c:66:5f:7c:a2:84:af:53:14:1a:
c0:61:41:ef:ff:f5:c4:2a:a3:ed:3f:10:80:ec:72:
8f:4b:88:5b:bd:f7:d1:e1:3d:eb:ec:98:1f:35:e1:
74:bf:93:da:9a:e4:5f:9c:67:af:62:97:6f:80:aa:
ef:24:4e:49:ec:d4:9a:64:23:2d:ed:62:66:6c:56:
16:85:6a:93:0d:32:2a:4b:6d:57:a5:c1:b0:a5:b1:
0e:7f:70:5c:e6:1c:03:a0:1d:08:c6:f5:0a:3c:4a:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:B0:6B:79:F1:F4:C6:0C:C0:8F:E5:91:84:32:7F:46:34:42:C0
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a8:f0:5e:d2:a4:d4:74:8b:11:0c:c8:10:3b:a7:9e:8f:fe:
56:3f:f2:e0:2a:82:af:ae:90:bb:33:28:32:44:0e:ee:16:21:
3b:30:f5:ca:e2:8a:d5:b1:61:ae:24:5a:c1:b6:2b:1f:53:e7:
a2:72:c7:31:7c:b5:a8:d9:66:98:0c:98:37:c8:b7:2d:a5:60:
7b:47:cf:f6:9c:d5:44:f4:59:b8:53:46:e1:45:8a:98:7e:29:
5f:b1:c9:ad:76:7c:cd:72:38:af:6d:49:40:29:59:02:be:5c:
89:d8:d4:b1:65:47:01:ab:5b:5f:bd:20:9f:f8:fa:20:53:38:
d8:61:a9:03:f4:d0:4e:5c:8f:34:dc:f5:63:83:00:41:17:ad:
2b:eb:f0:38:56:b4:fd:0c:10:38:f4:d1:4c:70:23:dd:3a:52:
ad:20:95:0b:44:49:02:bf:33:5c:08:00:c6:61:1a:60:b0:2b:
ad:2d:70:eb:47:82:65:84:3f:9f:e9:7c:ed:38:96:a8:ac:3d:
82:43:81:66:72:be:6c:30:5b:d6:ca:6c:bf:b5:54:18:e5:d5:
15:17:9d:a7:61:b1:55:4c:f9:b7:53:5e:47:fd:21:8b:6d:41:
e0:bf:95:e7:4f:61:69:71:87:0e:a1:53:d3:76:7e:e2:ad:e8:
bd:27:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:22:23 2025 by rpki-client