Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: 6Owcw5xFsODHK0rXG4Dn/xsOfyBKg+HgCKgYQu+yRWw=
Subject key identifier: F2:3C:30:C4:CA:C8:88:2C:B6:2D:6F:D1:08:75:ED:D0:4C:F7:BE:62
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 0195DFD89B976648A48CFB4887EC21B43705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 0478
Signing time: Sat 29 Mar 2025 03:01:09 +0000
Manifest this update: Sat 29 Mar 2025 03:01:09 +0000
Manifest next update: Sun 30 Mar 2025 03:01:09 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: Ucf3KrPL6OHsU5z5rIrmqMUAwLqcOk2ttZkI21TjyLo=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:9b:97:66:48:a4:8c:fb:48:87:ec:21:b4:37:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Mar 29 03:01:09 2025 GMT
Not After : Mar 30 03:01:09 2025 GMT
Subject: CN=f23c30c4cac8882cb62d6fd10875edd04cf7be62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:51:9b:6c:82:59:44:6b:6e:52:31:44:1c:
bc:78:b8:b5:86:cd:84:50:6a:dd:18:36:39:d4:e6:
96:c7:83:1c:fc:22:76:27:6d:23:3c:05:f4:33:85:
7c:a6:ab:f5:cc:60:c3:0e:29:67:f9:16:b4:d3:70:
53:7d:eb:b9:e1:aa:97:1d:53:a8:3f:2c:8f:81:0d:
d5:a0:b0:9d:bf:c5:b8:ba:48:00:2c:f2:db:2f:ec:
ec:1e:4e:66:f4:b2:2f:89:82:47:ec:63:96:ef:d5:
f0:6f:4b:f2:04:28:8c:b0:4c:9b:37:a2:80:3e:8c:
a0:65:60:07:2d:cf:fe:4a:23:57:87:8e:b6:b7:13:
79:c4:18:1d:24:88:5f:23:12:f1:7e:87:3f:b2:2b:
99:27:39:e4:4c:f4:27:42:a8:28:42:79:51:10:8a:
51:79:ca:82:da:d5:82:54:bc:5f:c1:b7:42:73:42:
1a:63:6d:43:8d:a7:13:d5:e2:f8:5e:7b:05:40:0d:
e1:b3:65:b2:89:53:ee:0a:eb:22:0c:45:9b:0a:08:
6e:a4:78:e2:65:f8:1b:4e:bf:b0:9a:c4:62:28:d1:
a7:63:57:98:1e:2e:a2:f6:20:03:a2:2f:67:a3:2b:
db:5a:ec:e9:20:39:93:38:fb:39:0d:54:cf:49:b7:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:30:C4:CA:C8:88:2C:B6:2D:6F:D1:08:75:ED:D0:4C:F7:BE:62
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:41:98:f1:5a:bf:89:8e:b2:0c:a9:6f:b1:dd:c3:45:d4:
0d:2e:d2:d2:43:1e:cd:d0:ec:c6:ec:2f:76:94:75:a6:99:fc:
ab:af:6d:ff:9b:b2:24:f6:34:36:a0:e1:ee:25:64:f6:2d:ba:
10:19:f9:dc:9b:a8:e4:72:74:96:b0:0b:7a:ee:fb:ca:7d:e0:
0a:85:9a:64:de:c7:b2:b7:98:a1:e7:a9:93:29:00:7b:a2:5c:
a1:70:40:35:ae:ab:b9:88:fe:6f:b3:b5:a6:ae:2d:75:56:6c:
d1:3e:81:17:ed:61:53:96:06:03:f6:76:2f:3e:df:f8:02:b5:
d3:9b:77:8f:cc:60:d5:a6:14:c3:f5:6a:7f:78:fa:c1:ef:aa:
88:1c:ae:73:24:9a:31:99:b1:6f:4d:7c:2a:a0:9f:f7:8a:be:
83:e6:f4:3a:38:d1:6d:34:6c:61:75:58:96:de:68:ee:26:35:
08:88:34:2a:5e:69:7f:8b:44:af:0d:99:c9:3b:1a:cb:83:4a:
2e:56:8b:c1:e2:1f:e5:c1:e1:f9:25:bb:f8:9b:2c:bc:d8:b2:
fa:3f:31:c5:2e:ae:02:c2:88:1c:9d:ec:70:d7:b9:2f:b0:61:
ed:ba:59:8b:e1:49:50:20:80:af:e6:4f:ed:fe:3b:66:db:52:
33:32:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:17:53 2025 by rpki-client