Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
File: t4zdv8dr2iagKeqAyJh3mHRfHwI.mft (raw, json)
Hash identifier: fPyobUvZ9r9dgfDRBIHpn5NYnWwtV+fTl62ODdjCklM=
Subject key identifier: CB:FB:72:1D:97:18:CD:F0:DD:9B:28:AB:E3:CC:3D:65:9E:6A:9A:C1
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 0195E12284B71F23A54A84C79303BA2E0DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
Manifest number: 1176
Signing time: Sat 29 Mar 2025 09:01:30 +0000
Manifest this update: Sat 29 Mar 2025 09:01:30 +0000
Manifest next update: Sun 30 Mar 2025 09:01:30 +0000
Files and hashes: 1: 4ZMkun0YVKsQhMtugX5PoEy0_rI.roa (hash: fKBmMFAsGdJAHOCtTHbLGukOIg/BNTMMvT6hLSCBWOk=)
2: 9SX4KosI9EGxvqBg-r1JnjKT0ZM.roa (hash: WqcTzSMCYbly9wYW2w55k/ugMgucEMXzGeFeea+G7IU=)
3: t4zdv8dr2iagKeqAyJh3mHRfHwI.crl (hash: M9fjrG7OZoAC7e9GcNCYat7yI3m9eThFFTEUJ5azXhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:84:b7:1f:23:a5:4a:84:c7:93:03:ba:2e:0d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Mar 29 09:01:30 2025 GMT
Not After : Mar 30 09:01:30 2025 GMT
Subject: CN=cbfb721d9718cdf0dd9b28abe3cc3d659e6a9ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:41:4b:21:a9:56:6d:d2:24:7d:37:c0:c3:
6c:6f:8a:82:d4:92:c7:25:65:8d:3d:a3:33:ca:be:
c7:96:96:a9:4a:1e:56:e1:d8:1e:13:00:a9:87:4f:
0d:ff:c2:56:6d:92:2f:e3:dc:90:87:eb:e7:13:d1:
66:05:28:66:24:72:db:70:0d:00:d0:93:61:62:31:
ac:5a:df:ea:b0:9e:34:c0:2e:3f:d8:b5:62:61:8b:
dc:e2:a9:14:15:65:2c:15:37:3a:ed:b2:8f:bf:79:
fe:8e:42:fe:9b:8b:0a:41:37:d7:a5:36:e1:35:7f:
4e:4d:c2:19:01:5d:54:c4:1a:37:c4:1a:26:c8:11:
bb:c3:6b:fa:f3:b4:70:16:17:0e:4a:07:b7:fc:25:
4f:70:56:50:e8:b2:c1:90:2a:04:eb:18:cf:ea:26:
cb:e0:f6:c2:16:df:ac:18:a9:29:49:6a:f5:9a:c0:
16:08:23:93:08:f2:4f:b0:4a:bc:ff:3d:a9:fb:f7:
34:f7:52:ec:17:21:8a:ac:16:f7:7b:d1:4a:64:08:
7a:a5:46:fd:a7:72:24:8a:6a:03:82:f5:df:f3:c2:
46:c8:43:25:af:cd:3c:ed:85:ff:7c:2b:03:33:a3:
76:d5:b3:bc:f7:f1:6c:fb:91:05:93:0b:8a:86:ce:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FB:72:1D:97:18:CD:F0:DD:9B:28:AB:E3:CC:3D:65:9E:6A:9A:C1
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dc:49:24:44:df:fd:67:76:0d:b3:54:8e:99:97:76:66:a3:
87:00:10:72:6d:91:4d:6b:9a:8f:0b:d1:2c:f8:b4:a4:82:f9:
a9:8e:10:b4:d8:10:db:6a:74:01:f2:ff:c4:87:7b:41:af:d5:
12:96:31:4b:27:51:d8:74:c6:11:d2:64:2f:4a:03:d6:98:65:
a9:77:d8:36:ae:b9:6c:33:1a:ee:82:23:73:1d:d3:05:db:14:
08:08:80:81:e2:2e:91:89:29:87:18:82:c4:93:ef:8a:15:c6:
d0:2d:0b:3d:47:40:e3:1d:2d:ba:fe:f2:b3:fb:da:d9:80:26:
08:d1:62:9f:ae:48:44:1d:37:7a:3c:55:65:7f:f9:62:bf:6d:
ee:ed:c7:09:33:10:6a:07:51:75:00:48:4b:1e:d3:ef:b1:68:
c9:79:05:55:b2:73:f3:f5:b4:31:4d:aa:18:ff:79:02:e8:bd:
a0:5b:1a:71:05:bd:b7:9d:07:1c:1b:75:fa:ed:38:8b:d8:c7:
f3:86:dd:9d:12:71:4a:54:27:7d:33:ee:6e:60:ec:74:cf:81:
a0:9b:b3:33:ae:29:ea:b3:07:86:4d:a0:de:a0:15:ea:ce:74:
25:77:d6:bd:9b:94:7d:74:30:fd:1b:6c:5d:d3:74:46:71:cf:
1d:7a:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:58 2025 by rpki-client