Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: F+TtfAFoQqBX06NUPkv0NoROjw8jMlXs6X7Bti+XM9c=
Subject key identifier: 9E:28:10:0D:CC:E8:9A:5C:56:9E:9D:EA:18:A0:E2:03:DB:3A:82:5C
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 0195E1907BF9A35BFB451F92B8E39F28CD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 11A9
Signing time: Sat 29 Mar 2025 11:01:37 +0000
Manifest this update: Sat 29 Mar 2025 11:01:37 +0000
Manifest next update: Sun 30 Mar 2025 11:01:37 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: 5P76HMZxwJZ2hlUrj6RqyaCymtJiHHDZVJpaSdAaXlM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:7b:f9:a3:5b:fb:45:1f:92:b8:e3:9f:28:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Mar 29 11:01:37 2025 GMT
Not After : Mar 30 11:01:37 2025 GMT
Subject: CN=9e28100dcce89a5c569e9dea18a0e203db3a825c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:7f:5f:00:52:57:e9:b9:cc:02:51:b6:d9:
aa:cd:77:9c:ab:c9:23:c4:dd:4f:2e:e5:58:5c:50:
17:f6:71:1c:41:6b:06:8d:55:d0:81:92:e0:8f:98:
3d:28:ed:b7:e1:56:82:f7:b1:92:9c:87:cf:f4:12:
3c:6a:fc:72:b1:76:c8:bf:f8:2b:ef:9b:d9:23:8a:
74:c9:a0:4e:cd:92:55:2e:fd:80:fe:60:a1:b4:9b:
95:a9:95:72:27:b3:01:6f:e2:c0:d1:dd:89:d5:ba:
df:d8:54:0f:15:90:a6:b6:45:be:75:44:c7:7f:2a:
60:68:da:2c:82:88:54:f3:8d:42:5b:85:45:7f:67:
bd:7f:11:41:b1:57:f3:1f:e6:21:ce:32:49:53:e0:
67:81:e6:9a:e1:cf:a0:d8:47:ae:bc:0f:10:4c:34:
a8:2b:18:5c:1e:a3:6f:0d:d4:0f:77:42:d2:1f:08:
3d:9a:b7:a5:99:98:67:4c:95:49:8d:90:b1:fc:9e:
26:4f:d2:c4:81:63:e0:5d:b8:cf:2e:f3:20:4e:58:
7f:b2:8a:e6:92:43:8d:4f:98:d5:6b:9c:77:7b:e5:
71:c8:99:1d:78:a2:5b:08:08:0c:e2:54:b2:56:a0:
24:51:47:07:87:38:da:58:c9:57:17:fa:72:3a:5c:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:10:0D:CC:E8:9A:5C:56:9E:9D:EA:18:A0:E2:03:DB:3A:82:5C
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:32:00:37:a5:02:19:d1:31:bd:48:fc:f7:eb:0d:af:a4:
f6:ab:d0:bf:db:0b:72:99:28:a0:db:f9:a9:53:3f:28:0d:63:
19:79:bf:2d:ae:10:15:d1:3a:48:69:77:e8:76:ef:82:9b:b0:
00:3b:b9:d2:90:bd:5f:e3:26:18:ae:37:d8:82:9b:2b:1a:50:
b0:b7:11:24:e5:d1:c5:f3:8b:43:d1:1a:ef:d2:32:06:5e:08:
c4:c2:f8:59:7a:96:79:f7:6e:51:36:3f:07:a2:bf:da:23:4b:
66:35:54:21:b4:75:86:78:cc:9f:1a:57:f4:03:d1:44:f4:bf:
a9:2a:7c:31:e6:4f:6c:f9:a2:7e:3b:db:c5:d4:f4:f7:30:08:
d4:75:b5:67:0b:32:eb:aa:4a:38:c3:93:80:78:48:eb:9f:ac:
66:d7:a1:85:17:b2:07:10:b5:96:04:37:6b:45:88:f2:d6:5f:
0f:e8:4a:81:ed:68:4d:04:18:71:0c:d2:4b:ac:64:50:af:01:
96:2e:84:2f:92:57:82:6f:c8:9b:e2:1e:aa:3c:3d:e0:9e:73:
9b:b3:10:b5:0f:64:9a:f4:cc:c9:3e:15:f4:04:37:ea:c4:f2:
44:fb:24:cb:9f:6b:c1:ac:fb:3c:0d:d0:54:9a:86:37:a3:13:
ed:e2:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:04:49 2025 by rpki-client