Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: KiAPwGhMkkmSOSdkB4WI2V7zRC/iFNdey5MvKnuxNHw=
Subject key identifier: 75:37:1F:23:33:B4:14:66:2C:28:87:37:C6:14:81:72:18:24:9A:78
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 0195E0EB42D647D07FAFBCF9E24F4EC31BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 08:01:09 +0000
Manifest this update: Sat 29 Mar 2025 08:01:09 +0000
Manifest next update: Sun 30 Mar 2025 08:01:09 +0000
Files and hashes: 1: O8AFVnBt1m_KBZSzBdlAy6IskOk.roa (hash: drC0SH2uIRu+wIVyTkJpGVnxmbNSIHA06selPLS2xnY=)
2: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: 5xs9RBy3q/JEcgHBXjSxZ8VS6rF8ChkuN9+ui11uLo4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:42:d6:47:d0:7f:af:bc:f9:e2:4f:4e:c3:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Mar 29 08:01:09 2025 GMT
Not After : Mar 30 08:01:09 2025 GMT
Subject: CN=75371f2333b414662c288737c614817218249a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:aa:07:81:d6:a7:6a:74:f4:46:4b:2f:2c:
d6:d7:ba:e6:63:c9:28:37:f1:04:ee:8e:74:d0:d6:
f3:ee:03:2c:87:9a:57:38:c2:7f:50:75:19:f3:1b:
91:bd:62:fc:f2:ae:50:f8:b7:20:8a:a4:e1:c0:63:
a8:32:69:1d:d9:4c:73:f7:d7:e9:aa:bf:0b:50:92:
47:58:0e:6d:26:17:56:9a:57:bf:86:80:d0:2b:c9:
b6:69:41:65:90:a1:4e:d1:91:f7:74:1d:d9:3c:b3:
90:24:26:d7:65:67:bd:f0:fd:c6:12:ae:5c:a9:71:
30:88:d6:3a:7b:6d:5d:af:3c:83:e3:8c:d5:50:42:
f0:ec:bd:9e:3e:2c:69:76:6d:66:38:50:85:a9:90:
95:72:37:6b:5a:46:c6:34:b8:d3:3f:31:c1:e1:82:
48:8e:f0:ea:76:0b:ee:a1:a4:6b:c8:ee:62:2f:2c:
43:e0:4a:db:e5:2e:ed:e4:ad:1b:47:39:5e:b2:cf:
ec:0f:76:c7:dc:d1:fc:fc:00:5d:75:e8:cf:d6:a7:
ef:de:40:cb:fd:f4:b3:45:14:06:23:7c:82:ff:15:
72:fa:d2:3a:de:20:c2:5f:c4:c6:b5:32:18:06:48:
11:44:d8:7e:6b:24:20:26:7d:ff:65:a4:c1:69:f7:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:1F:23:33:B4:14:66:2C:28:87:37:C6:14:81:72:18:24:9A:78
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:34:b7:c1:93:fc:f7:ee:f8:f5:de:a6:38:b9:dc:1e:c6:4f:
c2:a2:0b:a9:95:f0:3c:83:02:d2:9a:bd:42:88:05:2a:67:e5:
a4:e4:8d:8f:ce:06:3e:f5:ba:45:99:8f:71:47:de:f2:dc:bc:
ad:80:1d:bc:83:a8:b8:2a:7b:96:7e:87:88:6f:3b:67:ad:f4:
21:75:1f:43:a4:73:c7:79:17:82:c4:ee:75:6d:5e:dc:cc:99:
3e:81:70:98:a6:29:be:74:38:1f:50:8c:84:c5:b7:e5:d9:9d:
7e:60:74:f9:89:0c:1f:31:b0:45:b4:62:b3:ed:85:c9:f0:17:
b2:ef:b0:d7:14:6e:36:2f:fa:c1:c2:4c:de:7f:4a:5f:86:c5:
10:76:18:99:04:d1:c3:66:ab:e7:18:77:4d:85:b7:ad:a8:48:
07:fe:ef:e8:2d:c3:38:7d:bc:85:0c:b4:6d:64:a6:1a:1c:8c:
93:bb:c3:fd:50:80:3b:5d:3a:03:7c:86:8f:3b:89:20:ea:52:
0f:fd:98:34:41:0f:4c:ab:6d:ca:fe:65:fe:b1:97:02:26:6d:
12:1c:27:99:23:ea:35:22:89:ab:ae:06:68:e6:9c:e6:d0:1c:
42:a5:90:21:06:cb:e3:ba:84:70:a8:f7:5f:80:d5:d3:bb:d4:
af:18:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:26:16 2025 by rpki-client