Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: x7G3LvbPDy7ahuxV7XlRiVQ6lhAl/VTlsn5CcpPIHmw=
Subject key identifier: 33:EA:46:A5:AB:9A:9C:73:CD:D4:36:98:E4:B8:5C:40:24:D1:08:F0
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 0195E158DC754E051E36605C312A80522E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 10:00:51 +0000
Manifest this update: Sat 29 Mar 2025 10:00:51 +0000
Manifest next update: Sun 30 Mar 2025 10:00:51 +0000
Files and hashes: 1: U9d60iaXFQDxSrHcLdT4ojLheZE.roa (hash: Gjhqz3LOzFes4JptTfh+vWteSpqEom7uInck02Q9Ins=)
2: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: Br61YouuU9+J/Qv7dbbQSh8OZPp899imFzYQtbzHb0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:dc:75:4e:05:1e:36:60:5c:31:2a:80:52:2e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Mar 29 10:00:51 2025 GMT
Not After : Mar 30 10:00:51 2025 GMT
Subject: CN=33ea46a5ab9a9c73cdd43698e4b85c4024d108f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:7a:01:47:70:2d:e5:1a:fc:9a:da:30:8f:
91:6e:7a:5e:83:0e:d9:e7:45:ef:77:4d:d6:5a:5d:
d5:4d:a5:75:d1:1b:c2:b6:4b:f4:0a:46:cf:57:e2:
c0:d2:c3:f0:81:4a:3c:1c:b4:1c:23:f5:1b:98:64:
bc:c0:a2:e9:73:4a:10:e5:27:ac:22:aa:67:78:ca:
79:6b:cb:5e:e6:4a:7b:2a:d7:c6:38:2b:54:44:99:
d0:96:57:74:4b:5c:de:40:f0:76:2f:03:23:d0:b3:
a6:d7:57:c7:aa:b0:1b:b6:90:63:d5:e6:b4:ff:2a:
58:8f:f0:e5:71:d8:90:ba:5f:ad:09:cf:99:ea:6b:
e0:a4:8c:6c:ed:80:70:5e:4c:34:c8:f3:0e:80:eb:
74:79:19:11:e7:f7:f5:b7:1e:b7:e6:17:3b:8e:13:
64:5c:52:dc:df:84:d9:a4:b8:b3:73:2a:26:02:00:
c2:30:2c:2a:b8:ee:ff:0f:5f:b1:37:cd:79:b2:5e:
e1:9a:82:bb:66:55:ec:13:e6:cc:25:20:7a:ef:aa:
e9:a9:61:82:b4:d7:1c:fb:85:89:05:67:89:5e:81:
22:01:64:ad:6c:19:c2:c4:53:d2:ac:61:83:db:26:
bb:28:ee:fe:de:b5:a5:8a:78:dd:43:ba:64:a2:aa:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:46:A5:AB:9A:9C:73:CD:D4:36:98:E4:B8:5C:40:24:D1:08:F0
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a0:c8:c2:83:6c:40:62:fd:0d:4e:c1:10:8a:17:df:26:0d:
d0:15:0f:b5:78:07:3a:d3:c9:62:cc:6c:9e:5a:8d:3d:cb:51:
d7:7e:e6:5a:ec:76:15:70:b2:7d:05:8d:73:9c:41:92:b0:37:
03:1b:f6:e4:02:57:48:53:f3:44:42:5a:9e:7f:4e:cb:92:9c:
f1:9d:f2:3b:7c:6d:39:44:f6:d1:a2:6f:48:7f:09:3d:ad:d8:
c5:6c:92:a1:09:4c:4d:c6:c0:ed:22:77:9c:3e:c0:c4:ca:16:
3a:00:42:17:c7:cf:4c:32:ad:ba:b6:2d:ae:2e:cf:bb:34:81:
9e:7d:72:1b:03:e2:48:ac:c4:12:00:8f:7e:d4:a3:8f:03:e5:
55:42:77:48:2a:06:b6:42:24:fd:2e:9a:96:62:a0:f5:7f:29:
51:cb:b8:95:fe:c7:d7:70:2a:d5:86:86:c9:4f:a9:bc:40:95:
8e:63:b5:64:08:fc:2e:87:ad:17:8f:c4:3f:fa:7a:e3:b6:5c:
b4:40:75:36:d3:69:c0:02:28:57:0d:62:c7:ff:7b:42:6a:f1:
98:30:6f:d1:19:b7:6d:d0:12:bd:d8:58:f4:70:f8:b1:f8:52:
44:0c:97:13:4d:45:da:45:a1:20:57:c1:e7:d8:69:03:8f:3e:
db:ab:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:11 2025 by rpki-client