Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: 1I53IkP9t1Capw26QY3OuSlAdJfYarMN8u0aZMsUbYM=
Subject key identifier: 20:5A:88:80:85:C6:89:27:A1:7E:DB:84:5D:24:4F:21:69:FF:E9:D1
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 0195E0EB84B2643AF22FBB15EED6A2BDA6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 0EF8
Signing time: Sat 29 Mar 2025 08:01:26 +0000
Manifest this update: Sat 29 Mar 2025 08:01:26 +0000
Manifest next update: Sun 30 Mar 2025 08:01:26 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: d0QSbN0amf/TvSjEUZyqmxnJ3iUO+BdxVMukGrBfLTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:84:b2:64:3a:f2:2f:bb:15:ee:d6:a2:bd:a6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Mar 29 08:01:26 2025 GMT
Not After : Mar 30 08:01:26 2025 GMT
Subject: CN=205a888085c68927a17edb845d244f2169ffe9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:c3:5d:08:c5:ae:55:d5:b5:0d:4a:dc:ff:
0c:7e:e4:74:75:72:46:5a:15:b7:c9:0e:98:ad:c6:
52:cf:f4:18:db:76:e9:d2:da:36:e8:c4:14:59:db:
a0:cc:2a:fc:11:d0:93:92:ca:2f:aa:92:f1:f0:a4:
ee:8b:89:bd:6c:56:75:93:d1:76:c0:a2:74:94:f2:
28:9c:d7:18:03:6a:c2:c4:8f:fa:20:d9:4e:aa:ab:
84:fe:4c:e6:7c:7c:bf:bd:03:42:1a:e3:38:24:eb:
07:86:61:5e:54:29:50:15:50:3c:1f:a3:23:6d:4e:
26:69:7a:09:f8:05:f5:35:3c:a8:14:3f:61:33:fe:
27:cb:90:ba:42:3e:90:32:87:14:9a:62:9d:c3:c2:
f3:dc:e2:5d:bb:9e:e7:f2:a3:55:41:9d:5c:ea:0b:
e1:bd:8f:d0:c4:d0:0a:1d:3b:e9:69:d1:ef:51:aa:
71:fb:da:5c:9c:bc:6b:79:29:93:e6:47:ef:bf:2a:
17:8e:57:be:63:1b:dd:be:5f:47:a2:9b:13:31:df:
a2:c4:d3:c4:6c:30:fd:eb:df:fc:38:b2:e7:c1:01:
a2:86:44:b0:ec:1a:7a:28:9d:39:2c:e0:dd:69:b6:
e9:64:ff:52:3c:d1:a4:d2:83:e6:8c:33:b8:cb:15:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:88:80:85:C6:89:27:A1:7E:DB:84:5D:24:4F:21:69:FF:E9:D1
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:44:40:46:8c:40:2d:f4:4f:cc:55:c5:ce:41:69:69:2b:63:
a9:23:f4:2a:82:69:2d:f2:02:56:a5:e6:c2:14:16:55:4a:70:
74:fe:ae:7d:fe:1e:d2:10:d9:89:4e:4a:62:f7:9d:27:a7:bd:
40:f3:6f:79:81:f7:ed:49:0a:b7:93:ef:3e:61:c2:6f:f8:0a:
46:b6:e1:74:63:e2:be:8a:8b:0a:3e:e8:68:22:f4:50:02:b0:
0f:f2:61:dd:09:1c:7e:f5:de:b1:34:31:07:84:66:2e:ee:0f:
a7:60:e2:dc:cc:19:80:9a:97:73:b7:fd:90:e8:a0:3e:4c:78:
8d:08:dd:ed:d5:37:de:99:44:85:11:97:9f:30:c0:bd:a6:c4:
cd:81:70:cf:06:17:66:a8:54:84:65:be:2e:7a:3b:dc:40:dc:
f9:ca:41:b9:32:02:6b:5d:57:0c:0b:fe:ad:b6:36:3a:09:0e:
d3:45:82:99:d7:75:77:18:86:d3:b3:62:64:09:41:31:00:50:
07:53:38:1e:7b:27:b6:02:ba:e9:29:ed:cf:af:d9:a0:96:5a:
4d:6a:7f:08:59:c1:8d:d9:08:4c:40:a1:e5:e5:c8:9d:ea:86:
b6:bf:fb:9b:a0:67:ef:01:cf:4a:49:4e:1e:49:81:cc:e5:9d:
66:5f:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:53:32 2025 by rpki-client