Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: wJYRgqf4pC3POwPVsNWi8GF/dPtKzDkn7Bgw89n4wT0=
Subject key identifier: 96:B5:53:8E:82:11:F1:8E:04:C1:F9:76:58:86:12:8E:30:B3:9F:96
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 0195E0EB753FC9614B39D020942DE02D70C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0721
Signing time: Sat 29 Mar 2025 08:01:22 +0000
Manifest this update: Sat 29 Mar 2025 08:01:22 +0000
Manifest next update: Sun 30 Mar 2025 08:01:22 +0000
Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: aRRLkuzj2U0i9ImE9w7PhM0ylhKjJNlP6iMBhjV9gfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:75:3f:c9:61:4b:39:d0:20:94:2d:e0:2d:70:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Mar 29 08:01:22 2025 GMT
Not After : Mar 30 08:01:22 2025 GMT
Subject: CN=96b5538e8211f18e04c1f9765886128e30b39f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:de:bf:f1:73:89:66:9a:92:16:b2:8f:1f:
c3:3d:67:00:12:76:42:3a:6f:e0:60:fd:2d:b3:8e:
bd:c6:18:49:e8:d5:75:39:ae:34:9c:e6:6a:44:37:
8b:98:56:dc:bb:16:eb:0f:4e:c9:fd:ff:7b:e4:9b:
e9:65:bf:af:9d:30:dd:91:1b:62:bd:17:65:62:47:
7c:85:90:ab:02:98:82:6a:9e:a7:77:e1:a5:ba:18:
bb:cb:02:ec:bf:4e:1c:e6:cc:18:32:76:9d:8a:c7:
e9:35:ff:d8:6f:a8:b1:6c:d2:62:58:14:dc:55:5e:
12:e9:f8:30:e4:60:04:f0:56:01:8f:ad:ce:df:26:
41:ea:7f:54:37:4a:5f:0d:e5:35:46:f4:d6:68:d9:
f4:56:89:d4:8e:90:38:53:b2:47:4d:84:8d:39:78:
23:c8:eb:2b:13:46:8a:c9:7b:91:b0:00:f2:58:12:
56:b2:fd:ac:48:d1:be:a6:e8:ae:c7:ee:49:d5:fb:
d5:91:7e:1d:7e:d7:3a:91:54:8c:85:ab:19:19:f9:
b8:e0:c3:0d:a3:05:a9:2f:ec:f2:85:d2:98:d5:d5:
ca:5f:54:a9:4c:6b:39:87:a6:b9:b5:0f:a8:21:69:
5b:43:5c:55:94:06:ee:82:60:3b:c3:08:fb:ff:35:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B5:53:8E:82:11:F1:8E:04:C1:F9:76:58:86:12:8E:30:B3:9F:96
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:79:ca:03:17:8f:a7:b2:77:5c:36:14:27:41:d0:64:79:67:
cc:d5:21:e2:25:5c:5a:a5:70:7c:24:74:c4:83:36:2d:fe:fe:
84:01:5a:e9:32:cc:84:c8:17:5e:b4:96:9b:20:69:91:fa:de:
9f:be:cb:96:2d:a7:1d:94:b7:fd:cb:d7:cd:14:75:e6:a4:c0:
4f:87:7e:46:91:68:06:b1:af:4d:63:0b:d7:4c:d4:76:78:2d:
52:66:e5:97:a9:08:bc:ec:41:9d:e7:9b:87:64:00:af:2e:cc:
0f:74:03:02:10:d8:ad:8f:2a:bb:e7:e3:d7:1b:dc:cb:86:5c:
5a:f5:c7:02:ff:dc:f4:bf:3d:a9:6a:90:82:13:f7:5a:62:89:
29:ff:c3:f4:60:98:18:b5:03:87:af:4d:22:03:0f:87:4e:2c:
36:25:c0:36:12:fa:86:fb:0c:91:b0:3a:6e:b8:73:77:ce:3c:
64:f3:f8:01:2d:73:a2:a5:4d:fc:7d:d9:f2:1d:00:1e:1f:68:
64:a8:8e:59:58:fe:37:bb:56:3d:cd:d5:0b:71:c0:2d:e2:3d:
36:f7:70:1c:dc:5f:be:58:67:ce:b9:27:fd:5b:95:86:86:bd:
02:10:11:6b:62:c9:68:e1:40:33:b7:a7:75:b4:12:43:b1:f1:
ef:9f:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:45:20 2025 by rpki-client