Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: LEI5BEn0lbBAPSxETiFIxbp56lDmFyZBVSXEErot63Y=
Subject key identifier: 29:86:20:9B:48:63:4D:4F:B8:41:AC:4A:88:B8:66:2F:69:2C:6B:71
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 0195DFD98DC5287BF2EDFD6EF7DA982D07EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 0368
Signing time: Sat 29 Mar 2025 03:02:11 +0000
Manifest this update: Sat 29 Mar 2025 03:02:11 +0000
Manifest next update: Sun 30 Mar 2025 03:02:11 +0000
Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: lZfCko/su/DBuSmQGukoYlLO7lfDNp4Y2B/G3oMYTIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:8d:c5:28:7b:f2:ed:fd:6e:f7:da:98:2d:07:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Mar 29 03:02:11 2025 GMT
Not After : Mar 30 03:02:11 2025 GMT
Subject: CN=2986209b48634d4fb841ac4a88b8662f692c6b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:eb:12:ed:1f:bd:53:53:8f:db:e4:21:29:da:
a0:b4:72:c0:2f:c5:a1:57:36:19:72:5b:d5:dc:b1:
71:ec:42:43:46:6e:10:ec:39:5d:2c:f5:f2:da:93:
90:85:9f:f6:1d:cd:6d:7c:4b:b9:35:5e:98:2d:4b:
d5:99:cf:f4:4d:52:4d:cc:d0:0c:d3:f5:7c:7f:4c:
fe:e6:90:20:09:8c:a5:fa:98:01:70:cd:10:1b:f9:
6f:e9:29:07:f8:a7:17:59:58:b9:53:62:ba:1e:c6:
17:1e:e7:94:79:7e:90:cb:96:35:95:52:82:8b:ef:
db:84:00:8e:20:1d:58:5f:2a:d2:c6:bb:62:2c:de:
81:77:a7:5a:fa:e9:b7:5e:4b:15:ac:aa:14:42:ee:
cf:3f:a6:6b:97:ef:e0:94:99:c6:74:29:02:4d:b0:
0d:53:ab:31:6e:43:f4:61:f3:80:4b:1e:77:45:4f:
bb:27:a7:44:ee:0b:65:26:d1:c3:9b:47:ed:fb:27:
8c:55:2e:79:51:76:9a:f7:6b:a9:80:fd:af:b8:9d:
0c:9b:ac:f5:72:2a:66:24:fe:75:28:a8:17:82:de:
d2:28:34:59:1a:e1:d7:4f:32:49:14:ab:ae:fe:28:
f4:ea:c3:6f:26:61:40:96:78:25:12:e9:1c:28:e5:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:86:20:9B:48:63:4D:4F:B8:41:AC:4A:88:B8:66:2F:69:2C:6B:71
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:79:51:71:be:c8:d8:e6:2c:93:6c:d4:08:66:69:59:1c:d9:
16:7c:9e:7a:9d:b5:72:44:a9:21:e7:a9:0e:43:d7:a7:c9:b4:
af:90:8e:21:d8:d0:9a:88:c9:16:2d:6c:97:e9:5c:71:ae:fe:
35:87:b5:a8:e0:01:35:5b:7e:e4:78:5d:75:60:32:c2:6e:7e:
24:81:ab:e5:82:77:bb:09:35:e8:56:86:e9:12:6c:a9:4d:3a:
7a:f1:c9:8a:a9:f6:2c:4b:10:ed:56:db:28:fa:e4:32:de:1a:
74:f4:f1:84:43:9e:12:ec:87:7b:a2:b2:2b:7c:4c:ff:87:eb:
f4:f8:bf:34:9f:6e:b8:c1:12:b3:95:32:d6:56:20:37:ae:a4:
41:38:93:25:6d:63:42:fc:45:40:70:e4:73:9c:b4:5b:5d:10:
44:00:f4:ca:0e:e7:f7:d9:f9:40:5e:57:c6:2c:6c:22:4c:d2:
7f:34:0b:d3:56:7e:42:0e:1f:b3:1d:7f:5a:ac:1f:31:bf:50:
e6:14:0d:9c:64:6c:7a:64:04:90:40:5d:5c:f1:fd:02:1c:4f:
af:2d:4c:ea:6a:cb:7f:17:16:54:3b:8c:15:90:8b:82:ca:0f:
50:28:98:4a:4a:a3:34:d0:db:65:61:6a:27:c8:94:8a:9c:ae:
91:7d:e4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:08 2025 by rpki-client