Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: 4MzInZCRHw6BV/mkMvuj8PwS+3RuTdtsTwazS3iMCDU=
Subject key identifier: 9B:82:E1:6B:D2:38:A1:70:DE:B7:C4:20:29:37:8F:72:52:2B:CC:79
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 0195E0EB7D10FCF9934328DF53CA7F38BB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 10AE
Signing time: Sat 29 Mar 2025 08:01:24 +0000
Manifest this update: Sat 29 Mar 2025 08:01:24 +0000
Manifest next update: Sun 30 Mar 2025 08:01:24 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 1vujEPhbcCC1ngy4QicKPHFyPFZl6SKdckUkWHfY5xw=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:7d:10:fc:f9:93:43:28:df:53:ca:7f:38:bb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Mar 29 08:01:24 2025 GMT
Not After : Mar 30 08:01:24 2025 GMT
Subject: CN=9b82e16bd238a170deb7c42029378f72522bcc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:7e:f9:13:05:44:bc:74:c3:43:34:6a:49:
96:63:8d:7b:66:ea:7c:86:8f:8e:ca:9b:f5:4d:eb:
53:dc:b8:21:97:72:35:4d:92:6e:f4:21:0a:ce:93:
ef:ac:6a:31:a1:76:83:87:34:9f:d0:38:30:8e:04:
39:b8:b1:d7:0b:08:99:44:bd:74:3f:70:68:ba:6f:
6f:98:f6:0a:99:d7:f4:1c:6c:14:34:a4:b0:b2:32:
1a:c8:cb:fa:16:eb:12:cf:44:61:1d:e0:d6:ad:a7:
94:dd:03:f3:22:b4:5c:27:e6:25:2f:2b:92:8e:d6:
62:f7:73:b0:e8:a2:9d:dc:75:93:ba:60:7b:83:e6:
7d:96:b8:ad:76:77:ef:c4:9e:13:7b:0d:69:c6:33:
6c:b2:93:d2:fe:49:74:3b:06:ea:6d:4e:ee:c2:af:
4d:3a:75:8e:73:f3:26:f4:e7:75:b2:d7:67:97:e3:
15:0f:8d:28:67:a1:bd:83:44:09:8c:4b:da:02:94:
c1:0b:f1:07:2b:8f:04:b6:f9:00:37:c9:9f:31:93:
a8:27:70:e1:0c:25:2b:fe:81:3e:c7:76:43:c5:d1:
b2:0d:a0:e8:ee:f6:45:ed:7f:7e:61:bc:3d:17:d0:
2c:ba:07:51:bb:6b:40:7f:a3:da:dd:e2:9a:7a:7b:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:E1:6B:D2:38:A1:70:DE:B7:C4:20:29:37:8F:72:52:2B:CC:79
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:05:37:9e:5c:11:22:aa:db:c5:24:08:17:26:6b:8f:cd:e7:
f9:99:86:e1:62:9d:a3:9f:5e:d5:0f:4e:05:6f:d5:22:75:07:
a6:e2:24:0e:18:07:74:10:49:e0:82:55:ef:6c:c3:5a:cf:02:
23:7c:7d:b2:21:17:9d:f6:49:44:1d:93:60:ef:24:1b:df:e0:
9c:b7:33:12:e7:ec:bd:eb:46:85:77:b2:5b:73:01:ea:0a:76:
ab:8e:62:55:05:3e:25:a1:83:43:fe:7e:5f:a2:d3:c6:d2:9b:
c4:98:a3:f2:f9:5f:23:5c:e5:86:0f:04:7c:a4:a5:f4:9b:5f:
55:5b:54:fe:c2:8d:83:25:0a:03:f4:5d:d5:f5:99:65:f7:1a:
4b:de:1c:d2:a5:7e:25:00:d8:b5:7f:65:21:fd:57:b4:b3:96:
89:52:6a:ba:2a:8c:a4:f6:84:0d:f9:9d:59:63:bd:c8:e9:a5:
b4:6d:5e:9f:a7:dd:92:9e:21:6e:19:06:c8:5f:55:e2:90:f3:
04:36:54:50:bb:05:d5:c3:64:83:bf:e6:ba:20:5f:49:f7:ff:
27:63:9a:90:40:b1:14:95:a7:7f:af:a0:c0:27:b6:96:a2:da:
8b:ce:ab:65:40:9a:77:95:50:f3:b7:2f:d4:61:70:3b:6a:6d:
c7:ec:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:35:07 2025 by rpki-client