Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier: TLbDxMDYcEMkfKZA4xuBZTu8yJTrSjzNinHfCLoHONU=
Subject key identifier: 83:7F:16:4F:A4:80:48:CA:D8:82:05:27:45:5E:AA:40:49:56:B3:F1
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial: 0195E046303F0C789B645BAC52C47D51EC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 05:00:50 +0000
Manifest this update: Sat 29 Mar 2025 05:00:50 +0000
Manifest next update: Sun 30 Mar 2025 05:00:50 +0000
Files and hashes: 1: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: jEvIoOIU+vTW9unciz3KMdZCUT2tY94OFf03UkphDdc=)
2: Bc91mt-aFwpn9DwtZ394zqgnwAk.roa (hash: 4bDq/638WIm11nNJQQb6YF/e7JLWlty4w4akKWg+wAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:30:3f:0c:78:9b:64:5b:ac:52:c4:7d:51:ec:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Validity
Not Before: Mar 29 05:00:50 2025 GMT
Not After : Mar 30 05:00:50 2025 GMT
Subject: CN=837f164fa48048cad8820527455eaa404956b3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:20:db:ca:99:6f:70:30:e5:33:7d:c3:b0:
fd:01:ca:ca:be:70:cd:7f:a0:09:37:02:ad:d3:f2:
b0:e0:30:32:19:61:d1:98:60:c1:1d:ef:93:00:f2:
47:55:47:b3:ea:46:95:c7:92:c9:09:40:cf:fc:9f:
60:29:81:43:3a:4b:88:04:ea:2b:57:63:61:00:a3:
38:20:b5:38:a7:ca:12:5a:64:e5:15:1b:c5:c1:c4:
07:4a:fe:92:07:a1:a4:a8:4b:b3:67:6c:42:65:ab:
47:5b:16:46:7b:95:89:8b:da:8a:09:15:2f:4b:7a:
29:1d:c4:5c:15:25:7e:46:6c:ff:c6:23:8b:46:4d:
fa:39:d4:be:92:ee:14:b8:76:d8:e7:e9:8f:ae:d0:
44:3e:55:41:03:58:e3:a8:7d:cd:c3:93:ef:f8:f5:
97:89:9a:bc:74:0a:61:4e:49:c9:1b:d5:51:ec:6e:
b5:ce:f6:6e:cd:fe:e5:9f:d2:a4:bd:53:a9:b5:23:
df:65:c6:b2:e5:5b:af:14:4c:90:60:74:b3:77:79:
f4:16:05:14:90:31:f5:3d:7e:df:02:aa:d9:8c:2e:
f7:e0:71:41:69:a4:94:7e:9b:f0:1f:f9:8a:fc:54:
68:64:4a:d8:b8:e2:f4:82:f3:a6:89:b6:8c:43:ec:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7F:16:4F:A4:80:48:CA:D8:82:05:27:45:5E:AA:40:49:56:B3:F1
X509v3 Authority Key Identifier:
keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:33:f1:39:6f:d5:a9:d9:da:5e:3a:93:0e:9c:15:65:73:79:
3e:29:f8:70:49:47:4b:59:1a:9e:a7:5f:0a:83:bf:da:cb:79:
67:bb:84:9f:45:b7:7e:94:96:5b:33:28:6f:4e:3c:61:ae:ce:
4b:94:0f:a3:1e:dc:40:c2:a4:a7:98:0d:28:af:3e:5b:be:9e:
c7:ab:bc:2a:e7:b6:1c:fc:9c:60:55:31:34:99:91:1f:72:a7:
62:d2:48:c0:fd:bb:dc:f0:5b:4c:4e:e4:93:99:e7:1f:c3:61:
49:b2:9d:1e:05:84:af:91:45:43:71:2b:6d:c5:8f:a1:82:ce:
78:18:ed:74:e2:70:45:88:0c:29:53:cb:28:73:1f:cc:d4:a0:
91:9d:24:d1:e6:80:ef:c8:a0:bb:59:40:e2:69:79:8b:38:dc:
78:e4:a1:71:37:06:f4:77:69:61:6c:46:46:2b:7c:34:d9:7b:
70:c9:a9:12:20:f1:54:72:75:c3:39:97:40:ff:00:e5:58:40:
86:b3:0b:34:5e:37:8b:72:6a:c2:d5:e2:a1:66:c7:90:dd:06:
4f:7d:a7:7a:d9:3a:d7:20:ae:8f:d0:2e:15:63:ea:f3:58:8e:
d0:7c:04:47:d7:a7:b0:a9:3f:2b:8b:93:ab:e8:f5:18:24:f7:
ea:bd:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:19:01 2025 by rpki-client