Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: +eUL+Rvl25GmH6rRmcB+SLPWBf09iPO6OpJoBcgFric=
Subject key identifier: EC:EE:DC:1D:9A:23:6E:60:67:D5:DF:19:0E:B3:34:CF:DE:80:3D:B7
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 0195E07D6524A369C71742C9560205307682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 06:01:09 +0000
Manifest this update: Sat 29 Mar 2025 06:01:09 +0000
Manifest next update: Sun 30 Mar 2025 06:01:09 +0000
Files and hashes: 1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: WRzBQhtlTvTu1l0+IfUvNQdwg6qOg6fXmseAceOMX2Y=)
3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:65:24:a3:69:c7:17:42:c9:56:02:05:30:76:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Mar 29 06:01:09 2025 GMT
Not After : Mar 30 06:01:09 2025 GMT
Subject: CN=eceedc1d9a236e6067d5df190eb334cfde803db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:1f:d2:39:50:36:98:81:7f:a7:b6:d5:42:
57:e5:a0:ad:30:eb:d2:ea:2c:95:b5:6a:48:d1:65:
c1:44:53:8b:ee:96:eb:80:d9:c2:a6:f9:6e:a4:f6:
2f:f5:b5:da:66:25:5a:a4:5f:c4:e3:bc:07:90:b6:
af:04:0e:a5:4b:f6:2c:50:ab:34:04:b9:e6:2e:36:
b8:8e:40:b1:b7:68:8b:b5:aa:d6:fb:bc:5c:e2:2f:
98:e9:66:4d:17:55:8e:a8:2b:ea:9f:f6:7d:7c:05:
ce:30:ef:db:3a:ff:c0:90:d3:c5:95:66:ac:40:36:
8a:dd:60:7d:f9:5b:d4:29:9a:04:5f:fa:1c:e1:7d:
6b:c8:e0:cf:3e:a8:85:09:a3:ce:78:ad:df:40:94:
01:72:f2:2f:ed:56:d5:2f:cc:90:b5:f8:3c:55:9d:
33:4d:0f:e8:07:db:a0:98:4a:94:19:92:3c:ab:a2:
f3:15:3e:c0:07:de:10:42:f7:2d:b2:35:ae:93:ed:
02:c8:74:0c:8f:05:e9:69:8d:63:e4:8b:66:d2:37:
e7:6a:d8:1f:3d:44:41:fb:a2:e7:29:7f:b0:66:92:
d5:ed:9f:56:37:a8:a8:2e:fe:64:7f:af:7e:e8:1d:
f2:97:36:95:c9:a3:39:be:5f:54:3d:4c:99:42:8a:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EE:DC:1D:9A:23:6E:60:67:D5:DF:19:0E:B3:34:CF:DE:80:3D:B7
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cc:2c:36:28:ef:25:16:bb:6a:c6:a3:81:04:86:ab:d3:4d:
ad:54:f7:94:94:80:02:f4:28:5b:0c:33:0c:32:f8:ef:53:f8:
82:78:c8:7f:99:d4:08:7f:e1:73:27:9d:72:2a:54:ef:9c:7b:
06:91:18:34:a1:cd:a6:18:9a:a6:2c:10:bd:65:de:f4:6b:be:
cf:f8:65:39:eb:b5:4f:c4:be:41:79:fc:90:e8:14:d1:04:cb:
fd:af:3e:57:31:b9:41:49:6a:60:3e:29:33:38:ef:e3:0d:45:
7c:d9:9e:9e:a1:17:0d:ad:ee:ad:91:14:8d:c4:b0:47:1e:06:
87:3f:ca:0c:af:12:90:94:38:27:2b:1e:5e:aa:22:de:ce:12:
e9:45:ea:20:0f:0d:0e:fa:00:a0:a8:87:6e:38:22:ab:0f:ed:
64:6a:e7:2b:70:49:59:c0:1c:c1:76:87:ee:88:5b:3e:6a:42:
4d:25:c2:2f:7b:c2:83:3b:2b:aa:bb:69:6e:88:82:54:86:47:
4b:2c:2b:06:ba:01:5f:8c:dd:b4:e8:99:d9:83:87:ed:63:7f:
de:11:db:25:9b:37:39:5c:5a:88:f7:72:12:35:5e:ef:e7:ab:
94:ac:c2:ff:52:f7:a4:da:61:1d:01:38:82:84:2e:3b:7c:50:
25:23:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:14:02 2025 by rpki-client