Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
File: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft (raw, json)
Hash identifier: SxmqzrUqojG+lVaHfRShmoY5VxZy9cXVC4hSAcKrfac=
Subject key identifier: 61:DA:4C:56:8F:5B:D3:DA:16:E8:CC:F5:54:0A:1C:11:D6:FF:29:D5
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Certificate issuer: /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial: 0195E159A14DAA3C50DC2C0778BAEE38A960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
Manifest number: 1006
Signing time: Sat 29 Mar 2025 10:01:42 +0000
Manifest this update: Sat 29 Mar 2025 10:01:42 +0000
Manifest next update: Sun 30 Mar 2025 10:01:42 +0000
Files and hashes: 1: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl (hash: AGiEDtEQMJY2NF68HK1KKMxVIueJTok5OeDtMktKRRM=)
2: DYtZ-mqw6oNlIGZ4UJkyBpBrIuQ.roa (hash: hy9DSVfaehQXQmBRqqc5gZr2CYEFnu9h17oPiFVHPic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:a1:4d:aa:3c:50:dc:2c:07:78:ba:ee:38:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Validity
Not Before: Mar 29 10:01:42 2025 GMT
Not After : Mar 30 10:01:42 2025 GMT
Subject: CN=61da4c568f5bd3da16e8ccf5540a1c11d6ff29d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:e1:e4:24:70:6c:60:02:1b:fd:12:e6:7d:
b5:2a:44:4a:03:95:6e:eb:1d:81:61:a1:6f:22:62:
0c:d8:09:79:9a:e4:38:1a:ec:0b:ef:88:f3:e7:00:
c3:86:36:c8:eb:a5:0e:0b:ca:74:d3:81:2b:15:bd:
be:ae:c8:58:ba:35:04:1d:7f:35:1a:fc:a9:77:74:
a1:c4:46:a8:50:54:38:f8:3f:4e:01:c5:89:f9:6e:
1e:b3:d3:d0:4f:ce:01:35:1e:ec:61:33:fe:84:d4:
6d:26:02:86:eb:f8:d0:68:e3:d4:72:d6:40:98:8e:
30:43:e1:d0:bb:36:82:fa:08:47:ce:4d:9d:98:87:
92:42:d2:e2:4c:50:77:ff:74:79:a5:dd:57:74:36:
4c:29:cf:41:7a:92:6c:70:c1:09:20:07:bb:ce:65:
d6:f7:1d:1a:75:5d:a4:97:1f:90:cf:90:48:fa:d8:
18:ea:31:6f:b1:b5:49:a0:50:10:1b:0b:21:48:0e:
94:62:22:c5:fa:91:c3:09:6b:ff:98:3d:55:90:df:
fa:e2:6d:da:b3:f7:e4:0f:c6:1b:b2:ea:d7:4b:97:
2c:2e:46:6d:64:1c:a4:1a:fc:4d:7a:d7:3e:0f:27:
a8:6c:f7:fb:f6:37:90:6b:86:51:42:e6:1d:8b:82:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:4C:56:8F:5B:D3:DA:16:E8:CC:F5:54:0A:1C:11:D6:FF:29:D5
X509v3 Authority Key Identifier:
keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:73:6a:e4:f3:8b:e6:a2:d9:8f:90:34:a3:a4:f2:58:d5:34:
e7:77:14:11:85:66:25:30:91:39:56:93:6d:e8:8f:d9:0f:db:
19:94:00:39:e5:97:24:c0:8a:e0:48:ab:f0:91:f1:89:90:a1:
f9:04:33:3d:29:7b:0f:33:9d:70:b4:d6:15:ea:b2:80:46:77:
ae:c3:2e:7f:e0:a4:4f:79:ed:b8:f1:f5:24:8d:38:60:3f:09:
8b:61:3f:ca:97:5d:7d:33:49:45:d0:e6:d9:60:05:a1:b9:05:
2f:16:dd:26:a2:32:6e:45:8f:bb:e4:fe:76:78:d4:44:ae:52:
6e:ae:a9:80:f5:45:d5:1c:61:81:f3:bc:96:64:3e:eb:b7:09:
11:5a:5a:24:24:16:32:71:e3:03:e1:35:ce:76:d7:ad:9b:66:
63:4e:b3:cd:30:08:a9:65:fa:2d:ce:c3:52:42:d7:a6:cb:81:
29:f8:72:e0:ae:45:e5:e5:86:f1:72:7a:28:c3:d5:e7:b5:aa:
d9:6e:f9:4c:b9:51:2b:65:78:d3:36:75:c7:e3:33:3e:9d:ef:
d1:17:27:5f:bb:fd:8e:f2:06:8f:de:f3:96:ff:78:b8:dc:67:
fa:a9:98:31:26:6b:59:c4:f2:e0:fa:a1:aa:3d:fe:94:ff:ec:
0e:46:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:26:04 2025 by rpki-client