
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: a4da7XwpURcr5BeNhuzgdzo/b2VMBcHle+63wzT23N4=
Subject key identifier: 58:30:1B:40:D7:F4:AF:D0:06:D0:07:3E:DC:E3:C8:68:8D:0C:6F:D2
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 0195DFD8F01D02F7A6ECF4A069C3C4C335E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0A45
Signing time: Sat 29 Mar 2025 03:01:31 +0000
Manifest this update: Sat 29 Mar 2025 03:01:31 +0000
Manifest next update: Sun 30 Mar 2025 03:01:31 +0000
Files and hashes: 1: 1-jitS6EpXiqLjoTy0y90wIH72rI.roa (hash: Rfg5nTBCaEYBRoN4EImwETKxmFJYdYpWUORSCCGtVf4=)
2: CoX1lhKeqnywoZzkBVdeBK0K-8E.roa (hash: UeFCTUO9sjJL5Z6FG4W0m09+58Inz20WQtlj2knxqFc=)
3: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: HkDOURNjDOBO9sxWrZz/iK25JHwx/314/pdpZtUSNc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:f0:1d:02:f7:a6:ec:f4:a0:69:c3:c4:c3:35:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Mar 29 03:01:31 2025 GMT
Not After : Mar 30 03:01:31 2025 GMT
Subject: CN=58301b40d7f4afd006d0073edce3c8688d0c6fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:f3:0d:6e:58:5f:b8:72:f8:f2:8c:28:39:
a7:b7:36:b7:25:60:2c:83:58:61:5a:96:b7:65:b7:
f9:ae:4a:b7:8e:3b:86:fe:91:4b:ac:c2:84:64:40:
18:ed:f0:b2:78:72:cb:a4:6b:9f:da:25:e7:89:08:
6c:1e:c4:e5:a6:98:3b:da:e4:15:25:9b:da:35:e2:
ea:c3:7c:21:3e:d6:04:76:a6:3e:62:7e:b9:9e:e3:
80:1b:06:6c:36:f5:16:84:a6:6d:17:de:a4:82:0c:
05:a5:97:f0:f6:be:a2:cb:cb:c4:ce:4a:ec:91:62:
72:d5:ac:c8:0b:e3:d7:f6:f5:a7:35:f7:9b:7d:85:
f4:48:11:a9:af:03:08:c6:5e:57:ca:b2:19:c0:cd:
ec:5b:55:c6:7d:3e:1f:51:d1:4e:21:d7:8b:17:11:
ce:51:bc:4c:28:24:ef:ea:72:74:e9:04:fe:15:eb:
50:bc:1b:97:45:ee:4e:09:90:ea:70:47:b4:0a:c8:
52:08:22:83:d5:5e:71:55:dd:83:18:6a:34:5f:74:
89:42:46:5c:b7:bf:c6:fd:95:11:a1:b4:0e:3e:2b:
0a:51:0a:09:f6:a5:b9:36:c2:c8:bd:2e:1c:34:5e:
4b:17:2b:75:a9:e9:4e:1d:9d:64:0e:36:64:ee:67:
fc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:1B:40:D7:F4:AF:D0:06:D0:07:3E:DC:E3:C8:68:8D:0C:6F:D2
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ea:82:4e:e2:50:6d:8c:26:f2:48:fb:33:84:01:22:04:b4:
71:46:90:4d:c9:fd:65:81:2d:ac:69:99:03:dd:50:62:1d:0d:
84:20:f5:e3:bf:b8:58:00:f2:7c:57:96:ad:7b:18:b7:01:fd:
24:10:75:20:93:9f:6d:05:1e:7e:d6:fd:cd:56:d2:c3:21:55:
3f:61:b5:85:1d:fd:0c:16:13:60:01:15:c6:a6:2c:3f:b3:4b:
55:71:ff:08:23:e6:4c:9b:04:8d:53:37:91:ec:88:fd:41:e9:
46:9c:7a:d2:ff:6a:9f:cf:c7:62:de:e0:8b:0a:47:d2:d5:63:
14:54:a7:99:e5:13:76:bf:17:0d:e5:54:6f:a8:cd:55:08:ca:
f7:e2:57:24:7a:1a:9a:f0:30:f3:72:2d:ea:c9:39:ac:04:66:
8d:2b:cf:51:d4:5c:68:d9:6f:96:fb:d3:aa:5d:be:2f:f8:5e:
f5:f8:25:7c:01:5a:39:0a:7e:32:3e:e0:fa:f3:1c:c3:65:73:
b7:d0:52:25:7d:ef:c7:d5:7f:fb:91:13:31:76:ac:e5:f0:f4:
e2:ac:4e:23:84:09:17:5d:f5:2f:76:bd:79:9b:0e:bd:f4:83:
7c:34:2e:f5:97:5a:2a:12:82:c6:ac:d2:82:2d:c3:c3:69:76:
8e:0a:3b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:45 2025 by rpki-client