Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: 5ZCDXCP36lKtwRFZ41LQoh+nQw0fsyq2nKBDtpIYxKY=
Subject key identifier: 1D:C3:77:C4:C4:85:F9:AC:89:64:9D:22:3A:CE:C7:AD:2F:A6:74:A7
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0195E046FAE3B2182C9B0DBA35C2F44E48CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0A2E
Signing time: Sat 29 Mar 2025 05:01:42 +0000
Manifest this update: Sat 29 Mar 2025 05:01:42 +0000
Manifest next update: Sun 30 Mar 2025 05:01:42 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: uBa0NqSWxWm0v9cpfZ5vSTY9pfyH7/erohJvbftaaNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:fa:e3:b2:18:2c:9b:0d:ba:35:c2:f4:4e:48:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Mar 29 05:01:42 2025 GMT
Not After : Mar 30 05:01:42 2025 GMT
Subject: CN=1dc377c4c485f9ac89649d223acec7ad2fa674a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:c1:32:92:02:a2:cb:b2:73:eb:50:2b:70:
15:df:46:42:0d:2e:ff:47:4f:43:91:b8:18:b4:b6:
e4:bc:90:57:3d:18:ed:f5:28:81:10:39:9a:89:43:
e6:64:03:c2:68:e6:f5:ed:76:f2:31:d6:27:c7:92:
1a:4a:88:83:16:7e:18:26:8a:59:f7:45:6e:26:e1:
99:2c:33:b1:ad:0d:5b:ce:5c:1d:51:b4:90:e6:96:
7b:9a:24:66:dc:b5:e5:41:9f:1c:06:b1:8c:d1:ed:
f4:1c:35:fd:27:2f:4b:55:fa:fa:a4:67:68:91:65:
c0:36:2e:91:30:90:e5:79:25:0a:db:34:ff:47:06:
ca:c1:49:dc:ee:a7:3e:56:c8:75:63:5b:b4:4a:12:
75:c2:25:40:92:3d:2a:30:cd:e7:4d:52:e1:73:70:
26:2f:b3:b5:d2:3f:77:ac:d8:50:49:39:8f:d8:cc:
29:d2:da:3b:0d:3a:62:06:ea:f7:40:7f:db:26:c2:
2a:c8:be:e4:b8:0d:bf:50:7a:f3:80:03:dd:91:c7:
b8:00:63:ec:0f:13:ee:de:2d:6f:f8:6c:6c:b8:5b:
62:43:5c:00:6b:5e:09:c0:32:42:15:f4:c1:ac:fd:
46:fa:e6:1f:42:43:b5:a5:80:76:47:07:cc:cd:50:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:77:C4:C4:85:F9:AC:89:64:9D:22:3A:CE:C7:AD:2F:A6:74:A7
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:43:98:e2:82:0b:fd:d2:08:c3:14:78:cb:70:33:8a:29:
41:40:6e:7b:a3:b0:ea:c2:dd:12:78:be:32:d5:af:8a:22:66:
3f:eb:3d:01:68:ae:ce:82:ee:79:3b:7c:be:a5:a4:fa:05:83:
00:ef:bb:c9:97:7f:3f:68:b5:44:55:4c:d7:74:dd:73:dd:c7:
0a:b1:73:d8:62:cd:d7:94:99:07:ac:25:ab:d8:2f:27:7f:4c:
a7:3e:07:c2:63:05:1e:17:a5:2c:51:74:30:b4:33:bb:f9:d6:
77:ec:a2:9f:00:16:d5:e2:b9:4e:52:da:d7:ba:21:0b:1e:0c:
78:5d:04:b2:e6:87:84:6a:f0:5d:9c:e9:de:3a:95:ef:a9:a7:
5b:90:20:3e:2c:e4:d7:5a:5d:a9:73:d8:3f:e4:c6:c5:cf:f8:
5f:9c:b4:a4:a5:34:25:4e:6e:1f:b3:3f:b9:bd:fe:2f:65:04:
19:3d:ee:e4:bf:f0:c1:38:82:96:91:69:a4:40:35:4e:1c:75:
0d:5b:64:a6:be:b1:88:cb:12:88:99:95:15:1a:26:ab:bc:ff:
d1:e8:48:b7:89:08:d8:d9:bc:95:e3:8e:5f:f4:f1:00:e6:3b:
dc:e5:0b:25:f0:15:c0:48:10:12:9c:dc:f7:e7:70:89:e4:ba:
80:c9:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:24:03 2025 by rpki-client