Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: UQ9TdGrpIwfOkegBuVGxJMuojOKNVWWeOGjy3EEpR3Q=
Subject key identifier: EE:7A:56:6F:4E:59:A6:D6:7F:F1:F6:BA:11:B4:90:3B:DD:AF:96:02
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 0195DFD908C14D033111CD533514376195E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0A24
Signing time: Sat 29 Mar 2025 03:01:37 +0000
Manifest this update: Sat 29 Mar 2025 03:01:37 +0000
Manifest next update: Sun 30 Mar 2025 03:01:37 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: oCAQeLTrm7i+69G7H7GL9gyB9kmIqSgtIDwinPBP2Vg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:08:c1:4d:03:31:11:cd:53:35:14:37:61:95:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Mar 29 03:01:37 2025 GMT
Not After : Mar 30 03:01:37 2025 GMT
Subject: CN=ee7a566f4e59a6d67ff1f6ba11b4903bddaf9602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:b0:80:52:5b:7d:5e:99:a0:47:90:fb:f3:
5c:23:b0:1e:2b:d6:51:9c:50:fb:bb:78:dc:63:fb:
d4:97:2c:15:e6:58:d4:45:09:f7:99:2a:e3:ef:5c:
ba:84:92:71:12:73:0e:f8:33:51:54:31:57:00:28:
9a:a7:75:fc:01:86:84:25:17:20:bb:12:46:07:f4:
e4:34:7d:2b:36:8f:34:53:66:ff:52:8c:58:d1:b3:
d6:8f:b9:e1:8a:fc:b3:88:29:a8:51:60:ee:a7:42:
2a:a0:b0:30:e3:c4:0a:f8:ff:0c:5c:9f:fd:10:38:
8e:d7:34:58:23:1c:ad:59:f8:2f:b2:a1:ed:e5:ef:
29:30:bd:c5:67:12:06:f6:8d:f5:53:b2:c3:04:75:
e1:48:3c:27:51:3a:7b:b6:f2:c5:ae:4d:08:13:d2:
79:41:52:15:76:4b:e0:53:3b:07:f7:d8:4d:22:6a:
52:13:f9:49:e5:25:c4:cc:0c:5b:57:9b:6d:73:5f:
40:ce:87:44:39:ce:d4:78:27:41:75:eb:11:88:16:
84:a8:5a:7c:f8:63:f0:31:8d:0c:6e:5b:c1:1f:a4:
fa:3d:74:5a:63:73:d1:52:2b:6f:c0:89:b0:82:fb:
73:b4:28:37:e5:56:5e:72:c6:a6:0e:d5:13:d6:63:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:56:6F:4E:59:A6:D6:7F:F1:F6:BA:11:B4:90:3B:DD:AF:96:02
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:70:87:42:15:e3:0b:d2:27:56:86:34:7d:6a:84:4a:36:b8:
f1:10:f2:bb:c2:16:4c:3d:a9:04:24:07:86:82:95:c9:2c:a8:
50:c6:95:00:dc:2a:d9:12:32:55:ee:2e:31:43:81:41:20:f6:
dc:bc:02:52:ab:fe:68:5e:34:e2:8a:1a:7d:da:6f:d8:93:c4:
d8:ce:7c:b3:06:cd:bf:76:f1:1a:70:02:7a:83:f2:a0:49:ed:
12:2a:d6:4a:16:6a:4f:93:42:81:8b:31:0b:26:72:f7:04:2f:
15:68:42:25:4b:49:0b:d1:e0:50:e5:50:ab:b7:0f:47:64:13:
fb:e5:7d:1e:fd:41:ff:b9:eb:98:37:fc:28:72:69:9b:63:73:
18:cb:75:68:83:7c:d5:d6:f6:1c:81:22:16:9b:ee:4f:61:fe:
49:36:04:2c:cc:a1:6b:1f:8c:af:a9:e0:62:de:c2:ed:19:ef:
aa:cd:09:9e:50:48:32:26:55:10:b3:2a:1b:ab:f2:0f:b2:85:
6f:f7:7f:f8:a9:de:06:b1:8c:27:56:32:fa:a9:ec:17:36:05:
44:fb:d3:d3:77:c5:38:a0:76:3e:93:8e:51:a8:c9:36:74:f2:
38:2b:26:6b:31:08:64:d4:23:50:55:25:5f:4f:b4:bd:fe:bd:
cb:49:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:25:05 2025 by rpki-client