Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File: m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier: CALIeWxaEVrJUU+1RmttO8zR0HfmVajmt6mqUJrpAu8=
Subject key identifier: DA:E0:A9:A8:62:0A:F5:D2:8F:3C:E8:27:16:5C:DB:44:2F:79:94:E3
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial: 0195E0EB4D7D95965618418ED0BAD6DBCF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number: 10A3
Signing time: Sat 29 Mar 2025 08:01:11 +0000
Manifest this update: Sat 29 Mar 2025 08:01:11 +0000
Manifest next update: Sun 30 Mar 2025 08:01:11 +0000
Files and hashes: 1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: VkovzF6vdPV6m5gWESJvch0Wd9jwnaCqFZGV6nyZix8=)
2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:4d:7d:95:96:56:18:41:8e:d0:ba:d6:db:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Validity
Not Before: Mar 29 08:01:11 2025 GMT
Not After : Mar 30 08:01:11 2025 GMT
Subject: CN=dae0a9a8620af5d28f3ce827165cdb442f7994e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:83:0f:59:05:23:38:1f:55:d5:31:4d:a1:
23:a1:11:da:2f:e5:89:46:69:5c:f4:39:ca:60:bd:
b1:2c:8a:74:23:23:0f:17:10:bb:e1:75:2d:7d:00:
78:58:7b:b9:65:e5:d5:21:88:5f:bd:70:ef:8b:b2:
49:7b:7e:72:ce:30:f5:1a:56:45:58:11:79:80:28:
ca:f6:28:19:53:20:4c:08:34:b6:14:5e:91:a0:33:
f6:04:e3:1c:f7:0f:a3:47:2c:db:42:80:f5:16:a2:
50:2e:5b:76:60:24:c4:91:e6:67:00:e5:ee:c7:fc:
47:d5:92:54:0d:a2:c2:97:c2:34:45:5d:88:65:6a:
7e:82:9d:4e:d7:12:eb:08:ab:22:29:d4:f4:a5:25:
58:fe:5b:69:f7:c9:37:7e:e7:67:fd:e4:de:60:8c:
47:4c:4b:45:32:88:93:14:a9:8e:97:8e:68:93:17:
be:14:b7:ff:09:b5:2b:b5:0b:33:4f:bb:97:dd:8d:
8c:e4:73:d0:bd:f3:4a:0f:a2:c7:f4:4f:50:99:fd:
de:2b:47:15:69:5e:03:91:bc:cf:12:15:f4:e8:82:
64:00:e1:8f:9e:be:b3:89:7f:18:68:d9:b6:bc:1e:
c3:8b:13:2f:79:02:30:8c:51:15:22:63:c7:cb:e6:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E0:A9:A8:62:0A:F5:D2:8F:3C:E8:27:16:5C:DB:44:2F:79:94:E3
X509v3 Authority Key Identifier:
keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:93:93:4b:39:44:75:f7:16:b5:bd:b9:ff:cd:90:c7:f3:15:
81:13:c7:fd:e5:39:5f:89:70:bd:09:43:93:a0:ee:f8:d2:a8:
cf:73:37:0d:95:ea:91:65:d9:65:05:b4:75:63:47:44:94:54:
ff:9b:ce:42:c7:18:19:4f:51:10:77:a0:ab:86:12:46:d5:7f:
27:dd:ca:ae:b5:e1:09:36:2a:3d:55:1e:33:93:59:eb:7f:17:
bd:2f:49:24:a8:73:fe:ec:1c:4b:02:b8:d6:b6:ae:dd:f3:bc:
84:b2:5c:9e:27:2e:51:df:b4:62:95:d9:47:1a:2d:ea:68:39:
2b:05:6c:0d:5f:61:17:a1:d7:79:da:ce:f1:33:a1:89:bc:06:
e3:aa:0c:5c:d7:de:ac:ea:9f:5c:5c:da:f7:ef:fd:18:e1:86:
ce:34:c1:fc:44:33:2b:67:45:6e:0f:01:14:1b:19:b2:e2:9d:
c9:f5:d7:66:d7:c9:46:18:c6:52:76:89:ba:9c:52:c4:43:7d:
9a:9f:64:5e:07:f6:ae:53:9b:ac:a1:94:af:81:1f:69:c0:ce:
65:d7:f9:b2:23:94:8e:c5:ca:14:b4:31:87:9f:fa:c5:86:8a:
c9:fb:57:fd:62:98:59:7a:6a:3b:46:c7:68:31:98:9d:70:99:
36:45:73:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:46:37 2025 by rpki-client