Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
File: 9rA2a7rqx7WITkJt-ACewnosYC4.mft (raw, json)
Hash identifier: kaxBcze6Gp7Dcnh54+b230ZYcsQvbAS+7YhDu3WPLXY=
Subject key identifier: CE:F8:41:5F:E0:3D:5E:81:29:E3:89:C9:96:E9:42:19:EB:4F:59:7F
Authority key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Certificate issuer: /CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Certificate serial: 01970BD310B86C769B3EFF638B5E11A65F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
Manifest number: 0452
Signing time: Mon 26 May 2025 09:01:11 +0000
Manifest this update: Mon 26 May 2025 09:01:11 +0000
Manifest next update: Tue 27 May 2025 09:01:11 +0000
Files and hashes: 1: 9rA2a7rqx7WITkJt-ACewnosYC4.crl (hash: jgsvKSSnhqZ+uKNi5993gAaUT8kosCQL8clnx1AvZ30=)
2: izm1O4S-x2UDeNY6fo1YhqW7N8g.roa (hash: tl5IuNJmLiqZ3agDxn5CXFUtrHRHejemwivyEs6+MfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:d3:10:b8:6c:76:9b:3e:ff:63:8b:5e:11:a6:5f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Validity
Not Before: May 26 09:01:11 2025 GMT
Not After : May 27 09:01:11 2025 GMT
Subject: CN=cef8415fe03d5e8129e389c996e94219eb4f597f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:c6:a5:31:12:9d:62:d9:cf:75:5b:7d:3c:
1e:8f:20:a2:ff:e0:25:7f:72:9c:a2:73:a2:07:08:
70:b0:aa:b8:06:68:07:c3:23:d3:87:3a:fc:11:af:
d1:c0:04:22:59:7c:dc:ec:29:90:d7:b4:a2:3b:e7:
3d:68:05:de:32:aa:ee:91:3f:e5:46:9f:60:52:2d:
6e:00:45:80:d4:b9:8d:7b:41:85:47:a7:3b:d3:2b:
21:93:0f:c3:cf:13:50:8d:59:7c:27:25:99:77:1c:
72:44:d9:10:7f:e5:ef:02:d6:d8:32:75:9f:a7:24:
6a:9f:35:61:ca:74:c7:8d:9f:d0:1e:16:57:12:d6:
4c:08:5c:39:e9:ea:39:5f:19:db:8f:66:20:a1:af:
0f:7d:57:57:d0:30:75:c5:bb:2b:7a:63:e5:28:82:
68:e5:cf:02:e7:ab:fe:4b:e2:33:fb:bd:67:f2:0b:
f2:63:f0:b2:49:5d:9b:0e:94:5f:23:f3:b6:8e:68:
0a:81:35:5d:77:0e:2a:d6:c3:f8:56:ae:24:13:ee:
f2:d6:75:d2:3a:e8:df:25:6d:de:a6:73:64:51:70:
e0:c9:98:8b:92:b0:4b:61:d6:8a:b5:46:4c:8e:90:
f5:5b:e7:e7:f8:75:1f:ba:01:07:03:95:ae:4e:7e:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:41:5F:E0:3D:5E:81:29:E3:89:C9:96:E9:42:19:EB:4F:59:7F
X509v3 Authority Key Identifier:
keyid:F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:20:3e:68:87:35:db:7f:62:0f:5a:03:a4:fd:ec:59:4a:33:
1a:4c:b9:27:c5:02:ac:7b:62:fd:f1:d1:a7:39:f9:28:81:dc:
87:de:0c:dd:d6:62:3d:33:8a:37:7c:ac:ac:2a:31:6f:f9:70:
56:9f:c3:70:e6:04:51:ba:16:33:eb:f4:08:16:a8:41:99:bf:
54:46:ae:e5:e9:27:ba:fa:56:f5:21:52:15:ca:ac:c4:d9:52:
c4:53:1d:da:ea:9f:a2:2f:eb:7c:ec:e9:81:a2:02:d7:23:f9:
ee:63:c0:88:bb:57:26:ff:25:ea:71:d2:30:1c:7c:9c:5c:42:
8a:4d:35:83:af:f0:0c:d3:fd:90:94:22:bc:41:97:a9:59:ca:
c2:94:f6:da:23:1d:c3:ce:cf:44:e1:b2:96:db:1f:c5:22:33:
7f:a5:da:3e:7e:e4:75:32:35:c7:d1:2f:33:3e:f3:4b:88:08:
ac:63:92:d3:e4:8b:7c:8e:65:e5:e1:ed:e5:a3:b2:67:ed:70:
24:e7:8d:c5:39:c0:79:bf:a2:f5:f6:1c:4b:32:6c:db:40:36:
4b:c9:55:41:e4:3c:09:89:ad:d3:b5:c1:79:5b:b9:53:0a:ba:
67:fc:ca:03:8b:36:62:3f:8e:ae:74:13:77:53:14:b7:0f:8e:
59:fe:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:34 2025 by rpki-client