Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: I/Yk45/kqFT11nfavwk6hAgo1kh2BbIAN0N7k1veQz0=
Subject key identifier: B6:6C:7F:1B:D7:66:CC:23:D6:02:20:3D:D9:14:F7:A9:B9:C3:6B:E6
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 0195E0EB4C1EDDC7DF58826C720742052BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 109F
Signing time: Sat 29 Mar 2025 08:01:11 +0000
Manifest this update: Sat 29 Mar 2025 08:01:11 +0000
Manifest next update: Sun 30 Mar 2025 08:01:11 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: fresy1oTMqt5/lvPAp6A0tECOIBANyEbwolMwk/xi6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:4c:1e:dd:c7:df:58:82:6c:72:07:42:05:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Mar 29 08:01:11 2025 GMT
Not After : Mar 30 08:01:11 2025 GMT
Subject: CN=b66c7f1bd766cc23d602203dd914f7a9b9c36be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d6:d7:d8:0c:55:46:1c:47:e6:cb:ab:dd:5f:
8f:a5:1f:cb:24:1c:7f:ee:af:75:dd:68:1c:98:32:
d1:52:47:04:b0:91:aa:6d:60:96:ef:ec:75:18:ae:
26:f2:33:dd:73:a3:78:69:cd:dd:60:e0:82:77:6d:
f9:31:d8:87:29:8b:5f:f0:ea:6c:e3:1f:6b:af:08:
de:b6:8c:45:25:87:f9:8d:43:23:36:4b:19:44:9d:
0a:00:06:ae:ec:76:b8:2d:d1:04:02:c6:c2:5a:ac:
87:49:18:48:af:1a:23:d3:e4:90:c8:a2:e4:d1:98:
6b:fb:c5:3a:96:84:83:c3:03:18:1b:ab:81:8e:f2:
21:13:81:0c:1a:37:60:25:19:fe:34:c8:d4:0c:19:
bc:92:4d:8a:34:c9:be:05:a2:7b:ed:38:77:e8:05:
8c:14:4e:f8:22:5f:52:b7:bd:c2:97:09:79:0b:54:
7e:9c:2c:10:bf:0e:30:bf:90:2e:22:3a:3c:8b:cd:
27:e4:8a:6a:a6:61:50:64:63:fa:51:3c:7e:d0:75:
8a:52:02:b9:f6:d0:9b:41:41:22:42:b9:0a:ca:40:
03:2d:3b:1d:c1:1d:47:62:ef:7e:45:b9:90:36:d8:
9b:63:7d:43:8f:e7:20:f2:76:48:cd:82:2e:2f:74:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:7F:1B:D7:66:CC:23:D6:02:20:3D:D9:14:F7:A9:B9:C3:6B:E6
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:47:6f:99:2d:1c:e3:91:3b:fe:d5:d5:63:4a:be:42:70:93:
e1:da:11:a5:5b:9e:94:f6:2a:52:f9:1a:d9:eb:d0:b5:78:16:
e9:9c:ad:c0:53:cd:8f:55:34:74:a8:0c:17:f6:a7:83:8d:9d:
8f:c9:c7:23:61:68:0d:28:7c:e2:64:be:23:2f:b8:54:ff:56:
85:fc:44:28:91:65:b2:dd:f2:12:54:ce:5a:c6:d1:7f:13:16:
68:30:fd:02:c9:1e:97:d7:27:c2:85:ce:57:28:4e:2e:dc:65:
f5:4e:17:df:a2:07:98:77:ae:03:b5:21:84:b8:be:7a:b1:db:
a4:50:11:ea:0a:fb:95:db:92:a6:ec:5e:f5:58:94:1b:7d:fd:
89:0c:99:98:cc:7b:72:24:d3:b7:e1:e6:8d:e5:38:82:7a:63:
5c:be:65:55:a7:6a:b9:c0:42:0b:b2:43:c2:10:c4:3d:1b:b3:
7e:47:9c:39:5f:81:75:62:a7:61:42:0e:71:fb:6a:4d:79:b8:
23:d3:25:fe:64:be:ab:52:07:70:7e:a8:e3:54:9f:0f:a3:4b:
23:49:07:11:58:26:5e:2c:7d:f7:46:71:13:66:f5:08:9a:0a:
2c:90:1d:25:89:23:58:dd:a0:a3:c6:67:0f:40:4a:22:1c:f8:
93:5d:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:42 2025 by rpki-client