Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: PVZ9UqUvq59/Peg+FgPbrS1DQCcssR0S5PuinOudRcc=
Subject key identifier: 15:FA:43:1A:21:C7:ED:46:70:29:97:3C:84:67:57:64:8F:04:68:70
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 0195E00F8538633A7B070CDE767D34387307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 04:01:08 +0000
Manifest this update: Sat 29 Mar 2025 04:01:08 +0000
Manifest next update: Sun 30 Mar 2025 04:01:08 +0000
Files and hashes: 1: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (hash: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: urVDqMRvaGYcp5jeIjvmzQhuSfmqZTx0j9QnFbLcRMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:85:38:63:3a:7b:07:0c:de:76:7d:34:38:73:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Mar 29 04:01:08 2025 GMT
Not After : Mar 30 04:01:08 2025 GMT
Subject: CN=15fa431a21c7ed467029973c846757648f046870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:b4:64:6e:ca:a0:44:0c:e1:3b:69:0b:4d:
d7:4e:56:ec:ee:1d:4a:da:a7:30:f1:17:2d:97:3f:
cf:a4:11:03:bc:39:48:e8:19:65:3b:ff:8c:5e:d2:
fb:fb:59:53:47:95:d5:c1:dd:92:32:5a:31:7c:7c:
54:2f:27:08:d1:e1:d0:5d:82:b5:a8:ad:20:d6:ae:
b5:3d:f7:0a:7c:81:08:c3:2e:23:ce:ac:f5:b3:47:
6a:a5:04:02:57:f0:e9:f7:e7:fc:42:f0:91:7e:9d:
41:49:5a:f3:bf:15:23:22:e4:b3:da:57:3e:7a:1a:
8d:ca:4a:d7:4f:1b:76:74:ba:84:8b:2a:ae:9e:9a:
b8:b7:3e:9e:c4:37:83:e9:c9:32:d9:c9:39:14:2e:
81:00:8b:d3:13:03:98:ae:af:8a:2b:6b:26:40:93:
c2:c6:a6:9f:b6:1b:4c:a9:d1:89:08:06:93:8d:1b:
70:c4:1a:a9:7e:4f:8d:74:fc:8b:4a:ad:a1:62:c3:
6d:99:72:ad:a2:43:d9:56:9f:9a:4e:23:3a:24:6f:
58:52:5d:4d:34:33:8e:2a:29:04:c3:55:53:d2:be:
c0:a3:e2:c0:1a:91:7f:18:b3:53:39:67:e5:2d:3a:
d3:82:19:30:ad:6a:ba:7b:6e:60:e3:29:d4:ee:1d:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FA:43:1A:21:C7:ED:46:70:29:97:3C:84:67:57:64:8F:04:68:70
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a1:58:25:c3:93:07:b3:91:7a:2d:7c:42:39:a4:13:74:50:
ee:9d:93:a1:fb:e2:64:5e:60:be:41:88:41:d4:ca:34:74:b2:
1d:b7:90:5a:5d:86:1e:e4:d4:b9:80:05:0e:9c:54:e1:68:6b:
ed:af:b4:63:2b:18:ba:9b:1c:78:7c:93:4c:d9:3d:e3:17:4b:
37:41:ac:d4:d6:1c:22:6e:93:35:0c:f7:b8:a5:2a:11:f0:f4:
ce:b4:0d:ea:73:2f:fc:23:44:35:15:e7:a1:5f:4c:39:1c:4a:
7b:ab:af:bc:97:d9:ed:21:31:81:d8:c0:11:e1:bb:88:45:87:
d1:b2:6e:15:5e:85:58:4d:ea:05:ba:2d:6c:91:02:33:c3:12:
8c:3d:9d:72:5f:e6:81:23:fb:d0:1f:3d:07:e5:9c:01:5d:bd:
53:88:e9:48:f1:bf:9a:b1:fe:e3:bb:1f:b1:12:62:66:40:a3:
45:dd:cd:24:bd:ce:ac:22:a0:ea:cc:b1:a1:39:68:84:2e:85:
81:18:c0:d6:7f:76:83:48:c1:fb:3c:81:1e:2e:a7:4e:68:4d:
43:72:a9:eb:19:fa:8a:08:95:12:fa:f6:9b:81:7f:91:74:b0:
33:25:87:e4:9f:46:1e:e1:3c:0a:cc:a0:93:79:c7:2a:67:e0:
5c:70:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:12 2025 by rpki-client