Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
File: rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft (raw, json)
Hash identifier: F8R5Fpk8cYM0wPvzvC2oijMhywbJhUtH+zAXdTPAXME=
Subject key identifier: 05:2A:42:36:08:7C:4B:1D:BF:67:C7:9F:13:2D:47:34:3E:71:91:C1
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Certificate issuer: /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial: 0195E1222B540CE24D7BB3B325C997609E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
Manifest number: 0707
Signing time: Sat 29 Mar 2025 09:01:07 +0000
Manifest this update: Sat 29 Mar 2025 09:01:07 +0000
Manifest next update: Sun 30 Mar 2025 09:01:07 +0000
Files and hashes: 1: rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl (hash: R5Jn8Mo13NQq9Uns1xbF3jrWqH3T/IBstvmITz2ZmiM=)
2: tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa (hash: gDfDS8wP6pJ9Ytao7oOOdrquqvAnErNK/1uv1jTII9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:2b:54:0c:e2:4d:7b:b3:b3:25:c9:97:60:9e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Validity
Not Before: Mar 29 09:01:07 2025 GMT
Not After : Mar 30 09:01:07 2025 GMT
Subject: CN=052a4236087c4b1dbf67c79f132d47343e7191c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:f4:e3:32:a2:d2:ca:b4:a7:5e:c4:cd:38:
dd:54:a0:dc:fd:9e:37:23:69:a0:c8:bc:f8:7a:d3:
f8:54:0c:06:7c:5f:a4:5a:16:42:8d:65:ff:67:5f:
62:05:04:f5:c7:ec:6a:39:8b:82:be:2d:8b:25:2b:
f4:0f:d3:d8:59:2c:c7:57:b4:9c:69:bb:0b:8a:ce:
c8:2c:a4:a5:98:a4:3b:d2:0f:12:31:64:e1:81:48:
e2:94:58:72:39:3a:9f:67:b1:14:db:74:66:40:a6:
44:10:55:8e:7e:11:49:15:6e:21:bd:3a:d7:b5:bd:
5c:97:6c:b6:2f:77:65:c0:36:b9:22:31:58:31:dd:
f4:43:df:8e:fd:56:89:f5:34:57:79:e1:ef:64:5b:
10:e1:16:84:5e:61:89:ad:b6:ce:e5:d7:ad:3d:62:
a6:a1:a4:8e:3c:8c:e3:5f:62:7a:48:ca:5e:a8:f3:
2a:3c:c7:bb:41:cb:b9:ed:04:52:0f:0a:f8:c3:e9:
8e:6d:29:3e:b7:ac:d4:26:2b:69:e4:e1:3a:5a:23:
b6:ad:2c:eb:45:35:72:76:ec:62:20:50:47:4f:88:
01:fa:9b:9d:68:66:fb:52:41:53:8f:fa:9a:f9:4c:
ba:5f:10:67:c5:3f:a3:a9:c2:72:d9:eb:9f:2c:47:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2A:42:36:08:7C:4B:1D:BF:67:C7:9F:13:2D:47:34:3E:71:91:C1
X509v3 Authority Key Identifier:
keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:64:71:53:48:d4:8c:0f:04:41:ce:88:de:53:7e:81:be:4b:
84:b8:c3:e0:e3:bd:d6:b7:de:d2:67:5f:f3:72:d7:1f:d5:e4:
72:06:55:c8:af:9a:10:44:5b:1e:8e:03:bf:21:63:9c:65:04:
95:fc:07:2b:08:f4:bf:ce:e4:f4:42:56:8f:5e:08:04:e1:3b:
a4:04:62:b0:0f:f5:49:db:e4:61:26:13:4b:c1:32:71:e7:49:
00:a9:3e:3b:70:e5:45:9b:51:71:b9:6a:2c:8d:8d:4a:cb:8b:
90:90:08:a2:38:26:84:35:be:aa:08:bc:8b:f2:42:bd:de:ae:
a7:13:f0:4b:87:6c:02:2a:92:c6:8c:c0:dc:f5:95:2b:c1:e2:
f3:8e:e2:a7:32:f2:63:d2:9d:da:bf:88:a5:b1:d5:a6:01:ea:
8d:a6:aa:13:eb:4b:2a:6f:58:c1:16:0b:ab:f8:b4:3b:f1:92:
fc:40:74:7c:51:48:f7:9e:30:9a:94:54:db:27:32:59:8a:ec:
40:23:dd:c9:d4:4e:2c:e8:71:9b:86:8a:52:73:37:c3:c4:08:
fc:e5:05:9b:11:34:b1:bf:b0:ef:ed:53:39:96:61:c0:42:1a:
fc:14:99:29:f0:59:f4:69:b2:1f:fd:16:94:cb:ea:a0:ef:b5:
36:c1:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:38:04 2025 by rpki-client