Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: /BivL41EXINV7GYjYuYsYWm2HajG0rnTJb8A98i+93g=
Subject key identifier: 15:E1:24:88:AE:17:1C:67:23:39:14:3D:B5:77:5D:60:5D:70:98:D1
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 0195E159183A09E59E0397A8287B71552307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0710
Signing time: Sat 29 Mar 2025 10:01:07 +0000
Manifest this update: Sat 29 Mar 2025 10:01:07 +0000
Manifest next update: Sun 30 Mar 2025 10:01:07 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: NOAC6uxa7fiomf/YURQdXnSBlbiYfjQoO2q0tAZFuNI=)
2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=)
3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:18:3a:09:e5:9e:03:97:a8:28:7b:71:55:23:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Mar 29 10:01:07 2025 GMT
Not After : Mar 30 10:01:07 2025 GMT
Subject: CN=15e12488ae171c672339143db5775d605d7098d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0e:5d:fd:91:fb:9c:a9:cb:2b:3f:20:b4:22:
1d:80:28:9f:ae:bd:b5:06:8f:b6:a1:81:de:18:74:
09:1f:88:06:58:8b:d5:e2:38:cb:16:d7:91:82:04:
37:54:55:33:af:49:12:7d:c3:72:62:ae:ab:17:4e:
48:83:fd:6c:4a:05:e1:aa:05:78:42:77:13:eb:53:
92:ad:a7:92:bd:2e:41:4d:17:c7:e2:90:2c:81:d9:
39:10:6f:ac:0b:24:cb:1d:bc:cb:8a:9e:57:3b:43:
b0:8b:95:29:74:d4:f7:91:4b:27:d6:27:eb:39:38:
4c:72:ee:8c:dc:6e:c2:39:7c:26:c6:98:87:0f:aa:
6c:33:f6:33:88:8f:30:78:b8:5d:c7:4e:01:0d:44:
c3:38:7e:6a:8d:4b:20:dc:79:8d:ea:30:6a:5a:4c:
5a:f2:cf:9a:e1:57:b6:09:d9:1e:d6:ff:22:d5:c9:
41:c0:2f:41:f3:b5:a2:d1:fd:25:54:59:f8:f4:d6:
5c:0d:94:87:e8:4f:89:67:2d:82:90:ff:95:1c:3d:
2d:3b:a5:42:72:77:fa:ed:3e:74:e4:64:c1:09:d0:
3a:02:7c:2a:2d:ce:e2:28:50:d0:2a:56:37:39:fb:
3d:81:ed:bb:9c:b4:47:67:33:92:56:13:2f:29:60:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:24:88:AE:17:1C:67:23:39:14:3D:B5:77:5D:60:5D:70:98:D1
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9f:5c:17:1e:65:4f:bb:3f:b4:5e:16:3b:fc:13:e2:70:1c:
9d:69:64:d3:26:09:99:b9:4d:b9:ec:f5:4b:87:6f:20:58:e2:
83:55:d7:8e:01:8a:8c:3b:22:82:4b:83:27:3e:c3:5a:98:7d:
7e:bd:58:0f:00:2d:35:a5:2a:68:34:01:d9:d8:a2:c1:46:2b:
4d:54:49:60:56:5c:22:cd:92:11:a8:9c:b9:07:2a:1b:26:54:
80:1f:c1:f0:1b:9e:9c:82:66:25:5a:35:ea:a2:68:2c:13:51:
91:63:73:c7:b0:cb:cd:23:99:93:27:03:ad:31:c7:05:d6:2a:
d2:ca:20:6b:01:f8:77:f8:da:24:c7:3e:e6:5d:99:58:06:55:
26:f7:3d:6b:23:c8:31:c6:2e:e7:f0:67:11:c9:e8:f5:c9:96:
3e:29:90:a8:7e:0a:d3:e4:4d:9a:9a:ba:26:2c:01:e6:01:f6:
22:b3:f2:0b:8a:4f:4a:e9:1b:17:89:c5:75:55:f5:b3:f8:e4:
d4:4c:36:89:4b:61:c7:f0:56:9f:f1:d9:e5:94:f7:ae:e9:4f:
71:62:74:85:83:27:40:d8:77:6c:77:ca:d8:cf:a8:39:37:11:
9a:8e:17:8e:d3:79:a1:47:46:81:3a:c4:f4:df:ca:13:48:1e:
22:d7:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:01:56 2025 by rpki-client