Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: qZtZ68kzzlz+VKoM92dtuq5ButZSgFwSjTCYr6orU34=
Subject key identifier: C2:6E:C9:30:03:F9:19:E7:B1:14:B2:31:19:98:81:F1:FF:D9:7A:AA
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 0195DFD890891E132D02DBD10881042B5361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 03:01:06 +0000
Manifest this update: Sat 29 Mar 2025 03:01:06 +0000
Manifest next update: Sun 30 Mar 2025 03:01:06 +0000
Files and hashes: 1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: aC4f0zRC8cLN4vXz+bc2IFniK5Ett7xQjWFUZaboIGY=)
2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:90:89:1e:13:2d:02:db:d1:08:81:04:2b:53:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Mar 29 03:01:06 2025 GMT
Not After : Mar 30 03:01:06 2025 GMT
Subject: CN=c26ec93003f919e7b114b231199881f1ffd97aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:6b:9f:98:d4:78:9d:d3:3e:67:a1:0f:84:
be:1f:f7:31:06:63:aa:bc:f4:4a:80:6a:a1:b6:0f:
a3:af:46:3b:3a:c0:2a:40:5b:ee:5f:8a:21:c5:92:
0f:92:c5:ad:2d:8d:82:65:24:5e:1c:95:71:31:c5:
9e:71:4b:9e:f6:a7:55:35:f6:52:5e:2c:15:3f:06:
f5:11:0b:9e:b4:43:f8:62:3c:0f:55:f1:ad:81:c7:
b3:56:5a:06:32:c1:6c:84:26:69:99:ad:6e:4b:f5:
f0:f2:01:10:b6:f3:87:c2:95:3a:14:0b:7d:23:e9:
5a:be:4e:9e:5e:84:ae:b0:04:1a:a3:ed:6e:1a:1f:
5c:d9:e1:90:02:69:1c:71:39:d4:5d:c1:60:0e:8d:
e7:b4:f6:0c:f5:61:b6:11:b9:44:0b:1d:79:81:aa:
9b:19:57:da:13:66:e7:1e:9a:dd:24:81:64:4f:72:
0c:e9:78:89:5d:49:6a:9f:26:2c:e8:4b:1a:aa:f5:
4a:3c:ec:3a:e2:99:ce:48:28:b6:15:1e:17:a6:7e:
02:44:86:92:2b:d4:37:b8:9b:6c:c6:d5:f8:c5:b5:
93:26:94:fa:e2:20:bd:6c:a0:a7:4c:4a:75:ca:d1:
d6:e3:47:db:9d:f3:f6:3e:66:73:31:8d:f9:f7:7e:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6E:C9:30:03:F9:19:E7:B1:14:B2:31:19:98:81:F1:FF:D9:7A:AA
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cb:2c:8d:69:76:a8:4f:47:8d:6c:3a:36:a4:dd:e8:55:47:
d9:e9:10:34:ce:8f:06:00:9a:f6:9c:5a:1a:ca:2e:5b:88:9f:
37:00:15:c8:d0:d9:9b:6f:4e:63:cd:22:43:58:98:27:0a:fe:
de:61:2c:61:e7:c2:5f:29:cc:4f:0d:92:b4:74:e8:58:fc:9d:
d7:d4:f9:e0:44:fb:66:b3:3e:47:64:52:60:2e:a6:17:4b:48:
12:45:bd:a7:f4:94:7b:68:ef:2e:5c:8f:31:e4:fc:df:19:a4:
af:1b:06:07:d3:3b:d0:08:5c:78:65:89:1b:72:84:a2:1d:72:
b6:44:92:76:cb:bb:44:5c:47:af:be:2e:d5:de:00:17:b8:c1:
7b:22:a5:cc:85:f8:e8:4c:92:f1:19:1d:ca:9c:4f:3e:80:fc:
3e:69:73:70:0e:38:9f:06:95:17:a6:07:70:f4:f8:ad:c8:52:
b0:60:2e:f4:9b:cf:d8:2d:a0:be:4a:53:ff:7e:38:53:bc:af:
ae:a6:21:b6:3d:24:70:77:a0:01:cf:8b:11:7b:ba:b4:0f:b5:
73:77:03:86:24:5b:57:59:30:ae:8f:34:83:34:f0:35:e3:ac:
58:f4:71:67:da:ae:a8:e7:cf:a1:51:f2:fd:55:8f:57:96:11:
c7:d4:6c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:21:35 2025 by rpki-client