Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier: PLWFNo3G5fBisruUlOlveQFxoJzvMDyEC26x9i8LX0c=
Subject key identifier: 27:90:70:75:C0:A8:E7:94:07:6D:EB:17:07:D6:B1:BD:CE:98:F8:C8
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 0195E0B4C0DBFF55392C33F5C579D154421B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number: 0F66
Signing time: Sat 29 Mar 2025 07:01:37 +0000
Manifest this update: Sat 29 Mar 2025 07:01:37 +0000
Manifest next update: Sun 30 Mar 2025 07:01:37 +0000
Files and hashes: 1: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=)
2: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: ZfyaTbiQ7KJsK4Z2k7t3ShPWhNgVSWRMzuGFP6pyIf8=)
3: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=)
4: hP4RlSdcYGNnTpuPiY_-lw9F7k8.roa (hash: C3TpjMqyfvy/eCoQ7B0XWPy+vgrcOa/QV9L4/p4cn7c=)
5: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:c0:db:ff:55:39:2c:33:f5:c5:79:d1:54:42:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Mar 29 07:01:37 2025 GMT
Not After : Mar 30 07:01:37 2025 GMT
Subject: CN=27907075c0a8e794076deb1707d6b1bdce98f8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:5e:b6:57:78:19:7a:92:79:cb:75:61:4c:
f1:09:90:57:cd:6a:5d:ef:9a:f7:b7:64:9f:30:3a:
98:99:a8:a8:b6:de:b8:60:84:3a:c3:81:e1:ad:71:
03:6d:53:c0:30:39:a8:3a:31:08:1f:72:e4:19:80:
aa:6e:a2:33:47:f8:41:cb:b8:8c:14:1f:42:cd:36:
ea:49:2c:cc:fc:7f:ec:a5:d3:ab:74:0d:bd:8c:de:
a2:1f:b2:31:0e:cc:5d:ee:20:b6:57:ba:df:32:05:
53:1c:ee:58:b4:3c:36:7b:ce:7c:d1:3b:00:80:d7:
95:2b:ad:21:28:98:30:05:4b:df:d1:aa:b1:13:7d:
72:5c:28:27:92:16:2e:e3:95:42:1e:5a:2d:2e:46:
ae:83:76:96:fe:ef:5c:6e:b2:b6:6d:11:cc:96:92:
81:c8:9b:02:e0:7d:4c:2d:55:74:31:c2:dd:29:b9:
cc:70:46:a5:3d:38:af:77:a5:e9:e4:e1:2e:70:85:
ee:41:87:6d:fd:81:e8:dc:b8:52:d6:11:52:c5:4a:
e9:36:b0:0d:6e:23:a7:23:13:6c:9a:7d:c8:fd:5e:
80:6c:2c:e1:84:ca:1e:03:73:fd:f3:fa:56:e0:dd:
42:c6:1e:38:44:55:51:0e:77:96:99:a8:e3:c8:31:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:90:70:75:C0:A8:E7:94:07:6D:EB:17:07:D6:B1:BD:CE:98:F8:C8
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bb:19:25:d9:cc:c6:bd:de:ab:d3:20:94:8c:be:f0:4d:f2:
a3:c2:4a:8b:43:20:68:6b:91:8d:78:fc:61:b6:73:41:39:c6:
c2:22:07:bf:29:e1:12:56:11:ca:bd:7d:e7:ed:e3:9d:35:5e:
f2:17:c7:8e:f4:dd:7d:5d:cb:d9:3e:b3:c9:cd:d1:ce:fc:58:
7e:17:58:11:33:ac:6a:32:22:e1:fc:6c:c2:4f:ed:7e:75:c7:
8b:7e:bf:00:64:85:65:30:8e:94:8c:6e:f3:ab:99:f9:e9:82:
e5:03:fb:a7:90:31:16:6c:37:a9:52:31:41:d8:19:c8:25:5f:
49:1e:1b:99:73:1a:ef:92:f3:54:99:25:1f:7d:a6:4d:55:c4:
ec:dd:97:72:a5:17:5e:b7:58:ea:ba:b2:f9:05:77:a1:84:c6:
5d:0f:57:78:fe:bd:7c:3e:1e:1a:45:b9:2e:c8:8a:99:91:87:
17:d7:c5:d1:d3:a7:9c:f2:c4:53:73:0f:25:7a:86:0a:92:4e:
e1:23:cf:3f:70:8f:d3:40:b3:74:4d:4e:43:39:63:59:af:f3:
8f:73:56:4d:3a:e0:eb:5c:04:70:9d:29:cf:cb:ba:54:fe:46:
00:45:bc:c4:e2:cd:ff:8a:59:5e:60:8f:12:71:c6:f4:36:7a:
01:64:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:39 2025 by rpki-client