Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: ChuvaSXJvwy8lMZeRkMEWOJcO/y3egq6TbqducnG49M=
Subject key identifier: 7E:B5:DF:B8:A5:6D:96:C5:9C:E7:FE:75:05:D5:F6:79:77:35:E9:C7
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 0195E0B408AB88610FE0C508F269A2F86FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 12B6
Signing time: Sat 29 Mar 2025 07:00:49 +0000
Manifest this update: Sat 29 Mar 2025 07:00:49 +0000
Manifest next update: Sun 30 Mar 2025 07:00:49 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: fvg2Aqy8XdIn1ZNcTQ7aOPL/kDXoE/M8AT3lW+/vFSc=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:08:ab:88:61:0f:e0:c5:08:f2:69:a2:f8:6f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Mar 29 07:00:49 2025 GMT
Not After : Mar 30 07:00:49 2025 GMT
Subject: CN=7eb5dfb8a56d96c59ce7fe7505d5f6797735e9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:12:08:9b:12:ab:2a:0b:b7:76:16:a7:a0:
3d:ce:4e:61:9e:2e:e2:63:87:4e:b6:bb:ac:aa:1d:
8e:19:f1:3d:e6:4b:d3:1f:ce:fc:22:1f:ac:61:5b:
45:82:c7:a8:97:c0:c9:15:be:48:70:5b:dc:29:66:
4a:21:73:b7:ce:b3:a7:56:13:4a:ee:50:fd:60:b0:
0c:35:e7:b1:41:f5:4e:5b:bd:a7:af:35:a9:3e:f4:
f7:10:33:65:48:49:d1:51:01:cd:be:0d:5b:38:31:
26:f1:9e:c2:1f:e6:6d:7d:68:bb:a7:22:36:84:16:
35:d2:ad:55:16:25:82:90:12:fe:b7:1d:c6:98:f8:
ff:05:9b:cd:ad:3f:ef:4e:90:bc:41:47:b4:b6:00:
b4:3f:b5:4a:14:ad:b9:f1:c8:65:1a:17:80:94:ce:
af:79:a4:8a:8d:9c:36:be:e7:0b:43:42:79:ce:d6:
37:be:76:9f:69:df:de:be:9c:e2:4d:fc:22:fe:b4:
f8:ab:a2:6e:17:ec:6e:56:08:26:15:55:34:5c:8c:
7a:22:23:92:42:cf:d5:0d:e5:68:72:c7:f1:68:fc:
0a:be:62:6e:3a:10:b1:87:02:c9:f3:2b:e1:49:a4:
10:29:87:7a:c8:2e:46:82:6c:12:9d:28:21:28:1c:
b1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B5:DF:B8:A5:6D:96:C5:9C:E7:FE:75:05:D5:F6:79:77:35:E9:C7
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:74:1b:1f:80:6b:02:3c:e4:9a:8a:9b:52:c3:61:94:df:bb:
62:91:05:b8:a2:97:82:a3:5a:bb:13:a5:71:51:25:2c:a1:5e:
12:50:cf:d1:94:e0:13:26:5e:47:5a:31:3e:84:2f:c0:ec:fa:
12:c6:01:db:65:b0:6b:56:8b:5e:5e:d8:b0:b4:8a:37:ff:29:
67:99:7f:97:df:70:b7:00:bb:6b:b5:87:ab:b8:f1:62:e9:46:
cb:39:c5:35:3a:58:5a:d9:b5:13:64:e4:0f:12:3e:7b:82:0f:
67:9d:7c:8d:ad:a3:a6:c1:a6:7c:fd:c7:76:68:be:d3:95:f3:
79:72:50:e6:bf:32:05:46:23:d0:1e:11:36:d1:09:82:1c:8e:
17:0c:d3:e4:d3:89:8f:c9:e2:8a:a8:2a:e0:2e:a8:be:47:10:
ec:83:de:63:20:96:ce:72:d1:f2:c7:cb:d3:29:89:c4:1a:d6:
94:8a:aa:c6:63:45:44:5f:07:fc:24:15:7b:f0:22:82:60:cc:
1f:e3:77:38:3f:69:65:5b:f7:98:07:48:8b:01:4f:88:c4:15:
ff:d0:c1:56:a8:50:e1:ae:74:a2:ed:e8:29:52:57:ce:9c:9b:
81:4d:c4:0d:b2:93:89:f8:41:2c:76:b2:68:f2:3b:f1:35:57:
a3:9b:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:35:40 2025 by rpki-client