Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
File: m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json)
Hash identifier: w86+esZv+YMzwBXD/EcefjkFKj4UNav+8Z11HmYHzm0=
Subject key identifier: 00:EF:45:E7:26:69:9A:8D:27:46:D9:69:62:62:37:7B:74:A9:78:E9
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial: 0195E1907007AB4C89D0792CA09FEDB9C208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 11:01:34 +0000
Manifest this update: Sat 29 Mar 2025 11:01:34 +0000
Manifest next update: Sun 30 Mar 2025 11:01:34 +0000
Files and hashes: 1: 6gwfZ0imtXXPhJEbNpqe4SziOnE.roa (hash: Pn+V1Yp5GxtDMsze+Fax5FaJ18PgHU1//S1rPV1x8cg=)
2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: IPLuEC0fRfdakUKpsNFykwdMOW6KWguDthMdov8bt+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:70:07:ab:4c:89:d0:79:2c:a0:9f:ed:b9:c2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Validity
Not Before: Mar 29 11:01:34 2025 GMT
Not After : Mar 30 11:01:34 2025 GMT
Subject: CN=00ef45e726699a8d2746d9696262377b74a978e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:68:36:3a:f8:0e:90:a8:93:0b:da:dc:b4:
9e:ac:1a:4e:c4:13:c5:57:d0:fc:a7:b8:bf:7d:48:
9c:ff:dd:00:9c:d4:f1:3d:94:28:ca:16:95:2f:4f:
66:e5:88:cf:b2:db:3f:15:d9:9e:b0:16:b9:7c:44:
2f:e9:3a:ef:a9:99:db:7e:15:e7:86:fc:89:22:4e:
04:81:01:07:b5:96:0e:d8:a6:08:09:82:03:cb:63:
52:6e:b7:00:79:3e:22:bb:86:31:b8:b3:31:88:d0:
f9:31:17:c2:26:b2:79:06:36:39:e4:04:d8:70:51:
2a:f1:6e:91:f9:03:28:a5:58:63:fb:ad:35:96:cf:
6e:f4:2f:9f:03:53:80:65:29:27:72:e2:1a:f8:78:
99:6b:54:ad:54:c4:10:b3:ae:99:b4:98:15:a9:4a:
9b:2f:32:86:84:8a:c6:1a:4e:90:4b:31:94:57:a8:
57:72:a6:8b:98:8e:bb:c4:36:b2:fb:15:cc:6b:13:
3e:5d:67:79:23:5f:7c:42:35:04:61:4f:f6:b2:26:
3d:66:78:fd:15:1a:0a:5b:f8:55:60:db:9b:b8:42:
4c:b6:22:a8:67:b6:65:f0:a7:bf:bf:87:32:d9:65:
03:13:53:c5:c0:cf:93:bf:28:c4:dc:82:46:ca:06:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EF:45:E7:26:69:9A:8D:27:46:D9:69:62:62:37:7B:74:A9:78:E9
X509v3 Authority Key Identifier:
keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4d:67:65:76:2c:9f:d9:ef:e1:44:ae:b3:16:ef:96:67:20:
42:55:fa:b9:6c:be:2f:2d:c9:a5:01:db:8c:05:c5:01:e2:00:
e8:06:33:73:c3:d1:3d:4b:3f:0a:86:1f:89:38:74:78:08:51:
6f:64:47:6d:31:38:b6:f7:b8:ca:65:9e:82:3e:83:69:3d:f5:
2a:0b:0c:db:8b:ee:41:bb:bc:c1:54:7d:12:e8:a6:0e:e2:c5:
c3:de:15:3d:c8:b2:37:61:12:34:95:ed:cc:af:22:dd:4b:a6:
5e:43:4a:ce:af:37:3a:3a:0c:88:35:05:0d:fb:98:d1:aa:e3:
e4:c0:88:45:11:78:8a:fe:ba:3d:7e:03:01:bb:4c:50:1a:f5:
8d:2b:0b:63:70:4c:01:f0:46:62:42:4a:83:9a:89:13:95:46:
22:b6:de:80:33:7f:c8:c3:b0:d4:ea:08:ef:63:fa:eb:f5:20:
71:c2:db:1d:37:5d:5e:f1:71:8e:1f:4c:d5:5a:e2:67:c1:ed:
50:c3:4f:ec:b6:66:f8:7d:16:6e:44:60:12:ca:6d:58:77:7c:
89:e4:7d:21:25:f5:88:5f:a4:66:dd:6d:ee:7a:43:e8:cd:ee:
71:15:e5:bd:ee:af:79:e5:28:d4:84:ff:1b:62:51:c9:a3:ac:
1a:0a:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:05 2025 by rpki-client