Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: HvCocz/P8LuyMKIDKfa5uljKHBlIHk6Sn7rXf+0uwT4=
Subject key identifier: 0D:9C:8E:0D:BF:A9:0F:95:BC:7C:12:45:BF:55:B1:3D:80:2B:8D:D9
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 0195E1908A513E295B8BCA0CB80AF446718E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0B40
Signing time: Sat 29 Mar 2025 11:01:40 +0000
Manifest this update: Sat 29 Mar 2025 11:01:40 +0000
Manifest next update: Sun 30 Mar 2025 11:01:40 +0000
Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: ZEmTxXxdGw+SxKVVHKDb0iwnMngmSQFcSOHc/CA44qg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:8a:51:3e:29:5b:8b:ca:0c:b8:0a:f4:46:71:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Mar 29 11:01:40 2025 GMT
Not After : Mar 30 11:01:40 2025 GMT
Subject: CN=0d9c8e0dbfa90f95bc7c1245bf55b13d802b8dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:bf:fd:e8:6d:ce:5e:4d:a3:48:6c:fa:f9:
e2:94:ba:b2:b3:0f:94:b0:8d:3d:d1:5e:52:aa:81:
b9:d8:46:ad:db:e4:59:91:a7:ff:53:db:bf:c8:c0:
9c:6d:9b:58:ab:69:b9:6c:a7:93:3d:aa:cc:9f:ff:
be:fe:19:9d:52:db:f8:85:c9:d5:a8:77:43:c0:01:
9f:12:ac:68:a6:a7:45:90:9f:17:9c:bc:4c:42:59:
41:9a:15:08:60:6b:87:94:24:7e:95:f2:92:12:a6:
40:ec:82:0d:5b:92:a1:c3:78:7a:b1:57:b1:dd:00:
d7:d8:b3:86:61:f4:51:af:d9:2b:f3:0c:06:95:7a:
8f:96:ad:ce:ab:25:cb:a0:db:67:dd:79:f1:6c:07:
ee:b7:c7:7d:d7:8c:08:c1:87:a0:43:c1:8d:71:78:
9e:e1:47:14:08:ec:68:7d:85:ff:c0:87:7a:a0:87:
82:df:e6:4e:7d:c3:ff:2f:59:a1:13:69:b6:c2:3e:
83:e0:81:93:44:4a:13:7e:e1:7d:76:dd:7d:ac:e7:
15:81:bd:75:b3:93:72:e4:37:5f:16:e2:29:cf:ee:
f3:a9:c0:db:a6:6d:11:75:08:75:13:33:cb:78:59:
18:0a:e0:a4:3b:c1:c5:4f:56:fb:dd:15:c4:7b:14:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:8E:0D:BF:A9:0F:95:BC:7C:12:45:BF:55:B1:3D:80:2B:8D:D9
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:36:31:e5:4d:a8:ca:36:44:9d:a2:59:50:cc:78:5f:5f:3c:
d9:96:55:3e:d1:0a:25:21:6f:51:00:9d:ac:77:e3:d1:94:71:
1a:08:1b:b1:99:00:62:e8:f8:ba:9a:21:e6:bf:8d:b3:ec:ec:
16:a4:58:10:69:70:02:c3:f8:a3:05:28:49:97:55:0e:36:73:
1e:df:44:87:8a:48:4f:9d:25:07:09:18:19:ea:0c:9b:be:a4:
5e:fd:d1:51:de:9e:f4:ee:4a:d6:d2:20:39:45:0c:cc:23:aa:
17:c7:d3:b1:a9:32:06:cf:02:cf:ca:12:a7:8b:26:d8:3e:a0:
84:8f:3b:67:1a:29:4f:5b:31:06:33:cd:6e:28:e7:49:90:fe:
45:99:f5:5d:87:c1:87:68:b5:dd:50:a8:5a:87:59:f9:13:9c:
6b:e2:e3:4f:6a:5a:bb:63:67:88:6c:b5:2b:bb:8c:10:21:69:
a3:cc:cf:ef:cc:2f:da:42:27:a6:ef:c8:00:e0:56:0d:46:2c:
40:f6:6f:36:31:68:13:b6:eb:c8:44:75:5d:ed:fe:e9:c8:67:
3c:7e:cf:47:95:76:2e:dd:d3:80:33:07:e1:1e:77:9b:98:03:
fe:6c:0e:04:07:13:27:e8:7c:20:aa:33:c5:94:43:4a:69:98:
19:85:71:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:08 2025 by rpki-client