Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
File: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft (raw, json)
Hash identifier: prTG+IFW/dVc9xRh4TwBhj0q1wVD6cHa3apxgvMtmA0=
Subject key identifier: CE:22:19:00:84:F3:3B:32:D7:92:60:94:62:27:37:8D:8A:EE:CB:56
Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Certificate serial: 0195E0B454F11EC48976BCACE1262093EEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
Manifest number: 12B6
Signing time: Sat 29 Mar 2025 07:01:09 +0000
Manifest this update: Sat 29 Mar 2025 07:01:09 +0000
Manifest next update: Sun 30 Mar 2025 07:01:09 +0000
Files and hashes: 1: mB80WkYR6rBTCDx0gQ2chGJdLnE.roa (hash: qRYzeQ2/WDuNAMTY5dvhhEeLgdI0eFd+WpvXt01kHZI=)
2: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl (hash: BK+K6qRQP6pgESpbxEEVfgwwQ/cwNhz0oebAvR7tb5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:54:f1:1e:c4:89:76:bc:ac:e1:26:20:93:ee:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Validity
Not Before: Mar 29 07:01:09 2025 GMT
Not After : Mar 30 07:01:09 2025 GMT
Subject: CN=ce22190084f33b32d79260946227378d8aeecb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:91:2c:96:c4:0b:ad:bf:c0:d0:0e:69:e1:
85:b7:31:fe:f6:49:f3:44:79:bf:82:84:ee:ea:96:
7b:75:38:70:fa:bc:e4:23:55:ee:ed:10:96:3b:21:
4e:7d:b3:c6:f3:7e:d6:04:cf:d8:60:55:d8:41:37:
9b:e8:50:61:0e:ac:95:35:4f:88:2a:2f:c5:1b:d1:
b5:5e:70:53:68:15:90:76:ab:c7:31:72:98:a8:ec:
49:7b:80:9e:7f:92:0d:2e:2d:e9:b8:dc:eb:55:c2:
ce:d0:7b:ce:f9:3b:29:b2:0d:bb:a8:cf:65:69:02:
ea:ab:42:0a:aa:e4:9e:dc:ed:0f:c7:cb:42:eb:8f:
74:27:ae:1b:3a:ba:60:72:33:1d:5e:33:31:e3:c2:
4b:00:89:f1:55:7d:a3:9e:7d:a2:a9:a9:50:9c:fa:
da:ca:a0:ca:1e:87:48:8d:67:c3:ec:1e:c5:d0:8d:
f5:aa:61:71:1b:64:f6:50:0f:04:4b:22:97:b9:f5:
3e:9b:d3:18:05:33:e7:4f:f4:15:e6:f3:2a:b8:8f:
0f:b8:18:fa:d1:2d:d4:6b:c7:a7:7d:af:ef:20:87:
88:65:a2:81:d8:5d:99:80:c1:9d:12:ec:3a:6c:4c:
71:13:20:3a:de:e0:98:27:e0:99:b4:7b:68:b2:cc:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:22:19:00:84:F3:3B:32:D7:92:60:94:62:27:37:8D:8A:EE:CB:56
X509v3 Authority Key Identifier:
keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c7:fe:77:eb:a7:9e:bb:8c:76:4f:6c:0f:68:df:e8:2c:ac:
21:a6:2f:f3:84:a1:50:e8:0a:ab:c0:ee:12:f8:b9:fd:0d:e2:
58:34:a1:5e:fe:7c:b6:21:8f:eb:cd:27:7a:29:d1:92:41:99:
60:dd:82:0f:75:c0:31:6f:a2:96:3d:0b:a0:df:54:51:21:d5:
7e:b5:5c:c6:ab:91:09:c2:68:16:28:0c:36:c7:2b:f4:cd:e6:
2c:4b:db:71:8f:13:05:47:f6:ef:ac:7f:b2:6f:ef:e1:3c:a7:
27:df:48:b0:10:00:69:a1:42:7b:72:39:55:1f:ac:8b:a4:39:
05:63:a1:a1:8e:97:67:d7:74:df:f0:65:30:91:14:06:5d:f1:
c0:03:24:6d:1f:03:00:ec:dc:ae:0b:58:43:c9:29:72:15:6b:
90:d8:50:cd:67:80:47:8a:c2:59:38:d4:db:66:31:ae:8c:07:
87:cc:0c:39:0c:23:13:6c:83:8b:89:b2:cd:fc:02:50:58:c5:
bc:f5:04:89:61:7c:af:26:a8:33:71:9f:17:27:6c:b8:6f:3f:
dd:d9:a3:bb:e4:66:5d:0a:33:f6:d0:61:bb:cf:5c:26:06:13:
1d:79:fe:8d:4a:35:a1:96:a4:f2:cc:2a:84:ec:67:ec:7d:18:
e1:7b:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:29 2025 by rpki-client