Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: fGLHiQ1xn3bM8scJ4P+wKZ/qA+UJQADJkHJ7YTzvBX8=
Subject key identifier: 75:88:D3:3E:4D:AF:F1:F0:5E:94:32:88:87:EC:B2:29:C6:73:55:B7
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 0195E1223550D6369C72BA5369CEDB5894CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0C69
Signing time: Sat 29 Mar 2025 09:01:10 +0000
Manifest this update: Sat 29 Mar 2025 09:01:10 +0000
Manifest next update: Sun 30 Mar 2025 09:01:10 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: Afq73g4385zJpQSlCkOCdWBMFvodbuBYR/vohPfBYII=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:35:50:d6:36:9c:72:ba:53:69:ce:db:58:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Mar 29 09:01:10 2025 GMT
Not After : Mar 30 09:01:10 2025 GMT
Subject: CN=7588d33e4daff1f05e94328887ecb229c67355b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:59:d9:58:47:bd:83:49:f1:b4:56:40:48:
7f:f9:0a:53:f8:8b:c2:d6:62:88:21:c5:32:57:51:
bb:bc:a5:35:90:50:02:51:c5:29:e4:2b:d7:9d:45:
64:6f:34:7f:87:4c:9b:3e:6e:87:77:19:86:48:8e:
a8:3a:01:d1:d7:89:d5:f0:c7:c1:71:9f:00:6b:e9:
86:3d:aa:e1:b3:ca:2f:4a:87:3c:e5:04:a2:90:fa:
d9:bf:bc:a3:77:37:29:39:a5:52:b1:29:95:68:d8:
5f:55:ba:65:0c:48:fd:85:41:32:d6:28:30:57:81:
38:65:08:62:92:97:e1:e8:a9:b7:13:5b:a4:26:32:
84:d8:89:3f:3f:8c:f4:d1:fa:e1:e6:37:ff:7b:6f:
75:de:47:19:db:4d:c8:d7:0c:9b:00:08:d4:a9:cf:
21:d8:0b:1a:a0:5f:1d:6e:b9:aa:69:be:ad:10:76:
79:5d:e4:3a:8a:93:e9:ce:32:f6:e0:b8:17:9d:1b:
1d:b5:00:34:a0:b3:d3:51:d4:3a:f6:f9:e6:e2:e5:
7d:e8:3f:ee:f0:b6:24:ea:bb:e1:7e:4b:a7:f9:15:
85:e0:5a:74:e6:b0:2b:0b:f6:06:39:da:8c:af:b3:
f6:4e:50:a2:35:f3:c8:ae:d8:24:97:07:23:69:45:
ed:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:88:D3:3E:4D:AF:F1:F0:5E:94:32:88:87:EC:B2:29:C6:73:55:B7
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:78:0f:34:a2:9f:e3:5d:8b:8e:bb:0e:58:26:01:94:9b:6d:
f5:c7:93:00:0a:77:af:39:91:02:ee:f8:2d:41:30:c5:ac:3c:
7d:ee:65:90:46:22:89:3f:9b:70:42:16:4d:50:d1:ff:56:3b:
4f:d0:d6:63:c1:cd:b4:40:e7:48:b5:a8:17:08:29:1d:ed:fd:
a4:c1:20:74:25:26:dc:0a:a7:1a:4e:41:c3:5d:d9:44:73:68:
45:07:b8:2b:21:37:66:fa:b0:c0:f9:65:b3:c0:7b:51:39:21:
5c:8d:e7:76:e7:f5:d1:12:80:61:d8:d0:a7:3f:3c:ea:e3:4a:
1b:9f:81:ed:b5:eb:f1:e2:54:50:37:5e:91:63:52:3d:a6:5a:
31:44:b2:0d:75:6c:48:2a:4c:2a:81:70:1b:2f:26:cb:98:d9:
ea:87:34:c1:17:a8:35:24:89:37:31:b5:f3:62:51:e1:05:b3:
54:e7:0c:64:7e:1d:80:1a:6f:77:c2:9c:76:f3:7f:17:b1:91:
76:39:90:be:df:6f:59:14:ea:7c:3e:ae:63:30:42:3e:1d:70:
01:52:42:d6:a4:f5:f5:76:e6:c9:f3:8a:6e:d4:9f:81:68:87:
f6:5d:b3:7f:6c:b9:16:df:39:09:6f:b3:f1:20:c3:d3:36:a4:
74:d7:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:47 2025 by rpki-client