Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: jaXMTZKgQzx1acnfKl9XBgWHAflqgMShey0uy0is4Ck=
Subject key identifier: EC:7A:F6:7D:6D:48:48:16:B6:60:66:4F:09:AD:61:93:32:19:C0:D3
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 0195E1906225C5DC733446119943E21D5684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 0F33
Signing time: Sat 29 Mar 2025 11:01:30 +0000
Manifest this update: Sat 29 Mar 2025 11:01:30 +0000
Manifest next update: Sun 30 Mar 2025 11:01:30 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: /whpBkOUd6X53+ZV1sl5tHetzWGZDVntej/OhXNOnoI=)
2: vmvMz7iYINXEEkk8q3hTcUEqEpc.roa (hash: cIoty3QgZcrRdlAsEyLTb5L8GB5LiEjn7CzAwFabxRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:62:25:c5:dc:73:34:46:11:99:43:e2:1d:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Mar 29 11:01:30 2025 GMT
Not After : Mar 30 11:01:30 2025 GMT
Subject: CN=ec7af67d6d484816b660664f09ad61933219c0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:31:cd:08:47:25:76:cd:b7:fd:17:a9:87:
ba:f6:da:f8:07:61:35:81:35:f6:d8:d6:2a:8a:6e:
09:3d:14:5f:22:12:8a:cf:51:7a:17:a7:7f:d0:86:
6c:ed:9a:c8:45:02:81:d5:12:c9:2e:f8:7b:b8:00:
a1:0c:61:61:93:b0:0e:13:e5:45:92:80:6e:51:c5:
cb:1e:e6:f1:66:c7:b3:3d:f8:60:bf:c1:e8:8c:ac:
43:fe:ed:f6:cb:77:24:1c:32:c3:76:05:0c:bd:83:
e4:a6:4b:4a:25:73:86:97:ca:79:60:51:e6:bc:6e:
94:e5:15:54:02:59:3a:55:1b:e5:3f:31:5c:9e:fb:
f2:29:ba:20:06:f2:7b:55:5a:7c:47:73:c4:e3:1a:
39:fe:5f:bb:06:af:bb:af:89:ec:03:f1:06:2a:03:
d8:ee:c9:80:37:ed:b6:f6:02:fa:c8:dd:74:cf:b4:
42:a0:28:80:c5:9d:ab:26:94:1d:ec:6d:ea:11:1d:
0e:79:06:31:b4:96:99:bc:35:fa:82:dc:e1:d9:81:
6c:80:31:8e:44:fa:54:00:fb:2c:b0:53:30:e9:64:
14:97:34:34:06:ff:f2:92:fb:87:e1:4f:7c:41:3d:
0d:a2:74:50:75:b1:dd:91:ba:5f:d8:e1:b0:77:88:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:F6:7D:6D:48:48:16:B6:60:66:4F:09:AD:61:93:32:19:C0:D3
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:82:7b:69:b7:24:58:a5:50:1f:7f:97:0e:7c:61:53:8b:fc:
e4:a2:1c:c2:56:c1:e8:f4:d4:1d:b4:f9:34:5f:d2:01:fd:16:
78:12:f5:6e:2e:a8:d1:32:52:06:2b:87:d0:94:0c:6b:6f:60:
53:87:ae:78:40:d0:5a:39:61:95:d9:02:fc:71:09:39:7b:c6:
f2:9c:46:a4:08:f9:44:54:d1:3b:23:95:78:42:c9:1e:68:8d:
a1:a2:67:67:8c:a0:93:db:bb:66:0d:18:60:8a:02:b6:e0:d8:
0f:1c:2c:a5:eb:7b:33:1f:e2:d1:27:95:a4:96:46:9f:3d:ae:
b2:65:50:a9:5a:8d:3f:16:50:5a:2f:55:c1:8f:06:0b:69:c1:
f4:6a:6b:40:76:7f:d0:de:d9:b0:77:9f:a9:06:0e:b9:6d:d1:
e4:dd:da:f7:bd:16:72:e9:81:48:26:16:f4:f5:b2:03:85:d5:
e1:41:13:1c:8d:59:28:68:7c:11:82:5a:8e:30:18:61:15:09:
28:c9:36:f8:1c:06:5a:fb:27:0f:3a:9e:77:dd:0d:88:40:3c:
17:0a:20:34:65:3d:d8:fd:d3:cc:57:1e:8d:c0:02:32:a1:86:
19:72:f7:11:2a:ab:38:41:21:fd:d4:d6:db:e6:49:89:ea:43:
e4:f7:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:31 2025 by rpki-client