Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier: jRdaHVWv09GE7DhtZyM/8w9J3Wo+2luMUbXRJyVGL1o=
Subject key identifier: 78:69:52:B8:25:6C:06:45:4D:F0:64:C2:09:09:E5:79:58:D5:B9:55
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 0195E122259DCC9EC7E6C40D450E6D88C2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number: 14C6
Signing time: Sat 29 Mar 2025 09:01:06 +0000
Manifest this update: Sat 29 Mar 2025 09:01:06 +0000
Manifest next update: Sun 30 Mar 2025 09:01:06 +0000
Files and hashes: 1: QZ0qtYVoe9eTyxZ80lBv-di1FfE.roa (hash: 25XKDnhztQCemAlFiOHm1I7VVswm+flqcSO7FBEPKO4=)
2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: sRIQu0sk8aes+iVsWqnxxpFDvJHr2esmK94w+T2FxJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:25:9d:cc:9e:c7:e6:c4:0d:45:0e:6d:88:c2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Mar 29 09:01:06 2025 GMT
Not After : Mar 30 09:01:06 2025 GMT
Subject: CN=786952b8256c06454df064c20909e57958d5b955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:ee:8b:42:52:23:ec:04:b0:f9:5a:41:1a:
62:06:e8:3d:c3:90:e7:59:a5:e7:37:77:8a:d3:c5:
27:7c:32:b3:8a:56:2d:50:f5:6b:8e:3e:c3:b7:59:
d9:51:45:91:13:16:41:7b:b4:84:d0:0b:78:7a:84:
d4:7d:81:5d:30:8f:3b:18:ba:ed:f3:c2:1f:f7:ff:
e8:aa:5f:67:ff:3c:cd:61:65:d8:af:53:e1:37:31:
e9:6b:10:26:d4:48:b5:31:4d:97:59:7c:05:be:fd:
1c:15:42:64:8d:22:88:19:2c:95:e6:b7:8d:2a:80:
38:b2:bf:90:41:04:6d:68:0e:d5:1a:4f:b0:86:ab:
1e:ab:0a:29:e1:ad:70:31:72:e8:c0:22:a1:25:1e:
71:43:81:15:06:43:11:96:1c:d1:72:ec:e0:72:25:
9d:98:61:1a:9f:42:b9:a0:4a:5a:80:ea:f3:63:14:
80:c2:c3:44:8f:86:6f:0c:42:f9:56:fd:ee:0d:d8:
29:3e:a8:ad:f4:e5:27:5f:24:ef:40:c5:44:18:2d:
82:df:99:e3:b1:7f:1b:c0:85:f5:3b:8d:5b:39:83:
14:9b:d9:10:59:56:18:0a:3d:cd:2b:08:4a:3a:1d:
7f:33:9f:94:2c:23:ee:4a:28:61:69:19:72:d0:75:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:69:52:B8:25:6C:06:45:4D:F0:64:C2:09:09:E5:79:58:D5:B9:55
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ff:42:75:fd:30:69:df:52:40:eb:db:b6:1f:6b:90:a7:6f:
40:31:74:75:2e:ea:70:bc:05:21:ec:83:76:bf:96:36:44:b7:
ba:f1:fb:55:83:51:f5:f9:04:c5:c9:1a:e5:53:39:c4:97:b5:
7b:14:45:de:a9:27:d2:a3:fe:df:e7:5a:cf:5f:62:af:65:0e:
52:98:7f:9a:a0:eb:24:0b:7d:a5:45:b0:20:18:97:74:6f:25:
24:bc:e0:fe:d4:2b:f2:9e:1c:0a:87:09:25:be:9d:d7:5c:9e:
61:23:69:2f:45:7e:f0:44:bc:f7:4b:5f:56:95:fa:ce:f4:ee:
f0:76:41:4a:4c:3c:80:70:11:64:7d:e8:d9:2e:ff:08:c0:04:
66:06:0c:8d:4a:d2:4e:b3:d6:29:0b:27:18:bc:d8:37:2e:52:
56:f4:30:6c:63:6b:86:1a:eb:91:83:92:d0:18:66:bd:aa:b9:
ae:81:86:56:40:35:41:c5:23:9a:80:ec:bf:29:89:0e:16:5f:
d4:54:86:06:10:8d:88:c2:48:db:76:3d:e1:bb:9a:b2:da:36:
7d:ed:35:21:92:cd:6e:41:33:73:1f:0d:6e:3c:41:8f:b9:e2:
df:15:a4:37:e8:68:79:46:1f:a5:e3:84:26:5d:72:1a:fb:20:
08:71:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:36 2025 by rpki-client