Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: n1qsZeCW/u4d7KZuITap0huQzEG5YtHR98B63v0MHlM=
Subject key identifier: AA:BE:EC:09:AE:8B:89:C1:6E:33:E7:8F:5A:F6:0F:F6:01:2C:64:2F
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 0195E0EB41CBF3D66014D43612351487F39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0BEA
Signing time: Sat 29 Mar 2025 08:01:08 +0000
Manifest this update: Sat 29 Mar 2025 08:01:08 +0000
Manifest next update: Sun 30 Mar 2025 08:01:08 +0000
Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: PDd21BZ7FhY2aE+jb0WV8HR97pGdK03n5QV7OVo0RQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:41:cb:f3:d6:60:14:d4:36:12:35:14:87:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Mar 29 08:01:08 2025 GMT
Not After : Mar 30 08:01:08 2025 GMT
Subject: CN=aabeec09ae8b89c16e33e78f5af60ff6012c642f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:27:11:70:66:ad:12:68:6d:b7:5a:0b:84:
fe:c3:da:af:d6:8f:90:a8:37:ef:b3:0d:2b:63:d9:
01:c2:42:5f:20:44:4e:79:a1:ce:7a:6e:c2:72:34:
66:c2:97:91:9e:67:f2:8f:ef:4d:ff:58:ba:a6:fb:
7c:b9:e0:21:de:da:10:76:14:08:94:6c:39:39:bb:
54:3e:62:93:45:d4:4f:8b:ee:a2:82:78:3b:89:de:
42:f8:6e:33:d4:14:f5:5b:36:51:e9:12:4a:e3:78:
c2:ce:64:9a:b8:6b:8f:20:29:ae:cc:d9:4e:c1:fd:
7b:4d:0a:36:2b:58:95:f0:dd:47:46:68:95:c9:4a:
4c:82:84:db:60:0c:ec:13:31:46:18:0f:cf:81:7b:
09:df:b9:a7:6c:40:4c:42:64:1c:17:2f:39:58:11:
0c:9c:07:99:90:9d:e3:ae:7a:20:36:d6:7a:db:7e:
fc:73:ef:25:9c:4a:29:39:cc:c1:e1:84:0f:9a:37:
2f:a6:5b:69:82:e4:bb:b4:e2:cd:f7:5b:2a:e8:9b:
cb:20:6d:0e:8b:dd:2e:93:de:60:d6:d3:39:bf:a0:
8b:a5:dc:cd:c7:22:a4:bd:1f:c3:b5:83:8a:a7:91:
26:68:7b:b4:ab:0d:4d:fc:b4:8d:c8:e2:ac:d8:df:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:EC:09:AE:8B:89:C1:6E:33:E7:8F:5A:F6:0F:F6:01:2C:64:2F
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:50:6f:71:ef:53:ab:3f:d3:ba:c0:cf:28:85:5e:90:36:6b:
ad:57:31:aa:5f:32:7b:80:f7:04:94:33:81:eb:86:9c:74:51:
1a:b1:95:bb:69:0d:33:b9:ce:1e:d8:9f:82:c9:20:6b:01:49:
ce:b3:74:ce:87:4f:ae:3e:b9:c7:62:5d:26:2c:e4:7c:52:ab:
4a:c0:ac:21:c4:47:37:58:e4:c2:77:34:b0:74:9e:1f:8b:35:
71:4b:42:cd:a4:70:bf:48:12:33:fb:f2:13:3f:a4:e8:63:8d:
69:c3:eb:a5:16:5b:2c:db:ae:23:fd:c2:f7:9c:f6:da:cc:7c:
37:92:f5:1a:8f:da:47:44:9e:8b:4d:70:02:70:f5:32:63:fe:
23:a0:93:e3:fb:ca:0b:9d:62:48:fa:f5:8d:dd:bf:bd:46:7d:
18:f0:31:34:32:5a:c8:f5:c0:4f:87:25:c0:c8:78:f1:e5:23:
35:ce:f7:c1:81:07:9b:84:10:bd:3c:ff:1b:73:6e:94:ad:f3:
32:14:1e:aa:d9:79:cd:56:a8:e9:9b:72:d2:b9:a1:7d:1d:79:
19:0f:33:43:6c:a2:67:b7:2c:7d:17:65:47:26:7b:91:a6:14:
7f:b6:0e:53:39:5c:9f:88:c9:e9:2e:fd:97:16:d6:2f:85:ea:
cc:10:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:20 2025 by rpki-client