Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: C55ylBe+0h4Iry8cUltHYvarfbzD4+Tm0QyQdalE/po=
Subject key identifier: 61:F1:D5:6E:91:7C:86:F6:C0:91:DF:88:23:3D:13:43:4C:23:62:E0
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 0195E159F8EEB6F7EAA8AE0D2580BF785607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 09E1
Signing time: Sat 29 Mar 2025 10:02:04 +0000
Manifest this update: Sat 29 Mar 2025 10:02:04 +0000
Manifest next update: Sun 30 Mar 2025 10:02:04 +0000
Files and hashes: 1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=)
2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: ubQ3/bLv73gpNb/hpkmZR/tOLIXEdgLAix7HSeehEcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:f8:ee:b6:f7:ea:a8:ae:0d:25:80:bf:78:56:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Mar 29 10:02:04 2025 GMT
Not After : Mar 30 10:02:04 2025 GMT
Subject: CN=61f1d56e917c86f6c091df88233d13434c2362e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:77:a7:48:76:af:5b:d6:7e:73:40:0b:0e:
f9:c6:a7:da:08:ae:81:a5:a7:96:e8:f1:e3:37:85:
6f:f8:88:8d:c5:74:f8:2b:2b:3e:88:f5:e0:7f:d3:
2e:9c:60:53:00:1c:44:b1:07:af:38:28:e1:dc:db:
e1:4e:6a:7c:ef:19:61:9e:d3:2d:c2:84:65:ab:c4:
e3:b5:80:fb:7a:ae:3c:48:89:29:19:17:9d:98:88:
b4:90:dd:35:18:5a:2c:32:cf:07:94:96:e0:f3:93:
55:74:90:6f:2b:d4:34:27:a9:2e:b8:a6:d0:89:66:
5e:e3:85:42:51:db:f2:28:de:12:a8:9e:8a:62:e0:
92:40:cb:46:2e:74:fe:0e:0b:95:a4:04:cb:fa:fc:
bd:64:1f:ba:6b:41:17:5d:3d:ea:d1:ec:98:a0:8d:
89:3a:fb:ca:cb:fe:0d:14:0b:14:2e:f3:0c:c1:9b:
65:2a:96:aa:b0:46:49:4f:9e:61:d9:0d:f1:d4:fb:
68:be:87:5b:3a:44:1b:d1:5f:a5:20:d7:a6:b8:ed:
c3:95:3c:c8:39:95:5d:f4:33:d1:1b:3e:2b:d7:e6:
0b:16:44:92:8f:7a:94:a5:67:8a:8a:09:11:28:51:
42:aa:4f:74:6b:58:42:31:da:60:9d:ba:f5:e3:57:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F1:D5:6E:91:7C:86:F6:C0:91:DF:88:23:3D:13:43:4C:23:62:E0
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1b:eb:bd:fc:d4:9b:2b:01:6a:fc:6c:db:8c:27:0a:ed:4a:
99:e2:5e:a3:62:e6:09:bd:b0:0c:d6:b3:7d:84:0c:52:b2:1a:
1d:3b:b8:80:5b:43:34:00:76:7a:1e:2b:7a:21:7b:2c:a2:3f:
bf:0a:dd:d5:68:ec:95:e1:34:aa:ba:96:67:8a:cb:74:d0:be:
cb:00:7f:21:1d:9c:0c:8d:c7:17:53:15:8a:d1:d6:09:45:d3:
40:45:86:60:15:76:a4:91:16:ce:98:32:c6:dd:46:bc:8e:6d:
3b:71:f1:ae:91:1b:65:f6:71:fa:41:99:e3:e0:f3:8f:c2:fa:
35:85:70:70:3c:e9:4a:19:99:17:b8:38:3d:96:97:73:49:8a:
d7:92:9d:0e:77:ef:b1:87:21:f7:c1:95:a9:11:dc:bf:86:09:
f5:c3:4b:5d:f3:27:8c:03:2b:b3:a8:ba:13:20:4c:36:aa:0a:
05:df:68:66:db:5f:57:08:4f:14:7d:e7:da:24:78:47:a8:72:
af:fb:70:af:92:59:99:73:c9:78:9b:ab:0f:eb:dc:fe:99:28:
e9:e7:e5:ed:fd:fe:1b:dc:bb:29:c4:8b:81:ce:66:d8:23:fb:
10:17:b0:27:af:df:95:b3:34:88:11:dc:f5:b4:06:6f:bf:84:
7f:21:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:22 2025 by rpki-client