Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: s3kk+z0he/xkmKlnZmu8WAhabR7rE2S3/UlFfZuoZeE=
Subject key identifier: 9C:18:C3:CB:FC:80:2E:1E:D5:DC:E9:CA:92:73:E1:9E:DE:0A:55:68
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 0195E0EB49059389C65D84E47158D1FA1975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 03B2
Signing time: Sat 29 Mar 2025 08:01:10 +0000
Manifest this update: Sat 29 Mar 2025 08:01:10 +0000
Manifest next update: Sun 30 Mar 2025 08:01:10 +0000
Files and hashes: 1: FsCfl3c4Ltiv9Zcfet8sFDK261w.roa (hash: 0KkSs+dGUlPIvwsEqtO4YX2lHrkRDey49/pmSeBkBNg=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: VfqDaOpzVyCUNxRWL30SB7nIhHzodteO6RVRQKegbUE=)
3: dMpsd9wlXgD-cspja3jDD1k9bOA.roa (hash: NYHzPamuN1malposZb2BM/eWGsMUpeT5gZWd7cy50qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:49:05:93:89:c6:5d:84:e4:71:58:d1:fa:19:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Mar 29 08:01:10 2025 GMT
Not After : Mar 30 08:01:10 2025 GMT
Subject: CN=9c18c3cbfc802e1ed5dce9ca9273e19ede0a5568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:ed:6b:64:3d:bd:92:07:97:8c:de:12:b7:
76:5d:4d:6e:86:ed:a4:18:bb:00:c0:0f:8e:62:ec:
d8:5b:8d:41:ee:30:c4:47:63:f3:35:af:14:3a:cb:
dd:80:fe:2b:f8:ee:5b:2e:14:a1:e1:4c:f2:dc:e1:
2c:2f:25:66:2d:f6:0b:d9:42:64:db:70:67:fb:73:
d7:09:20:a5:31:ab:e7:a7:74:f8:8d:30:b3:b0:4b:
4e:c0:6f:de:85:94:4f:2d:4c:44:3c:0c:24:87:0f:
4a:3f:ea:5d:8d:94:af:29:6d:ca:d2:4d:a3:e1:84:
c7:49:1f:57:1b:46:41:17:fb:86:73:eb:95:3b:89:
f8:e4:3e:84:bf:cf:17:ee:b6:9c:e2:27:51:bb:85:
1a:74:4e:fb:4a:db:b2:4f:44:d4:0d:0f:27:fd:41:
d4:3b:df:71:0d:09:a5:c4:39:e3:1f:3e:ec:bf:d2:
6f:41:6b:2f:00:62:dd:12:68:75:9e:41:11:af:fe:
c7:ee:0e:ad:ca:8f:93:69:1e:8c:87:a0:86:c2:15:
59:09:a6:22:88:bf:f9:83:09:09:6b:dc:3e:43:ad:
f9:bc:bc:53:12:a7:8e:58:71:49:52:85:06:b2:c4:
9f:85:46:85:04:94:08:06:b1:d8:8f:61:5e:e9:e3:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:C3:CB:FC:80:2E:1E:D5:DC:E9:CA:92:73:E1:9E:DE:0A:55:68
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f3:a5:ca:40:d8:ef:ba:71:db:2b:ae:02:51:52:35:43:3d:
ce:db:ca:03:ed:4c:84:04:6d:bb:c6:31:3c:32:43:d5:98:72:
f0:93:5e:68:0c:41:e5:31:8b:ea:9b:50:b3:68:b8:75:5b:d9:
29:07:92:d3:c4:75:fa:77:d1:d0:56:ae:90:71:93:e0:31:cd:
86:05:74:de:12:c4:0b:4e:aa:a0:8c:23:ea:d8:c7:28:27:42:
ff:b2:40:6e:1c:be:d5:1b:7f:79:94:de:1b:5e:48:83:9d:06:
60:0b:f7:3b:94:28:a4:08:8d:32:24:b1:8b:c2:12:98:db:15:
68:de:fd:67:88:7f:cd:a0:96:53:b4:87:18:f9:96:b2:87:3b:
32:2a:bd:0f:fc:a1:0e:65:83:00:62:a0:66:dc:31:31:28:57:
24:8b:88:a1:e2:e4:65:a0:30:5e:7b:12:bb:ce:5f:f9:be:ea:
89:be:09:17:fe:de:1a:1d:2e:3d:16:5e:98:5f:f2:a6:a7:4a:
83:55:32:4b:17:a9:60:a0:2e:36:b9:0f:b1:ae:eb:c5:ba:26:
ef:2c:4e:b7:a6:07:92:ef:22:26:56:e1:c3:4c:b2:f1:d4:d3:
32:e6:b2:35:fb:77:e5:34:a1:37:5f:58:80:8f:23:33:b7:15:
b0:6a:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:13:33 2025 by rpki-client