Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: BkiK//LSYqeEEm+SxI2EKWZXTcszE4nRHJIj8hknfg0=
Subject key identifier: 5F:81:E3:B0:72:D6:73:43:D6:50:FD:7F:F4:2B:C5:54:43:8F:4B:16
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 0195E07D59619FFDB92838C55D99703BBCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 08E9
Signing time: Sat 29 Mar 2025 06:01:05 +0000
Manifest this update: Sat 29 Mar 2025 06:01:05 +0000
Manifest next update: Sun 30 Mar 2025 06:01:05 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: plYFEC+1pzKbOrOmu1CkTnklpR8dbMcfOKXp1r2SscY=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:59:61:9f:fd:b9:28:38:c5:5d:99:70:3b:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Mar 29 06:01:05 2025 GMT
Not After : Mar 30 06:01:05 2025 GMT
Subject: CN=5f81e3b072d67343d650fd7ff42bc554438f4b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:b6:19:20:cc:07:d5:77:03:5a:09:e3:46:
63:4c:de:86:d4:35:26:25:8b:00:e2:87:2b:43:b2:
52:48:ef:f2:be:fa:f9:be:12:90:3e:ae:00:d9:4e:
3b:db:9b:f1:88:12:e9:5e:57:32:94:1f:db:10:73:
2d:39:69:70:cd:80:bc:df:9f:cc:50:d1:bc:df:64:
a2:ac:55:1c:96:ed:d5:da:be:f7:87:76:da:ba:0b:
ab:02:65:f3:20:d9:53:80:d2:e7:e9:08:9a:2c:13:
f1:98:da:f1:f7:56:a9:1f:79:37:c7:ca:cb:0a:2d:
45:e5:9f:57:b3:c9:5e:83:72:98:cb:a3:46:36:97:
38:bd:90:1e:54:da:2e:9f:a2:22:ad:28:7f:df:68:
f1:a9:26:78:c9:a6:ea:fd:d1:30:cd:8b:95:12:c5:
5b:06:a7:3c:81:2e:e5:f0:61:f5:a0:0e:50:82:4f:
1a:ed:f5:41:2a:3d:2f:6b:ab:ab:76:96:fb:51:8a:
e3:82:fa:cd:c8:3d:c1:49:fa:fa:69:2d:78:49:25:
7a:2d:a3:fa:c4:d1:f4:3f:c3:00:1c:a8:a0:32:e1:
9d:87:61:2f:49:4e:de:c6:e2:ed:9c:f5:22:d0:37:
b1:f8:52:8e:c0:79:9a:a9:8a:c5:4e:d9:b1:e9:44:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:E3:B0:72:D6:73:43:D6:50:FD:7F:F4:2B:C5:54:43:8F:4B:16
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ec:01:45:5b:a2:b3:64:18:9e:7a:7e:89:7f:ac:2c:68:ab:
8c:62:57:54:41:82:c1:d4:9b:cd:44:90:7a:66:7e:e0:d8:ab:
46:ce:df:c6:f4:2c:92:51:be:3d:e4:58:5c:b1:07:98:53:1e:
e3:5c:27:b0:a8:85:2e:4f:7a:17:6a:7c:e8:a0:92:36:13:f1:
57:74:df:15:b8:28:2a:1e:98:0d:8e:54:8f:00:2f:b3:4a:1f:
be:e7:b9:5d:2c:8b:9b:1f:a7:fc:59:da:59:92:4e:d2:62:d6:
06:0c:c6:4f:49:6a:77:e3:df:f2:1f:59:a7:e8:4d:82:a2:de:
9e:23:02:c4:05:4d:b3:7d:1b:51:86:5b:89:20:8b:4d:cb:f8:
f0:db:62:fc:18:c6:b7:76:a0:a0:dc:36:fe:cf:dd:d8:8b:70:
4e:ec:42:0f:7f:84:13:42:34:ba:6d:38:32:b4:70:40:ef:90:
5a:e7:74:53:48:94:9b:be:d0:02:55:99:4f:f7:0f:8b:e0:07:
39:bb:50:ec:ec:7b:dd:06:ca:52:22:7b:8f:70:34:52:62:0f:
5f:24:17:f3:68:c6:d5:bc:31:22:48:77:aa:5d:f2:48:0b:06:
8f:1c:7e:14:3d:34:78:20:74:eb:e4:53:0c:bf:eb:8d:1c:b4:
a4:d7:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:24:57 2025 by rpki-client