Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: kE1176KBwoi6fNhz2CbIY2jZoHK5slCsSAsLnmRR1wk=
Subject key identifier: 77:FD:D6:68:8D:63:29:D4:B0:E3:BF:9A:8E:C3:AF:90:68:89:29:22
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 0195E07D817DE341E938648251602627274F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 06:01:16 +0000
Manifest this update: Sat 29 Mar 2025 06:01:16 +0000
Manifest next update: Sun 30 Mar 2025 06:01:16 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: UXp67kMG2nA5I937DU+tDU+geAFJEVqJZSD8bhD00b0=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:81:7d:e3:41:e9:38:64:82:51:60:26:27:27:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Mar 29 06:01:16 2025 GMT
Not After : Mar 30 06:01:16 2025 GMT
Subject: CN=77fdd6688d6329d4b0e3bf9a8ec3af9068892922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:2f:9b:05:64:46:9c:c4:cc:61:93:72:19:
6d:1b:4e:ce:93:f8:a1:90:b4:b3:bc:98:a7:e0:19:
c5:4a:24:35:9c:d6:d1:98:93:73:be:0b:a1:ec:53:
e7:06:ff:c8:b2:6c:93:6a:35:39:c4:74:05:1b:b3:
5a:ec:24:43:50:56:e0:1d:24:53:64:42:32:e2:06:
31:84:07:30:80:46:a2:f1:83:3a:63:92:5d:2d:13:
6f:86:13:3c:0a:01:df:5d:25:63:f4:81:55:9d:8a:
a3:f1:33:e7:32:19:5a:8b:fc:27:ec:34:ec:18:07:
99:5f:7a:b1:a2:38:69:84:84:b4:ff:de:ed:09:1b:
fd:96:50:e7:8d:11:9e:95:50:13:90:24:f3:62:0e:
86:a9:2e:41:aa:b9:08:70:c1:4b:b1:a2:82:9e:f4:
8b:6f:fb:20:65:45:b3:62:fe:f0:df:af:55:5b:31:
1a:55:79:fe:5e:0f:35:b7:64:4c:4a:e7:c2:ec:c1:
fd:ec:fe:00:d2:e8:ff:05:c7:86:4f:ed:7e:af:9f:
f0:46:89:38:93:d7:7d:dc:10:97:a5:39:4a:0d:fa:
1a:e2:56:c5:fa:cc:ca:7f:94:91:2b:49:97:ee:a5:
ca:ee:70:fd:4c:eb:98:65:fa:e0:52:1c:f5:bb:e6:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FD:D6:68:8D:63:29:D4:B0:E3:BF:9A:8E:C3:AF:90:68:89:29:22
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:28:c2:5b:14:60:92:9b:34:92:97:6c:a5:6b:a3:33:56:11:
15:4d:30:f4:75:8f:94:81:0f:35:cd:28:8e:7c:3e:5b:32:31:
5c:9d:97:79:15:de:2e:1d:80:15:62:de:bd:e3:91:99:36:90:
8e:d2:a8:70:c2:6d:dc:51:11:6f:68:57:5e:0b:c3:16:5a:3d:
51:aa:d9:9c:ed:f7:c2:2e:a7:be:1f:ad:af:5c:e0:5c:13:ed:
74:1a:b7:3c:05:45:0f:69:39:21:d4:6c:a3:b7:f1:ce:7e:4c:
bd:06:66:64:bf:54:da:2b:1a:78:bf:20:cf:b9:aa:91:a4:61:
b5:a5:df:c0:4e:f7:e4:29:96:65:27:39:47:86:91:32:f3:cb:
3e:d3:64:91:e8:47:98:a6:f6:44:b2:b7:06:f9:80:08:ce:89:
ea:b8:56:41:a8:cd:cc:0d:d3:ee:c1:cf:3c:c4:eb:d2:b5:3e:
20:65:b2:36:b8:a6:76:19:a9:37:d5:79:bf:bf:bf:9b:84:cd:
11:e8:8a:9e:02:50:63:de:ab:2a:9f:b0:09:f8:32:cb:0a:3a:
57:d7:35:94:85:96:38:14:fb:4d:6f:30:53:05:19:07:a2:45:
a4:57:eb:21:61:56:14:7f:fc:11:e3:42:19:d5:8a:5f:dc:21:
51:71:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:21 2025 by rpki-client