Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier: a3ShgbtarEu05+Y+wcD8FqS7Vxltgdltt/nIYaanFxA=
Subject key identifier: 79:84:6C:3F:8B:41:1C:5E:A6:D8:25:36:FB:88:FF:ED:1E:91:67:AF
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial: 0195E07D548C81A5752B16A497908A9B1168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number: 07EF
Signing time: Sat 29 Mar 2025 06:01:04 +0000
Manifest this update: Sat 29 Mar 2025 06:01:04 +0000
Manifest next update: Sun 30 Mar 2025 06:01:04 +0000
Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=)
2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: 47MvyIyJmqtuJIKhkKdFVRlaNCOG3sdA+FIIAy1/Ht0=)
3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:54:8c:81:a5:75:2b:16:a4:97:90:8a:9b:11:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
Validity
Not Before: Mar 29 06:01:04 2025 GMT
Not After : Mar 30 06:01:04 2025 GMT
Subject: CN=79846c3f8b411c5ea6d82536fb88ffed1e9167af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:60:54:3e:60:c8:3c:b4:15:39:e6:e4:e9:
6d:7b:08:8e:7c:d8:6e:65:27:cf:01:0c:24:c2:8c:
80:c6:b5:bf:06:6a:45:be:ea:95:fe:8c:41:cb:81:
6a:40:ae:19:5d:2c:2e:f7:dc:1a:87:4d:1c:bb:bc:
05:8a:6c:f8:96:0d:45:23:e9:51:ba:01:e1:2a:a5:
09:bf:9e:97:97:cd:4b:21:1b:e2:29:7c:f4:9a:df:
df:b9:74:0e:93:f3:5f:c0:77:82:1b:0b:bb:c0:ad:
32:9b:c6:e8:c4:60:95:e5:47:d8:d5:95:c6:07:58:
a2:0e:72:fa:5d:7a:ff:e8:3b:4a:44:25:1a:c7:9d:
7b:44:97:14:24:52:b5:73:b0:03:26:77:8e:4e:cc:
89:ea:47:2c:41:e8:99:f4:a1:c8:e1:a2:22:69:8a:
2f:8a:18:91:70:e0:81:12:6c:24:04:3a:74:e9:e4:
7a:25:c4:a1:e0:5f:36:d6:c9:a9:c5:bf:fc:2d:ea:
a0:6e:72:5d:79:4b:d7:aa:b0:c8:14:93:61:9e:a3:
5a:98:ad:1b:d8:f0:60:94:74:85:de:29:4c:ba:43:
68:e8:70:1d:6c:67:79:a8:45:f3:b5:9e:02:1b:94:
dd:c0:ca:a7:ec:a6:20:1f:22:3d:e8:a3:57:26:bc:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:84:6C:3F:8B:41:1C:5E:A6:D8:25:36:FB:88:FF:ED:1E:91:67:AF
X509v3 Authority Key Identifier:
keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1c:46:9c:c7:43:2f:3b:2e:b6:70:b3:d7:08:13:bb:0b:6c:
45:e3:08:58:8f:10:41:f3:4c:72:55:d7:68:9b:81:d9:f9:ae:
7e:cb:f8:3b:ce:9c:3b:8d:7f:08:b7:be:1b:20:7f:aa:57:9b:
17:eb:29:44:cf:1b:4b:56:33:79:ee:45:08:1c:7a:b3:80:f1:
78:57:4d:01:a7:aa:42:64:48:cd:3d:f8:6b:c9:ab:8c:ff:be:
d4:5d:69:45:2f:6d:6b:fd:b7:16:59:9c:b9:da:32:0a:28:bf:
a8:10:b4:2d:dd:42:f9:10:0d:b4:d8:8b:6e:b7:8a:13:4e:eb:
b1:5a:f2:b2:3f:af:22:77:a0:89:f4:4a:1d:c7:46:a5:02:86:
b7:22:a4:b6:f8:16:0e:fe:4d:cd:d1:fb:25:73:06:79:90:ce:
cc:55:8a:f8:75:fc:9c:5b:91:a9:8b:ae:51:92:8d:2c:3f:cc:
8b:7f:91:76:35:b9:2f:97:68:aa:32:16:00:71:fd:2e:a3:4a:
23:ee:45:11:3d:6e:ba:2a:84:ad:53:9e:43:d2:41:0e:2e:4c:
82:56:f5:da:a4:33:d4:6f:15:7e:c4:f7:5a:80:6f:af:95:75:
2a:bf:5c:04:58:6d:4d:03:1c:e5:46:7e:af:37:1f:70:40:09:
17:96:b9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:16 2025 by rpki-client