
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier: MPIkmdhEl6RBYXd9yHT3Rlf8gT2H/a5bx1EaCMktiK8=
Subject key identifier: BE:F7:B5:7C:6B:42:3E:FB:CA:0B:5E:AB:74:4C:C8:BF:CC:D5:AB:66
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 0195DFD8B4515C386D1245EFC8CF2CD9432C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 03:01:15 +0000
Manifest this update: Sat 29 Mar 2025 03:01:15 +0000
Manifest next update: Sun 30 Mar 2025 03:01:15 +0000
Files and hashes: 1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: 8mjVVIFYGVlpcb1qXKLeLqsptVuHdzcCjmrz1acByvk=)
2: DgSG9NAY-GeZhhQF_9nz_5bnH4g.roa (hash: HVd5RwrEtlWn4VmR//6rMsJVil50z8bOvrCZBZiqbC0=)
3: KW9AN_X4Hh4VKuAnb6bJtRrKymg.roa (hash: J21F/I0zRgekIus74H7I/v2eoj4Bzdqg85T8XsMU8eI=)
4: KaCCbIDfk6xPLr8lzeQM2ayQkYY.roa (hash: stYyC3DZ280ukMQVQAStdzjvt9KMG36guiRh8dH8BRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:b4:51:5c:38:6d:12:45:ef:c8:cf:2c:d9:43:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Mar 29 03:01:15 2025 GMT
Not After : Mar 30 03:01:15 2025 GMT
Subject: CN=bef7b57c6b423efbca0b5eab744cc8bfccd5ab66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:77:18:89:dc:25:1d:d2:c2:26:07:6c:7e:
d5:47:fb:84:ea:47:c2:34:d3:ea:5d:62:5a:a0:36:
0c:87:ff:1c:87:8b:7c:99:f0:af:7c:ed:4c:ef:b2:
58:3c:c8:3a:1d:e2:47:8d:c5:7a:fc:bc:1a:32:95:
87:8d:77:6d:ba:4f:97:b7:04:53:12:f8:bd:58:75:
1b:ef:33:8c:97:91:84:f0:29:f9:f4:79:85:b5:fd:
92:a2:89:28:8c:cf:f5:27:57:37:9b:18:51:24:ad:
61:14:65:41:79:8c:b5:4f:8c:9a:d9:eb:6d:d1:00:
7a:f2:04:c5:82:45:ad:83:8d:4f:cb:95:3a:05:fd:
f2:16:92:30:f0:fb:b0:bc:d7:bb:3a:bf:6d:e7:36:
4d:29:34:00:d4:b7:27:49:c4:1e:c5:69:84:19:66:
61:ce:90:e6:cf:38:16:cb:ac:bb:0c:04:5b:d6:e3:
b3:d6:b0:86:c6:4b:7d:92:cc:45:bc:e2:23:12:33:
f0:be:8d:6c:92:68:bd:7c:d5:87:76:f3:bc:78:49:
14:49:66:30:bd:27:2a:03:a1:16:bf:4a:96:ee:e7:
1c:5a:4e:e9:1a:a3:86:59:3a:23:e2:76:1c:a3:1d:
ed:5a:68:e5:6e:5e:56:f1:a9:f0:7e:17:84:c1:c8:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F7:B5:7C:6B:42:3E:FB:CA:0B:5E:AB:74:4C:C8:BF:CC:D5:AB:66
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8e:90:a7:ab:10:ee:5e:54:32:f0:be:d1:d1:56:67:94:30:
2a:05:f7:5c:bc:1e:6a:6d:73:67:4b:e3:47:a1:06:04:ae:60:
27:7d:20:6f:b5:de:21:55:61:64:db:2a:e4:c6:03:85:da:e1:
d9:2e:d1:73:f7:fa:cd:45:ae:2d:2d:36:2d:53:b5:d1:33:6d:
d6:9f:7e:73:75:02:2a:01:e2:7d:00:12:20:87:43:10:87:e2:
34:4f:17:5a:ce:8c:08:7a:c0:dc:de:ec:6b:a9:d2:a6:83:e6:
69:1c:d4:22:22:0f:07:8d:ac:43:59:62:4e:53:da:49:f4:68:
ec:78:8d:0f:0b:8f:be:7a:cc:75:75:f8:7a:af:58:1d:c8:90:
ed:ca:b7:43:61:28:ef:88:34:86:7a:f4:e3:f5:d6:c8:0a:63:
4a:e3:ea:e1:f4:c4:fe:aa:09:4c:8d:e7:46:43:a3:48:9b:35:
a6:03:a0:8d:ac:a5:db:d6:e4:2c:a1:b5:9c:41:19:3a:82:2f:
fb:4a:79:75:56:87:ab:78:22:3d:ff:fb:ec:7e:53:39:01:e9:
08:04:da:5a:a8:49:e7:54:31:87:24:f7:6b:7a:57:a4:25:fd:
8d:39:63:e5:5d:1a:d8:88:3a:c7:b5:a4:d0:82:80:2e:d3:d9:
bc:9b:0c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:35 2025 by rpki-client