Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: nVShPkfufkvzH0aQtdCwpBnpDtt3gkSZYFXtPCcZWbc=
Subject key identifier: 7B:5B:3F:BE:C4:44:C7:76:24:C4:CC:6A:B6:29:82:1B:AA:7F:48:96
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 0195E07D4FB05E7547B0F78FEF17BEA96EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 06:01:03 +0000
Manifest this update: Sat 29 Mar 2025 06:01:03 +0000
Manifest next update: Sun 30 Mar 2025 06:01:03 +0000
Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: bk43Mxw+A7glHc/8Eswz4b5kN5WHhh94t2TeZNko5ag=)
2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:4f:b0:5e:75:47:b0:f7:8f:ef:17:be:a9:6e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Mar 29 06:01:03 2025 GMT
Not After : Mar 30 06:01:03 2025 GMT
Subject: CN=7b5b3fbec444c77624c4cc6ab629821baa7f4896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:6e:fd:d2:06:96:a7:d1:e6:80:fe:c9:d4:
78:7f:d5:ce:65:e3:0f:ab:39:64:ba:b9:a6:9b:ef:
7a:26:53:aa:a5:ac:be:a7:bb:df:cb:8f:90:86:e9:
02:9d:25:dd:12:7e:15:4a:3f:ee:ef:93:1a:37:fb:
bc:ef:13:4b:9e:1c:79:20:a7:bb:f7:44:cd:fe:18:
57:7f:f3:3b:a8:71:14:11:0c:7f:a4:e2:05:0b:37:
c9:be:3d:e5:49:c4:2d:5c:22:e7:4a:a1:b0:df:0a:
d1:3d:3b:ec:b4:de:1d:48:94:bd:41:7f:b6:b3:99:
2c:60:07:a7:ea:dc:7b:a2:2b:64:86:d8:8a:fd:d1:
92:a7:e1:6a:3f:2e:a8:f3:cc:af:cf:9b:5c:a0:ab:
34:c5:6e:40:91:83:59:00:ce:51:d6:c3:11:73:e4:
9b:f9:49:ce:4f:fe:fa:9f:a0:b1:d0:38:51:6e:3d:
6b:03:a0:eb:73:62:16:84:fd:2b:30:d6:0c:99:58:
4f:35:6d:07:f6:d8:aa:e9:29:eb:04:fa:35:b6:6d:
7b:e6:9f:14:58:c5:0e:de:1c:b8:90:58:48:d2:b5:
b0:d1:82:7a:75:d3:98:94:81:ff:26:12:a0:e8:d4:
72:36:5b:e7:c1:89:15:93:28:cc:9c:95:25:ea:9d:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5B:3F:BE:C4:44:C7:76:24:C4:CC:6A:B6:29:82:1B:AA:7F:48:96
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:37:1f:e7:8a:25:26:e2:c9:fe:0e:9f:97:5d:a6:ef:08:bd:
d2:47:d1:f9:96:95:0c:23:58:c6:b1:be:38:6c:73:5d:1d:4e:
3b:3f:47:d3:11:83:3c:6c:d7:aa:19:7b:f6:36:24:32:54:a5:
fd:32:c4:7d:a6:98:7d:dc:2a:d7:5f:07:e2:64:5e:a9:b4:8f:
f3:7c:ee:55:dc:40:a5:66:01:52:0b:fe:95:e0:08:df:0a:53:
16:db:c0:9f:df:90:1e:5b:ec:7e:60:a2:d0:b7:99:59:d6:0c:
3f:a4:ec:65:6a:ed:b6:5f:50:63:96:85:ee:1d:ef:f5:bc:4d:
f1:6c:16:49:b4:ff:10:94:ca:de:0d:40:9c:91:e5:fe:cd:7b:
8b:ca:b5:51:d4:c0:ad:9f:47:45:b4:03:33:3a:6f:53:69:ca:
c7:4b:63:eb:e5:ab:c0:92:84:db:65:b6:06:67:45:03:9b:ed:
8e:e3:a2:ca:89:f4:bb:c1:05:7b:4c:b3:d9:0c:aa:d4:24:85:
ce:c9:55:c1:5b:5b:bd:28:17:68:78:31:f9:b1:8d:13:62:06:
38:ff:c7:45:97:8b:3d:4e:16:80:4d:af:5a:c5:a5:c1:c6:71:
f4:9b:e9:d2:ed:5e:52:79:f3:f1:ea:28:f9:96:26:ed:09:32:
9c:5f:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:53:33 2025 by rpki-client