Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: weIh2rhLMcONbzZjhEfI58Lx4DzNykJhaN0xpZaZgvo=
Subject key identifier: A7:A7:CE:08:FA:52:57:34:27:5E:D8:24:3B:1C:73:CC:19:F6:E1:BA
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 0195E159FC82523A1E717317204E1C7FA268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1453
Signing time: Sat 29 Mar 2025 10:02:05 +0000
Manifest this update: Sat 29 Mar 2025 10:02:05 +0000
Manifest next update: Sun 30 Mar 2025 10:02:05 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: xHtAZeGGLCHur2TH99ck96ka3h3MfWWa/KJjJ5FjLDE=)
2: DSwyNAuAz2bJdfrLonxlYBob04I.roa (hash: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:fc:82:52:3a:1e:71:73:17:20:4e:1c:7f:a2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Mar 29 10:02:05 2025 GMT
Not After : Mar 30 10:02:05 2025 GMT
Subject: CN=a7a7ce08fa525734275ed8243b1c73cc19f6e1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:50:4d:0f:7c:00:a0:0c:6c:53:4e:10:8d:
34:d4:54:05:bd:80:2c:45:10:e5:f3:1e:fa:ce:f9:
16:2e:23:c9:27:a3:72:28:a6:dd:f7:f2:e0:35:31:
29:5b:94:c8:77:58:3e:93:91:ef:af:4f:8f:d4:e0:
d5:9c:f7:f8:6b:00:d5:f3:da:a7:31:8b:c2:b0:60:
f3:a6:fd:0d:ad:ea:fb:f3:42:0b:bd:8a:9d:48:2e:
7c:83:6b:aa:e4:53:64:ae:e5:a7:25:cd:fc:41:37:
0a:54:ae:4e:7e:27:27:60:49:aa:b9:44:ea:5f:66:
0d:f0:ab:11:1b:a2:4d:2f:0c:4c:46:29:06:82:f1:
23:b8:83:ea:4f:05:fc:e2:5a:17:6f:c7:00:b8:28:
a6:f2:5e:e8:a6:5f:c6:b7:14:ff:d9:3b:02:ae:84:
a4:98:7a:a3:9a:f8:c7:b9:14:65:74:eb:be:d0:a5:
f5:83:34:cd:a5:65:38:c7:55:1f:e8:f1:06:e9:70:
65:f9:0b:7c:98:0b:f8:90:6e:09:54:3f:4a:58:72:
bf:e2:3f:b4:24:2e:08:2c:35:4f:6b:43:2d:d7:f0:
cb:a5:64:67:dd:58:25:9e:cf:bc:30:4a:dc:64:63:
57:ad:e0:01:d9:a1:c0:ec:9d:aa:50:c1:e2:3b:9d:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A7:CE:08:FA:52:57:34:27:5E:D8:24:3B:1C:73:CC:19:F6:E1:BA
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5d:87:0f:d4:ac:07:5e:91:c1:85:fe:e3:42:2a:7d:60:0a:
a2:dd:43:f8:5b:45:b9:ae:4b:2e:df:3f:94:ec:89:85:6b:d4:
ab:d6:a5:bc:4e:01:f5:27:08:5d:c4:5f:d5:40:ec:ea:df:4e:
d2:78:6e:40:33:ee:f1:5c:c9:9c:b4:f0:15:74:4e:1b:90:66:
ee:03:d5:a0:86:c1:4d:ee:c5:42:c7:60:25:6f:8e:98:29:eb:
65:4a:ba:61:4b:ca:bb:d4:f0:5a:a0:cb:86:7e:ee:7f:fa:9a:
d7:b7:28:e0:da:68:c6:f0:6e:19:01:bc:ec:70:d0:2c:64:bb:
ae:83:c8:65:bc:e3:f8:ce:c8:1a:1b:b7:f6:da:2c:11:f2:0c:
9a:55:27:d5:04:81:16:48:11:c6:71:79:ad:95:b6:dd:7e:92:
3b:5b:21:a3:6a:6a:a7:b6:9b:8e:a2:cd:1b:6d:11:a1:ec:fe:
a4:c8:7f:18:24:6c:90:1a:9a:6e:6c:21:e0:b7:c5:eb:1b:db:
1a:f5:57:e5:24:73:07:e6:94:9e:8b:c3:c9:74:f4:d9:0d:67:
1c:70:36:23:d0:59:56:3e:bf:00:2e:47:64:7d:4b:8c:d6:e0:
d8:ab:43:21:3f:3c:ee:69:93:bd:c1:82:f1:29:8f:2d:05:db:
54:bf:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:00 2025 by rpki-client