Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: XrpDL784cHVpx6QR266WQr+9txV2u5bD0oN0BvTzsws=
Subject key identifier: 29:D0:7F:59:9F:D2:2A:7E:32:0E:46:A8:20:CB:7B:59:DB:E0:0B:52
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 0195DFD8EC0BAA26E6B18D5FD9CEC8FDC3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 03:01:30 +0000
Manifest this update: Sat 29 Mar 2025 03:01:30 +0000
Manifest next update: Sun 30 Mar 2025 03:01:30 +0000
Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: udq182gRPTmWALhVr50VmbCkkAnOQyQBhc+W5GBmmZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:ec:0b:aa:26:e6:b1:8d:5f:d9:ce:c8:fd:c3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Mar 29 03:01:30 2025 GMT
Not After : Mar 30 03:01:30 2025 GMT
Subject: CN=29d07f599fd22a7e320e46a820cb7b59dbe00b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:bb:21:fa:a0:81:1c:95:f9:69:59:45:21:
3d:16:ed:c6:a4:22:c1:2a:03:7e:3b:6f:87:05:d6:
18:f9:3e:03:0a:65:1d:45:10:50:e8:fe:56:e9:eb:
25:fc:bd:57:25:5e:99:ef:b7:2f:32:ef:2e:ed:5e:
ff:25:f0:e8:58:dd:bf:8a:3c:8e:44:42:a6:23:c3:
ac:5a:f5:a8:78:6c:5c:c6:ca:dc:6c:67:57:9d:c3:
31:9f:92:45:ca:b9:bd:64:10:c1:1d:59:e3:1c:c8:
15:dc:bf:07:1a:d3:a4:5d:33:8c:c8:fe:71:47:51:
25:f7:76:37:92:5c:26:4b:cc:76:b7:0c:5b:9e:1a:
31:2f:16:b9:9b:19:99:d4:7c:ab:b6:8b:af:a4:9e:
7c:da:67:f4:3c:9c:f2:58:5d:ba:fc:d7:ea:84:f8:
47:6f:45:98:0d:4e:af:dd:51:6b:2c:61:ac:40:ab:
02:2f:bd:4e:78:e7:56:5c:a1:15:a5:f7:8b:dd:34:
e9:d5:7b:c0:d1:d8:91:8e:b4:01:a2:20:b2:0e:91:
3c:dd:b6:60:67:77:a1:db:ff:06:d5:1b:fe:41:06:
20:38:79:c2:90:23:f5:af:4e:83:33:a8:cd:4d:a4:
4b:a4:d7:42:f7:26:cf:bd:c3:04:36:6d:d9:1a:8d:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D0:7F:59:9F:D2:2A:7E:32:0E:46:A8:20:CB:7B:59:DB:E0:0B:52
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:07:1d:20:b1:1d:0f:f6:e1:6e:0c:ad:7c:aa:e2:e9:cd:32:
83:0d:d5:f8:8d:3c:81:a4:02:e3:75:29:4a:24:63:ab:43:58:
fe:ef:e1:61:2e:f2:71:8e:84:30:b2:17:be:e8:4d:0e:d4:32:
04:c3:c8:7f:29:3a:98:9c:a1:98:dd:e5:a3:16:43:68:db:9f:
73:b4:50:a7:9f:cc:aa:6c:05:ad:41:66:4b:14:56:34:68:9c:
c5:86:a8:01:8f:11:53:bd:ec:ee:31:e5:fc:ee:27:1d:e5:8d:
01:72:09:ef:2c:c3:79:59:de:76:f3:e1:db:b0:1a:6b:de:43:
45:2b:10:62:57:f3:b1:f0:32:f4:a6:98:a8:05:f4:17:e2:cd:
55:e7:94:35:5b:ab:d6:8a:29:b0:e3:55:13:20:a4:65:72:f7:
94:b8:b8:22:5b:d0:19:53:2c:eb:b0:83:b5:84:45:77:dc:91:
f9:24:cb:6c:32:96:bd:af:50:56:9b:49:70:a9:7e:3e:8a:09:
74:e8:5d:96:01:43:8b:22:40:2f:29:ed:aa:7f:27:73:ca:c2:
1d:fb:0b:98:7f:83:02:0b:cb:44:73:ac:e7:dd:21:bf:5d:59:
b7:0e:52:fc:09:35:cb:b3:d0:f3:0c:5c:a6:2a:24:95:10:78:
15:e6:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:08:11 2025 by rpki-client