Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: GLP8m0I3OqaLiFCWUw7ta7Tz0H3r4OCF0oL8RhKRddE=
Subject key identifier: 56:49:79:B7:6F:B2:D7:F7:CB:24:7F:13:81:97:81:BE:F1:94:19:08
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 0195E04682EE159804234C4B3A3D8D54B5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 0154
Signing time: Sat 29 Mar 2025 05:01:12 +0000
Manifest this update: Sat 29 Mar 2025 05:01:12 +0000
Manifest next update: Sun 30 Mar 2025 05:01:12 +0000
Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: wTr2HFR2VR8uDkZmiZTS+kysOSjhUK4S18l+9ZUoXhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:82:ee:15:98:04:23:4c:4b:3a:3d:8d:54:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Mar 29 05:01:12 2025 GMT
Not After : Mar 30 05:01:12 2025 GMT
Subject: CN=564979b76fb2d7f7cb247f13819781bef1941908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:88:f2:9c:30:b0:52:cf:88:e7:1b:e5:d0:
6a:1e:ea:5a:0b:ba:0e:09:f7:92:a2:6f:db:cb:ab:
5d:54:e7:0e:a3:7c:a1:d7:53:74:55:cd:29:3a:9d:
02:a3:ad:d6:73:45:5f:ce:52:04:04:d9:75:24:21:
77:65:a7:b8:a1:0a:2b:c4:74:88:68:15:f9:72:a9:
cd:54:04:db:75:0f:60:59:4a:11:33:38:91:56:82:
49:a3:5b:54:78:8f:c9:83:00:10:54:c3:85:25:88:
cd:40:87:ec:36:4d:31:45:ae:32:b3:32:da:89:9d:
f5:ed:09:12:2d:c2:53:29:f2:16:37:33:9b:a1:69:
f9:ff:28:e8:ad:2d:f5:2a:0c:62:9f:c4:53:45:32:
a6:c5:ef:bb:e4:5d:00:ba:5a:86:75:57:15:35:cf:
f1:2e:2a:6a:1e:10:92:2b:cb:26:c2:c2:bb:73:44:
9e:97:a2:64:c2:5a:b2:a5:d6:67:de:0c:69:a9:06:
16:17:e9:c9:45:eb:b3:da:8f:5e:a2:c1:64:ac:07:
95:8e:91:47:3f:f4:0a:d8:64:d6:12:5f:58:ed:64:
a4:34:d8:ef:fb:2a:d5:df:c6:c6:11:c2:e2:ec:02:
df:de:d8:ab:28:24:f1:6e:2f:11:44:97:9d:79:6f:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:79:B7:6F:B2:D7:F7:CB:24:7F:13:81:97:81:BE:F1:94:19:08
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e4:56:6d:48:8b:82:08:b4:7d:cc:96:86:df:84:2e:5b:22:
7c:3b:5c:ba:3a:c3:38:91:df:18:2f:2c:63:1d:1b:b4:ee:aa:
6f:0d:38:4e:58:5f:59:c4:86:a2:f0:ef:0a:65:83:b2:d0:e1:
fc:93:7f:3e:2c:3f:ae:bd:44:f7:f9:0e:53:18:c4:4a:a1:6d:
2a:15:36:39:e1:02:50:eb:11:23:e5:f0:10:cd:85:8c:99:86:
4b:03:fc:b4:2a:96:a0:2d:53:17:49:70:8c:27:d3:a9:0d:0f:
c0:f8:6a:9a:c7:04:69:1c:7e:1a:33:2a:e0:1a:d7:2a:24:33:
ca:69:ea:92:de:b0:a7:7b:cb:4c:63:44:85:3c:21:b9:eb:b0:
c9:2a:7f:35:23:32:54:9f:57:a6:3c:7b:e7:c2:a0:d8:47:97:
46:9d:a8:5b:0a:16:29:b0:4c:17:eb:52:b0:c0:5a:da:29:a8:
f6:57:e6:84:3a:63:a5:7e:e3:ca:dd:cf:0d:37:c5:b5:4c:3d:
36:66:61:b5:2c:1b:50:23:ce:72:d5:2d:31:c8:d0:8c:c0:28:
70:4a:50:ce:4e:c3:4e:4c:41:d5:49:75:5e:00:9c:72:53:c1:
39:56:33:c4:fe:09:4c:ca:87:ee:7e:a4:98:2f:7d:42:f4:01:
2e:c3:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:08 2025 by rpki-client