Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: BfZQwK0r8cGBW9QYdySVseX7knOkA94dkp0iIET8Hwc=
Subject key identifier: DD:9E:E3:C8:1F:ED:EC:BE:13:2F:DE:1C:59:22:3B:D7:9B:EA:BC:DF
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 0195E0EAFF25A9B77E4389B7B629013060BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 08:00:51 +0000
Manifest this update: Sat 29 Mar 2025 08:00:51 +0000
Manifest next update: Sun 30 Mar 2025 08:00:51 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: w3PvzI9lNTmlGYNqgYWBoC4LYXIbkmNik09ThV4NVq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:ea:ff:25:a9:b7:7e:43:89:b7:b6:29:01:30:60:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Mar 29 08:00:51 2025 GMT
Not After : Mar 30 08:00:51 2025 GMT
Subject: CN=dd9ee3c81fedecbe132fde1c59223bd79beabcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:c2:31:a7:f9:42:ff:01:e7:c1:8c:e4:62:
c8:96:91:0c:58:50:5d:48:d2:56:1e:2f:11:99:b8:
70:b9:e1:58:99:77:af:fc:6d:9f:ad:03:2b:58:1a:
5e:39:aa:6d:0f:56:93:90:1a:7e:d2:e4:0d:aa:da:
63:b0:a3:c9:00:80:60:1f:61:76:8c:98:4c:ca:b4:
fc:ff:85:49:39:71:81:a7:00:fd:da:6b:6c:7b:16:
18:9a:e8:88:08:08:84:fc:50:4d:7a:93:78:0e:54:
3f:2f:5f:e5:c8:e5:7d:bf:ba:b9:29:d7:95:48:2d:
40:da:09:f1:22:4c:1a:75:03:d7:65:f9:48:d0:c2:
d5:99:bd:df:49:42:4d:d4:04:4b:ac:10:ee:48:12:
41:5e:50:5f:a0:c1:7b:f7:ca:15:02:20:a2:f3:c4:
f4:4c:b6:cd:80:bd:fa:c4:50:c7:e5:45:98:78:7d:
a8:a4:25:af:c4:e7:f2:ef:cd:98:eb:b0:27:12:c0:
4f:64:35:3b:09:56:2b:16:ef:46:b7:e7:90:64:a6:
38:1f:1a:f4:62:d6:c5:0a:69:f6:7d:d5:7b:92:23:
05:39:40:4b:5c:8a:c6:dd:92:9a:76:18:7e:18:5c:
e4:18:f9:c9:92:bc:90:36:20:07:f4:dc:38:9f:b8:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:E3:C8:1F:ED:EC:BE:13:2F:DE:1C:59:22:3B:D7:9B:EA:BC:DF
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a9:5a:a4:8f:77:eb:53:e4:9e:d9:d6:51:b6:18:87:a4:38:
43:ed:45:81:b5:c4:e5:a0:13:46:21:2e:2c:9c:d6:b0:ef:e3:
d0:4b:0e:ca:04:61:61:7c:f0:49:1b:b9:19:7d:63:07:fa:7b:
70:76:71:7f:cc:9f:db:d9:5d:b0:fd:c0:40:d2:94:a2:c0:63:
46:55:c7:f9:db:01:4c:d4:c5:af:41:17:bf:2d:85:45:18:f5:
17:86:7d:0d:60:d0:04:3a:8f:21:b1:55:63:c0:78:f7:17:1a:
b5:9d:af:e2:cc:ed:bf:c9:3e:c9:18:b8:31:42:73:f5:a2:2b:
86:d7:a3:e0:4a:2c:64:52:5f:71:60:0d:85:41:67:07:e7:5b:
7b:d1:ac:25:7b:98:ce:51:56:2f:ab:42:4b:3e:ca:75:e4:3e:
c5:bb:25:43:e1:cf:ec:39:06:1b:3a:39:e9:9d:d5:23:51:a4:
1f:55:4c:b7:ef:32:1d:2a:e4:79:a0:e7:95:61:dc:67:e5:01:
91:b6:d0:8f:b2:1a:cd:84:80:91:2d:d6:b9:3a:57:42:8a:f2:
31:b4:1f:9d:00:f8:30:7f:16:34:75:bc:8c:50:42:4e:7a:0d:
81:a0:69:c1:3e:5c:d6:81:d2:f9:64:8d:c1:eb:6d:02:f6:ac:
bb:20:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:17 2025 by rpki-client