Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File: b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier: hQHC30A8dFuOdLPWQ4cQHJi5gehgo5VW3P/lMPI2TZo=
Subject key identifier: 02:04:CE:96:9A:50:1A:83:BB:AB:70:2D:97:45:9C:6B:B0:DA:60:35
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial: 0195DFD8A22612A1B50D9F812C9A70E622DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number: 08CF
Signing time: Sat 29 Mar 2025 03:01:11 +0000
Manifest this update: Sat 29 Mar 2025 03:01:11 +0000
Manifest next update: Sun 30 Mar 2025 03:01:11 +0000
Files and hashes: 1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: k766edoKjOVye7cmYoos0ECaMOYaXfxGwovWcZoDuHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:a2:26:12:a1:b5:0d:9f:81:2c:9a:70:e6:22:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Validity
Not Before: Mar 29 03:01:11 2025 GMT
Not After : Mar 30 03:01:11 2025 GMT
Subject: CN=0204ce969a501a83bbab702d97459c6bb0da6035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:bb:d0:dd:2d:a0:1a:9e:8f:3d:05:ff:04:
97:93:c8:7a:7a:a8:d0:a4:47:51:f1:3b:72:3c:ec:
df:cf:ae:7a:4e:df:6d:a0:7a:85:a5:ef:b2:a1:84:
17:1b:5b:ee:94:af:19:43:e5:03:94:bb:dc:b1:09:
f8:f7:9c:a0:b9:07:47:17:43:3f:d5:a8:7e:7e:ab:
2a:59:c7:0f:45:fe:77:3f:ba:e6:79:b3:32:8e:06:
02:f4:c8:62:1a:4b:8b:a8:4e:e4:3a:21:fe:d7:4c:
fe:43:4f:29:07:65:fb:5f:88:f5:64:8a:10:d5:f1:
e1:df:32:db:c5:1f:98:89:45:2b:de:09:da:a9:21:
c0:62:f6:60:d3:ff:65:01:d0:72:c7:a9:06:86:a5:
e2:1d:6a:c3:64:9a:61:b4:37:51:e4:0a:b0:4c:e0:
cf:02:a1:ef:64:a3:48:77:ad:fb:c5:0e:15:35:5d:
95:b4:15:25:9b:dc:5b:1f:9b:be:be:9a:81:2c:8e:
fb:ea:6f:43:e4:c0:76:62:03:47:30:2c:b7:34:d8:
20:b1:d6:aa:b7:49:6c:ca:7f:00:ee:d0:23:33:fe:
89:8d:a9:7b:16:17:67:b7:b8:12:0c:06:e2:64:8a:
f8:25:4a:e8:20:8e:ba:53:78:c3:b1:41:ab:e9:3e:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:CE:96:9A:50:1A:83:BB:AB:70:2D:97:45:9C:6B:B0:DA:60:35
X509v3 Authority Key Identifier:
keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:c5:54:80:38:a1:f1:27:72:e5:d2:d1:a9:dd:ae:f4:b6:
c1:e2:09:5e:06:52:ce:f3:49:cc:a3:f3:6e:55:16:d8:4b:59:
d8:6a:31:05:d4:54:53:fd:5b:1c:87:91:0b:96:33:1d:6f:06:
0e:86:d1:fa:99:a5:dc:ce:1f:76:ed:92:9f:61:9b:65:21:c9:
56:2e:7e:fa:4e:93:6e:61:e6:52:c3:8b:d8:76:79:8b:27:5b:
84:6a:35:bd:2f:25:87:c7:ca:1a:a0:c5:f3:d5:9f:69:4f:c2:
a3:c7:1a:fe:93:a2:c1:21:0b:07:7d:9d:9b:b7:65:9b:5a:eb:
0a:41:46:93:f5:f4:55:33:dd:8b:5c:3b:a6:35:8b:fa:99:2a:
40:36:1e:0c:59:e6:e5:70:a1:f5:47:4e:33:6e:9a:e9:73:6b:
42:f4:32:02:be:33:01:3c:e6:d5:55:1e:f7:47:4b:78:df:ef:
5c:8b:2e:aa:7b:a8:31:a2:c6:ae:e4:7c:0d:60:b9:06:e3:e6:
81:8c:3d:f0:8d:d1:09:11:d3:d8:28:a7:8c:cd:8a:a4:a2:19:
41:32:07:f8:67:61:a2:fd:d2:30:6b:81:fe:a0:ac:55:d1:a2:
d4:77:22:27:11:29:45:ba:ea:70:93:31:c2:b5:a6:06:5b:68:
67:ad:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:50 2025 by rpki-client