Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
File: P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft (raw, json)
Hash identifier: f2QsIe7Ke6zRKtT4RQdCr2yjfMaZe213v1skS4CXCyk=
Subject key identifier: F9:55:E2:8E:53:24:67:E7:84:BF:6C:EB:08:71:46:5D:A9:04:12:98
Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
Certificate issuer: /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Certificate serial: 0195E15942D595C70143E140B4C5BE258257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
Manifest number: 11D7
Signing time: Sat 29 Mar 2025 10:01:18 +0000
Manifest this update: Sat 29 Mar 2025 10:01:18 +0000
Manifest next update: Sun 30 Mar 2025 10:01:18 +0000
Files and hashes: 1: BfNexY5OqoQ7WOolPlzeDpCCs5M.roa (hash: rSm9EPZuoDpFIDuTgtzeM5a6uFOK9MrJk+o4deyRBsw=)
2: P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl (hash: 1Uy3mjzJ+pfonlh20W5E3uQ7VdcnW/MmQFSnYkA/2Cc=)
3: uq8LGKG3oEbowZ7v4iuP9ClmWdw.roa (hash: hgRaSL//DCXKQ88iWICAvE3iKVN2MVceZAG3WSssG0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:42:d5:95:c7:01:43:e1:40:b4:c5:be:25:82:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Validity
Not Before: Mar 29 10:01:18 2025 GMT
Not After : Mar 30 10:01:18 2025 GMT
Subject: CN=f955e28e532467e784bf6ceb0871465da9041298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:69:51:c1:7b:dd:d3:41:e7:0d:b5:bb:d9:
e7:29:7c:ea:e1:12:6a:67:71:6f:83:90:63:0f:f5:
91:31:5d:fc:a2:3a:77:21:80:58:c1:26:09:58:bd:
fb:83:5d:d3:52:7a:a1:42:17:d0:8f:91:97:ac:3b:
20:4a:2e:74:0a:32:57:90:f8:01:df:5c:1a:9a:3c:
b2:59:68:46:bf:d3:c7:20:0d:dd:85:ac:b7:a4:d2:
e2:e6:ea:d9:d3:f5:48:7e:f4:98:7e:5d:3d:99:7d:
2d:95:61:1a:0b:0e:e1:f5:a3:6e:f0:dd:d1:6c:0a:
67:26:03:e3:f4:af:24:0b:d7:cd:93:c9:54:89:e1:
27:47:9b:e4:56:31:5f:e9:4d:0a:c2:8f:fd:4b:04:
d0:1e:bb:f1:07:b1:da:13:17:14:f9:a1:42:2e:a6:
70:44:f7:e0:31:04:e1:c6:4c:86:91:29:c3:9c:dc:
35:d0:b6:b2:4d:fe:2d:05:08:23:7a:cb:08:11:ba:
c2:4f:60:5e:53:c2:80:8c:b2:86:57:51:34:52:a8:
62:fb:23:82:59:a1:59:f3:06:1f:d0:1d:2b:e7:cf:
b9:a2:9b:8e:0c:00:7e:54:ec:c0:7e:be:f9:a1:cc:
37:86:f6:04:b8:6d:0e:aa:a1:90:fc:52:92:15:59:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:55:E2:8E:53:24:67:E7:84:BF:6C:EB:08:71:46:5D:A9:04:12:98
X509v3 Authority Key Identifier:
keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:3d:51:bd:f2:d9:b8:8e:e0:90:c5:e5:88:92:61:8a:1a:
9b:00:9c:e6:f1:b2:d3:68:e8:c6:35:b1:51:b1:ec:59:3e:0a:
f6:26:32:c2:69:89:44:51:4e:f6:ea:e9:cc:ed:d3:0c:88:f9:
a1:3d:03:b1:96:9a:7c:d7:58:8d:81:40:2e:a9:15:b9:4a:68:
6a:6b:d4:22:02:73:0c:d8:af:fc:99:05:9f:9e:02:7f:8b:f9:
27:08:e5:cc:8f:7f:5b:ef:7b:31:5a:8c:1c:b8:1a:82:6a:19:
9d:6d:78:3a:c3:ba:08:b3:7e:1a:67:21:de:0b:d8:00:9e:51:
59:7c:04:26:6f:db:3b:cd:1e:59:25:b9:96:da:b7:10:c7:ec:
ce:52:e2:1c:d6:f5:93:a2:cb:64:5f:cd:57:9c:11:e0:22:d2:
a1:68:b4:6d:65:22:87:67:93:b9:52:ad:67:97:5c:0b:b3:d9:
89:4d:da:c5:e8:35:f7:f8:57:c1:a4:62:ef:31:c9:a9:a7:9c:
25:ce:1e:da:ed:4c:d8:61:23:b1:f0:80:f0:08:8c:d4:0f:3e:
c8:65:44:a1:e5:cb:59:8e:7d:e5:d9:90:9d:18:9d:6b:ff:68:
bd:a2:39:11:f1:c4:fc:2b:15:95:fa:cc:2c:47:2e:6a:c3:c4:
91:6f:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:52 2025 by rpki-client