Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: 6A4brOkWyAxSs8vobL/Ldrq+u63NUjePz4tWaICzgFo=
Subject key identifier: 17:E2:76:53:27:56:6E:06:D9:6F:B8:4C:82:BA:4A:D2:AE:EA:55:4F
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 0195E0EB4C48BFBA2F7FD9F29EC94EADAC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 08:01:11 +0000
Manifest this update: Sat 29 Mar 2025 08:01:11 +0000
Manifest next update: Sun 30 Mar 2025 08:01:11 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: hNYShZ+nQH5Azt9CA4D0zwubMpUYEYkA3LCRNcn0PeQ=)
2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:4c:48:bf:ba:2f:7f:d9:f2:9e:c9:4e:ad:ac:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Mar 29 08:01:11 2025 GMT
Not After : Mar 30 08:01:11 2025 GMT
Subject: CN=17e2765327566e06d96fb84c82ba4ad2aeea554f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:04:95:42:4d:3e:7c:ff:c5:01:ae:e2:db:
4b:3f:b4:e0:a2:1b:14:83:24:da:b0:f3:c5:a6:1b:
59:4d:de:7f:f7:ce:04:7e:04:42:11:2a:bf:98:da:
7c:7b:18:ed:a7:34:d5:f5:76:51:43:89:21:0b:eb:
e5:d7:06:64:c0:c8:b5:f7:23:d1:2a:23:bb:78:a0:
ba:66:ce:61:cd:d8:3f:f4:8b:db:b0:97:a9:20:df:
40:ab:7c:bc:88:99:79:91:e6:5a:5c:b2:5c:5e:3b:
e0:c2:eb:98:ce:94:2d:da:07:d3:9a:1e:0b:32:88:
2e:fe:49:1e:8a:98:6d:95:b5:d4:42:73:29:13:94:
5b:e8:d3:81:64:02:d8:81:65:86:9d:3b:2c:77:1b:
09:74:36:68:85:3a:8a:36:2e:27:c9:3d:c9:ee:e2:
5a:94:f7:a8:4b:52:e5:88:47:29:a8:fd:c2:e8:33:
ee:cb:d1:8a:43:3c:8e:96:c3:90:e7:62:69:bf:1f:
7f:19:5c:66:03:c2:1f:74:3a:b0:5e:9d:38:4c:ba:
3a:0b:f8:0a:d4:3a:4e:82:f6:b6:70:7b:68:49:ea:
0f:7a:8f:f4:57:cd:63:a7:9b:87:78:17:c5:e1:9f:
28:70:b5:7f:4c:62:eb:91:89:73:30:47:b6:2a:ca:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E2:76:53:27:56:6E:06:D9:6F:B8:4C:82:BA:4A:D2:AE:EA:55:4F
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fa:54:0b:aa:a4:50:cd:4b:d1:a2:78:13:e2:be:0c:cd:6a:
aa:4c:4f:d6:40:39:ae:fd:42:e6:6d:46:f2:f6:2c:fd:1b:78:
ac:5e:3e:16:44:24:ac:ca:e0:0b:8d:a6:9b:31:50:1e:d2:ca:
33:a3:06:18:80:95:5f:f3:90:39:c9:e3:76:28:83:82:fd:3c:
9b:a4:33:8e:70:5b:fb:fd:1a:01:01:ea:6d:03:80:fe:ca:2a:
d9:6c:b8:7d:97:3a:47:0e:ad:13:e2:c4:10:75:e8:fc:6a:14:
32:93:fc:a9:ca:b6:7f:7d:33:d4:d5:c9:1a:e4:19:66:15:8c:
47:28:58:53:d6:b8:55:ae:f7:6f:c0:f1:08:00:6b:bf:1d:c4:
6a:95:8c:19:33:87:df:3a:b4:f5:87:db:4f:a8:b9:7e:4c:f2:
bf:88:49:0b:84:11:a2:ba:5f:ce:42:a7:cd:50:5b:3b:44:6e:
72:52:30:56:3a:59:1a:0a:50:2d:6e:11:6c:35:18:c0:97:57:
e2:81:ee:12:fc:7f:51:09:6f:18:23:02:07:2a:19:27:88:14:
e3:fe:b9:57:82:2a:9a:fe:fa:94:ad:67:2d:b6:91:cc:67:38:
50:e6:af:c4:81:17:5b:40:37:eb:79:12:15:0f:fa:a6:07:57:
9e:9e:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:57 2025 by rpki-client