
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File: x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier: YZxbfnDcSF+fHH9+rfXYczJqeMVjOqKnudlybnpQMMk=
Subject key identifier: F3:60:83:37:35:42:B3:4A:44:16:3A:8F:22:71:3B:5B:EA:5C:8C:05
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 0195E046D4512D0364B1D336C32EF36DEACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number: 14C7
Signing time: Sat 29 Mar 2025 05:01:32 +0000
Manifest this update: Sat 29 Mar 2025 05:01:32 +0000
Manifest next update: Sun 30 Mar 2025 05:01:32 +0000
Files and hashes: 1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=)
2: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=)
3: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (hash: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=)
4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: eiXdqCx0t1hr3n23fZy63ryrAwPPZnqYzZQmA7BUTfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:d4:51:2d:03:64:b1:d3:36:c3:2e:f3:6d:ea:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Mar 29 05:01:32 2025 GMT
Not After : Mar 30 05:01:32 2025 GMT
Subject: CN=f36083373542b34a44163a8f22713b5bea5c8c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:ea:66:6a:53:0b:26:4c:d4:c2:ad:b4:d1:
49:66:69:fb:c0:6b:39:69:7e:90:ea:76:29:49:bf:
10:52:bb:bb:6e:29:1f:61:8e:0a:9e:6a:8c:43:21:
cd:53:d1:db:b5:85:a5:14:80:0c:56:f8:31:cd:b1:
de:e6:6a:b2:34:45:05:ae:5b:6d:93:6b:42:af:da:
17:aa:03:8d:73:79:11:9d:f4:80:14:b5:8f:31:7f:
df:10:13:cd:e1:6b:44:e8:89:63:da:1e:fa:e9:b9:
76:d5:79:82:59:f9:62:a5:96:00:c5:ab:76:42:c5:
95:05:10:32:bf:a8:a0:ae:8d:d3:13:28:6b:3c:da:
e1:0e:8f:27:85:14:39:77:22:3c:ea:51:32:af:8e:
16:ce:f1:06:c3:42:da:1b:a8:b1:f2:1d:82:9c:eb:
f7:b2:f9:ad:f5:7b:06:b2:57:31:07:f2:8c:2d:c4:
5b:91:e9:2b:92:16:63:b9:19:d1:99:8e:f3:27:c8:
1e:00:87:51:cd:ff:7a:71:a2:a6:94:e1:a2:4b:7a:
c1:81:e0:df:eb:96:cb:4c:85:1d:09:08:9d:ee:d5:
f5:87:85:33:d3:f8:2d:4a:bf:33:5f:ed:27:b6:89:
c9:99:29:7e:49:50:72:8e:0a:ba:e0:f5:9f:75:8d:
48:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:83:37:35:42:B3:4A:44:16:3A:8F:22:71:3B:5B:EA:5C:8C:05
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cb:d5:06:45:6b:e7:10:0f:8a:96:d7:cb:56:5d:cf:1c:78:
da:08:47:e9:bc:70:d9:dd:8c:aa:01:ca:0a:2f:49:c9:5c:80:
1c:cf:4a:9a:f1:ec:fa:3e:ed:81:1a:7b:e3:93:4e:a3:64:c5:
e5:91:6b:14:01:ac:da:6b:61:1b:76:16:b4:f9:d2:8e:33:a9:
d0:c6:22:a0:9b:3c:85:cd:2e:2b:67:84:9f:23:20:b9:99:15:
c1:d9:f8:13:73:ba:c1:85:1f:d4:77:f4:1b:a7:dc:91:44:ef:
e7:8f:20:34:aa:3c:36:05:af:36:41:a4:75:b1:0f:bf:91:06:
df:35:1c:45:22:6c:8d:8f:31:59:1c:fa:42:2a:5d:f9:66:18:
3f:70:b2:7e:95:e9:98:ff:3d:d2:40:78:4b:3f:a5:d0:03:1c:
96:8a:24:41:2f:c1:36:25:7e:31:af:f5:a1:6f:40:5a:a0:10:
29:4d:04:21:d3:f2:48:6a:e9:9a:55:9e:24:d4:61:5b:e4:a4:
86:5f:f1:2b:82:f2:25:e6:1c:ab:87:38:79:65:4f:e5:9f:a2:
8f:4c:77:c8:7c:1e:42:d7:fb:12:fc:b1:da:80:5a:06:c1:04:
e7:12:d3:66:e3:b9:6b:b3:69:c5:87:8a:7a:f6:39:f5:2f:b7:
b2:87:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:26:23 2025 by rpki-client