Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier: sYD9k3Wqd7XstmnYTdznA0xKsuemx7mqPRZ4rV02FW0=
Subject key identifier: BE:F0:D4:77:C4:A6:57:31:59:A9:69:E4:C9:95:16:45:A1:66:A2:3D
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 0195E159E5AC4E37C537DE7AFBB2E75DAF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number: 14E1
Signing time: Sat 29 Mar 2025 10:01:59 +0000
Manifest this update: Sat 29 Mar 2025 10:01:59 +0000
Manifest next update: Sun 30 Mar 2025 10:01:59 +0000
Files and hashes: 1: 22MFoiE6iwEXKG4ff-0g9Nk9e6k.roa (hash: 8ZAHeiN8JfpnEbf0xNsrPzSUL91MdaXwePhbLZYQBGY=)
2: 63R1CqkRJzCBTqXm_kqr_6UGOC4.roa (hash: QovmpL/thOh4yKhjTn4FNfnRr6OXEgupogya3Oy9KUE=)
3: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: 68XYPB5CXoAuC+KYjHruyPJSSXhuBLABBXSZrT8p9VU=)
4: kGkGzImsb5Dv_nGgCWEXgWNc7do.roa (hash: x9SmJ5GmGF/t3I5NSMgnwkUR+oRC+nVpi/mDc40npw4=)
5: qF-2BgBNvB9Rp0K_VFhuwpTNLrY.roa (hash: h4z+iViHaDAdXrYk5TZebHBt4+M5KGpzETHGgdp4Ztc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:e5:ac:4e:37:c5:37:de:7a:fb:b2:e7:5d:af:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Mar 29 10:01:59 2025 GMT
Not After : Mar 30 10:01:59 2025 GMT
Subject: CN=bef0d477c4a6573159a969e4c9951645a166a23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:cf:6f:48:0e:5c:2e:45:e0:12:7a:61:69:
14:21:e5:28:56:c9:46:b2:46:86:07:61:cd:dc:d0:
14:ba:72:9e:fb:5a:da:c8:15:ee:eb:c5:e6:17:f6:
b3:75:05:f5:2c:86:ae:d0:33:1a:7d:0e:5f:2d:a3:
86:53:b8:ea:f4:53:6d:36:d4:bc:8d:2b:69:ef:44:
d9:b1:c0:2d:7a:94:70:10:5a:27:54:ee:5d:ca:d2:
41:09:55:5e:11:cb:66:05:5e:21:14:11:76:a7:e1:
ec:cc:10:2f:b1:cd:81:14:2e:e9:29:26:57:78:de:
5d:5e:3e:88:a7:21:7a:71:3a:6c:3b:b3:08:1a:17:
33:8d:a7:38:94:0b:f6:c5:de:f6:f9:78:a2:b5:5d:
9a:1a:05:1f:89:36:16:04:17:75:e3:a4:00:cf:d7:
d1:c7:47:3e:96:be:07:39:16:43:7c:be:5f:3c:d9:
04:c6:00:e4:34:5a:63:a3:35:52:10:fb:84:a4:bd:
c5:46:30:04:8d:d7:4d:28:16:74:7c:51:b2:e8:ac:
f0:21:a6:5e:eb:07:24:89:98:1a:b5:78:97:c2:50:
a5:12:ae:80:80:2f:67:fc:53:88:56:eb:54:f6:94:
73:08:e8:19:aa:ad:5c:57:b0:b9:82:b3:85:68:0b:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F0:D4:77:C4:A6:57:31:59:A9:69:E4:C9:95:16:45:A1:66:A2:3D
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0c:4e:e2:05:80:e8:ed:b3:a8:0a:4a:4e:bd:ad:ac:4f:98:
8d:cf:60:2e:74:0e:1d:8b:97:47:36:c1:a1:0a:99:6c:a1:8b:
af:3b:c3:fe:f5:62:f5:9e:24:ad:69:8f:a0:f9:2a:23:df:95:
b1:c0:05:cc:88:dc:cf:b1:5d:38:5f:db:6b:49:07:aa:a3:a3:
cd:73:fc:7c:50:37:b5:a7:cf:55:28:89:1b:99:28:e7:92:55:
ae:16:97:e0:32:1e:8d:2a:0b:88:ca:e9:12:04:47:88:9e:cc:
04:bd:0d:dc:ea:5e:b3:f8:73:09:24:19:52:cf:22:11:a1:42:
86:32:78:1a:a9:26:ec:ad:24:d6:83:d3:97:31:75:df:c0:89:
21:0b:5f:42:3f:27:d6:c2:7a:8c:92:48:33:6a:7c:f5:75:26:
e3:a5:b0:1d:e3:2c:52:86:ff:4f:40:75:72:97:7b:f0:73:59:
5e:62:15:a6:de:58:3f:d3:35:61:7d:b4:db:ec:10:67:fe:b8:
92:16:8e:ff:b7:7e:bd:31:cb:24:c2:3a:81:1d:04:04:de:b7:
82:2a:7e:3a:23:35:3b:cb:65:24:01:8a:d6:0b:3d:d7:da:33:
1c:fa:e7:f7:3b:62:89:25:53:ee:03:bc:0d:1b:24:54:b6:fe:
49:f8:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:12:22 2025 by rpki-client