Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: 8N5kTZkKQGLBsxvTOt7indUbGU6FxC2hDoeshpX4ENs=
Subject key identifier: B6:AE:1F:C8:F4:7F:12:C3:5A:20:2A:AF:75:D6:69:BE:84:E6:EB:87
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 0195E190288996121AD2F2C94F63110581C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 11:01:15 +0000
Manifest this update: Sat 29 Mar 2025 11:01:15 +0000
Manifest next update: Sun 30 Mar 2025 11:01:15 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: fiFr1htzzMNm8ERckgOcTh79LZunRjQH5v72qEzEnt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:28:89:96:12:1a:d2:f2:c9:4f:63:11:05:81:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Mar 29 11:01:15 2025 GMT
Not After : Mar 30 11:01:15 2025 GMT
Subject: CN=b6ae1fc8f47f12c35a202aaf75d669be84e6eb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:56:0c:9b:c8:6d:bf:68:5f:37:f3:57:94:
b1:47:79:6e:75:15:32:df:95:55:16:9a:6d:b1:91:
10:0e:07:f5:37:3e:d1:a0:39:f0:50:cd:83:dc:92:
b2:80:20:bd:76:8a:80:a3:31:31:74:5b:37:4d:e2:
a1:dc:e3:aa:f0:f3:60:47:22:e9:f2:95:14:ab:08:
80:96:87:4d:b0:ab:ce:6a:ea:52:25:ec:7a:c3:3f:
0f:4b:bb:a4:16:9b:47:63:a3:9f:78:2d:8e:f9:c1:
0a:63:59:57:f4:cf:99:f5:41:49:30:74:ca:06:fb:
87:1f:3a:90:6b:cd:16:7c:30:bd:ce:c4:75:d1:20:
e4:dd:ea:92:33:90:59:ce:13:8d:34:72:92:74:40:
52:53:80:ab:d6:9e:b8:e8:46:e9:a8:c1:a6:3a:ab:
99:7b:1f:42:83:6c:a6:7a:93:70:09:fa:26:6d:6e:
98:2a:1a:89:89:9f:7d:6c:b3:88:23:1e:4e:c0:1b:
0c:d6:bf:2c:c6:85:a4:e3:17:06:02:69:72:90:04:
f9:5b:37:46:46:c6:ef:6d:ac:17:a5:8e:77:d9:d3:
88:9a:f8:52:7c:76:d0:3b:b4:34:d6:7c:4a:bc:0a:
92:64:4f:d1:9d:b7:e4:06:bb:d3:a3:16:dd:f5:b7:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:1F:C8:F4:7F:12:C3:5A:20:2A:AF:75:D6:69:BE:84:E6:EB:87
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:01:cf:99:c5:9f:6b:5b:cc:80:93:16:f8:97:45:cf:0f:b7:
35:f5:76:7a:7d:72:30:22:0a:81:60:90:c6:3e:87:4b:c3:27:
38:c0:2d:f1:89:d4:22:cf:92:cb:3a:27:12:aa:53:c0:4e:7d:
7e:15:2c:03:f0:51:14:bc:67:fd:9e:14:5e:63:63:8e:a4:3c:
4f:46:dc:ec:b1:8c:4e:b9:13:38:5b:15:41:49:d1:71:fc:34:
53:64:cd:21:73:c7:94:44:a8:63:57:ae:59:3f:2f:f8:d4:a5:
6c:3d:0c:99:29:6a:57:22:ac:d0:35:0b:f8:e6:0b:27:84:93:
d4:25:9c:5a:11:d1:76:a2:b6:f8:cd:1b:88:af:2d:fd:09:a4:
85:e2:8f:04:37:09:4a:9e:e3:ca:55:e2:bf:f9:61:b2:96:3f:
5e:1e:5d:93:a1:cb:68:4d:f2:85:76:8c:18:a3:48:fd:c5:22:
e2:21:20:dd:cb:7b:5f:9b:62:4d:38:0d:95:d2:2d:e2:79:ef:
48:44:12:11:87:10:3a:41:6a:28:8a:10:79:1d:c3:01:a1:f0:
43:f6:64:1b:62:fd:4b:af:58:bf:5b:0a:8d:2a:3a:1f:50:37:
b9:ff:cb:f9:24:1f:0f:c6:c6:12:24:7a:86:f7:bb:1b:b6:dd:
8d:05:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:33:49 2025 by rpki-client