Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
File: bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft (raw, json)
Hash identifier: EKRFMP5a0p/oiKs8G0lth+3BkmR7tky6Jn4zqmL3rMI=
Subject key identifier: DC:4B:CD:A1:63:F7:DB:99:E1:FA:C3:19:67:7B:2A:20:7F:A9:8E:50
Authority key identifier: 6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E
Certificate issuer: /CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
Certificate serial: 0195E159BD87B72655E92BAE173775989C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
Manifest number: 10CF
Signing time: Sat 29 Mar 2025 10:01:49 +0000
Manifest this update: Sat 29 Mar 2025 10:01:49 +0000
Manifest next update: Sun 30 Mar 2025 10:01:49 +0000
Files and hashes: 1: 9LxgfTOJcoE2_jHJSOljCVVPS5Y.roa (hash: qp8gK1apqd3e4qrwJ4WSA7TFQheE7slpZrtZy4gGTvM=)
2: bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl (hash: AMIGh+Ufxx4LTfK5yKsC13aaLLYxMrUDmuNmTEs8+w4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:bd:87:b7:26:55:e9:2b:ae:17:37:75:98:9c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
Validity
Not Before: Mar 29 10:01:49 2025 GMT
Not After : Mar 30 10:01:49 2025 GMT
Subject: CN=dc4bcda163f7db99e1fac319677b2a207fa98e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:73:cc:a8:2f:7a:03:33:88:c4:84:c2:a8:
20:95:97:b4:7a:d0:4a:f1:ea:d8:f2:72:78:db:f7:
f5:30:a9:cb:94:d9:4a:d2:22:c9:5a:48:57:c2:8b:
38:1c:a6:e0:c4:75:97:ef:ec:e4:47:21:14:5c:7a:
95:18:32:29:33:14:9b:2d:7a:05:df:45:7d:e3:8f:
f4:f7:f9:5b:8d:fb:75:6e:0a:03:94:08:d6:f1:f9:
f9:4f:76:cb:ee:fc:90:bf:4a:58:5b:ef:e7:77:45:
29:36:f8:89:bb:2c:ff:49:9c:37:cf:22:c5:8c:c4:
b8:b0:2c:20:53:db:03:83:16:84:08:18:d1:ac:0d:
be:0f:47:3e:c9:ab:a0:60:c9:56:f9:90:95:d6:49:
0d:e0:ae:39:54:d9:4a:5a:96:d5:c7:9b:fb:b8:91:
13:00:4d:21:95:84:2a:09:7f:57:6f:70:74:0c:fc:
3c:23:13:d9:5b:f0:80:db:c0:44:86:12:23:1f:47:
33:66:c3:04:2b:7a:bf:37:ec:0b:9a:85:2a:47:d3:
8f:49:2f:ba:cb:a6:5b:e8:bf:95:26:25:b3:b4:5c:
a8:fb:bb:be:10:be:33:94:55:14:fd:dd:d8:9b:89:
b7:e5:35:73:1e:bb:a5:e9:db:6f:61:6b:1d:8b:87:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:CD:A1:63:F7:DB:99:E1:FA:C3:19:67:7B:2A:20:7F:A9:8E:50
X509v3 Authority Key Identifier:
keyid:6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f9:53:db:32:c2:2d:5e:1d:73:67:bb:55:75:76:5e:85:b7:
99:67:52:aa:f9:21:ac:8d:05:2b:a0:ce:8b:02:68:f5:f6:10:
38:dd:65:7c:53:67:fb:a2:40:9e:23:d3:67:63:82:21:0d:c3:
81:33:b9:a5:02:97:99:51:62:cd:87:34:f1:13:14:b7:77:42:
4a:38:65:43:44:08:ef:51:34:3e:e4:ee:8b:2f:c9:1e:4f:00:
43:d1:35:9b:ec:dd:6b:23:c6:34:a0:35:23:ee:9c:be:10:50:
da:b3:5d:1f:4f:d8:8b:3b:44:6c:f9:d0:ee:69:74:1a:58:9b:
2b:7d:3e:d5:a9:a0:ef:ba:4a:82:2c:da:08:2b:93:70:1e:b4:
03:0d:8e:da:2c:72:04:4f:50:00:4a:d1:68:17:c3:6b:08:0a:
d2:e7:37:83:12:1c:41:9e:57:7c:99:b3:c6:f2:30:b2:b0:23:
77:a6:c9:d4:9a:70:4a:3e:27:1c:00:5c:e4:21:fc:09:d2:31:
75:d6:a6:f5:46:47:88:0b:de:fa:f3:af:74:4f:77:e7:4b:8a:
b8:85:09:a6:74:cd:83:d5:e4:11:cf:b7:db:00:0c:be:9a:41:
a6:2f:3f:10:78:ec:83:a5:c9:53:17:5e:8d:81:7d:69:1b:30:
40:c9:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:23:16 2025 by rpki-client