Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: TG/6UxdJA5MCd7R3g8/X5ZNn4UD+eapBQM99koYDbVs=
Subject key identifier: A9:EF:31:18:65:36:29:76:26:15:62:EE:87:D2:B8:EA:C5:C7:DC:DE
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 0195E159CE94A6DDBD5680FC9F01D4C4AD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 0F7C
Signing time: Sat 29 Mar 2025 10:01:53 +0000
Manifest this update: Sat 29 Mar 2025 10:01:53 +0000
Manifest next update: Sun 30 Mar 2025 10:01:53 +0000
Files and hashes: 1: CLeDWh39NdLvyQS_i3NwJ9CDF5A.roa (hash: AodjA/u0IZIHWzW0wUzupROWai2JCPHe4BHHea78Ms0=)
2: IVs_hi0L8DU-XvjpZ3j52FBoeuA.roa (hash: gjbii66qiZGzea5anGixtq9DuuHhboIpMcO6QPFsj6s=)
3: S3XpEBxlerRtwSFaGLA6G44LRQI.roa (hash: Z/+jFc8Tb7annjDdHUmTXSmFMVDmPYF89/cdJ7u6K/A=)
4: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (hash: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=)
5: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: bJVdj58cGvTbF+/uSvvgXsx0ucFUoSfeWLYefaLRzQA=)
6: rwgU2mlTS06e7YPqA2lYPO26aP0.roa (hash: w9oJA8hR7uQfiHK53Tj7B18Tkd/AVTn4HnDtFZKJyRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:ce:94:a6:dd:bd:56:80:fc:9f:01:d4:c4:ad:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Mar 29 10:01:53 2025 GMT
Not After : Mar 30 10:01:53 2025 GMT
Subject: CN=a9ef311865362976261562ee87d2b8eac5c7dcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:e7:2b:87:df:25:00:3e:03:4f:d8:ce:f5:
b1:f4:13:c5:d5:1b:ed:2e:ee:c9:1f:ea:1a:d0:44:
35:5c:e2:dc:cd:bb:35:d5:dd:3d:a8:9c:71:94:9f:
75:c4:fc:68:ac:02:33:99:73:a3:85:b4:ac:97:31:
cf:80:95:d4:ba:c0:b3:8b:f8:a6:c7:a0:ae:ad:04:
3b:e7:e5:63:9d:21:3e:69:5c:25:80:4f:c8:88:01:
4b:d0:46:ac:3a:e6:18:7d:b4:30:d2:25:4f:b1:5b:
03:d8:68:fe:c4:55:33:ed:af:04:da:05:ed:a4:7f:
b9:76:6d:b2:ec:ac:8a:d7:b5:38:26:38:50:35:52:
b8:09:84:bb:9e:58:f9:34:de:03:4a:ac:ae:89:98:
41:ed:6f:b6:f1:ba:6d:1c:71:cb:c4:73:48:70:88:
be:3f:91:5a:83:17:3f:65:11:49:6b:33:bc:4a:50:
fa:fb:28:b2:b0:08:f3:38:b3:40:d7:51:cf:e5:23:
98:8e:84:e1:53:1e:d3:b5:a5:ab:be:f6:bb:58:d7:
c3:eb:ed:2e:b7:04:a6:13:c6:0b:70:83:da:18:32:
f8:91:02:0a:1d:45:89:36:ff:63:1e:37:45:49:e2:
4b:09:73:01:45:16:7f:c9:d9:f8:69:31:89:1c:d7:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EF:31:18:65:36:29:76:26:15:62:EE:87:D2:B8:EA:C5:C7:DC:DE
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:64:e9:33:8f:fe:a1:1d:7c:89:2b:2b:d4:85:75:e5:17:9b:
04:a6:6f:47:1a:2b:7b:6c:e4:02:31:8c:09:10:86:ca:e1:bc:
72:ae:b9:3e:16:42:40:94:b8:76:5c:dd:67:08:24:b7:fe:05:
86:5c:68:00:69:d8:02:3f:4f:4d:73:0b:a1:d1:90:39:35:ec:
04:49:27:96:9f:e6:04:84:5d:5a:36:d5:58:ac:53:1a:9e:8a:
51:40:a1:32:2e:5c:ea:8e:85:f7:b3:36:0e:71:96:f8:bb:73:
60:ab:61:74:9d:82:c3:82:af:a0:43:6a:3a:f8:f0:3a:0a:fd:
90:0c:12:db:cd:55:e1:89:b2:3d:67:77:04:b1:bc:21:90:33:
9c:a9:b4:fe:e1:e7:d8:d3:59:60:63:55:58:39:75:1e:6c:08:
06:c4:12:63:93:72:a3:54:03:ae:93:e7:f9:ec:5a:18:3a:4b:
be:f5:53:66:4e:2d:66:1d:4a:7e:4e:88:45:f5:42:cb:80:20:
00:2e:5e:90:bb:f4:7f:db:f3:8f:ad:0d:67:1e:77:b2:03:90:
5d:a2:f7:16:d4:e0:30:9c:20:9d:78:d9:d3:85:91:54:d2:d7:
fc:dc:77:f2:45:4c:39:53:ff:bb:ea:91:1e:e6:a7:12:e4:9c:
f0:b7:24:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:46 2025 by rpki-client