Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier: DJyrU0LWxBpC7vQjLiSAEHJ1lpTd/n5+fCXgpUbk+JI=
Subject key identifier: A9:C2:4B:21:59:5A:28:1A:16:42:F3:DD:48:EB:E3:52:BC:61:88:52
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 0195E00F8D82D9A96A74096E237ADDB241FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number: 02E7
Signing time: Sat 29 Mar 2025 04:01:10 +0000
Manifest this update: Sat 29 Mar 2025 04:01:10 +0000
Manifest next update: Sun 30 Mar 2025 04:01:10 +0000
Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: 4ye9dRoLIP4A/y4kTwcGA30Fs6K7mSe3I8958tIbtxI=)
2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:8d:82:d9:a9:6a:74:09:6e:23:7a:dd:b2:41:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Mar 29 04:01:10 2025 GMT
Not After : Mar 30 04:01:10 2025 GMT
Subject: CN=a9c24b21595a281a1642f3dd48ebe352bc618852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:2d:9d:91:c7:55:d1:4f:02:5c:11:02:ae:
6d:ac:84:a9:65:63:4b:cb:82:ac:37:eb:e5:ca:b3:
7e:b9:fd:be:a8:7b:43:3b:c9:8c:48:d7:62:d6:18:
6e:b1:76:4a:84:29:55:95:61:d1:83:f7:65:d9:17:
1e:9a:ce:88:62:35:11:11:61:3a:ae:43:73:02:69:
eb:5c:0a:a6:ea:c0:af:31:c1:e5:ec:24:7e:97:fe:
6b:6d:58:d4:d6:8a:3f:23:12:8a:bd:af:bf:cc:d0:
4c:6a:c1:86:f8:3b:d3:8e:10:cc:6f:d7:b1:7d:48:
ad:79:c1:69:82:e2:4b:88:e5:90:ec:bd:c0:8b:51:
c6:8f:0b:d9:0e:6a:82:59:3b:b0:cd:1f:18:58:4c:
92:c0:15:11:9a:7a:9b:a6:d1:26:66:21:fb:01:5f:
63:a3:6a:f4:58:50:23:c2:c1:9e:4c:e8:e4:5f:70:
87:14:3d:87:86:84:53:1d:7b:81:84:ee:fe:48:91:
d5:4a:2d:20:d1:f8:bc:8f:83:45:f6:3a:9b:8c:9e:
02:b5:8c:54:7f:23:b0:4a:70:0c:40:53:87:b9:01:
e9:08:fa:d1:65:71:c8:3f:e2:0e:ec:22:8a:91:52:
4f:14:b4:41:90:29:46:d5:bf:c9:98:66:36:1f:e8:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:4B:21:59:5A:28:1A:16:42:F3:DD:48:EB:E3:52:BC:61:88:52
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:59:36:48:b8:f8:0c:68:75:b4:7e:32:7c:c5:0a:57:48:7e:
41:6e:e0:45:05:65:f8:75:aa:58:b7:63:56:76:b3:53:30:fd:
79:be:83:3c:a1:d0:33:0d:cf:fc:36:27:03:ce:55:a9:0a:f6:
8b:ba:81:70:2d:0e:6b:eb:07:16:4d:2e:26:44:4f:bf:54:e4:
be:14:17:19:96:8e:ce:6f:d3:40:f8:7a:c8:b5:59:56:de:a5:
4d:71:83:59:08:e6:e3:06:a6:29:f4:b9:7f:96:e7:e0:52:48:
27:65:6b:82:3c:1a:67:01:26:c2:02:79:b0:18:b7:e6:ba:87:
ee:a7:42:af:54:a6:98:4f:03:76:42:24:27:bc:6f:2b:a0:7c:
9b:4d:1b:14:0b:05:f3:60:77:30:54:90:ca:67:9d:36:f3:7e:
e3:b7:59:bb:36:fb:05:81:ce:ff:32:35:81:54:e8:87:2d:a3:
13:59:c7:ee:37:c3:ec:b8:23:8b:89:5a:03:5c:5e:94:3f:e5:
9b:f5:3a:cc:ab:24:d3:80:dd:6c:5d:97:a2:7c:02:3e:7b:8e:
99:48:bc:77:94:18:18:0f:8f:75:80:96:09:9c:50:bd:53:d0:
bf:03:72:51:5a:ed:40:3b:43:61:d7:14:1e:73:bb:6c:e9:3d:
e7:da:08:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:55:09 2025 by rpki-client