Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: 0u1bFbXP7xyRPLPkzKr74RE7SufPVxZKqDGY67pHdoE=
Subject key identifier: 08:CB:68:6F:71:52:ED:34:AC:3E:56:FB:36:84:D9:AF:E2:CB:EC:8F
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 0195E00F98E500F0D09D72C3BB90D7E1A6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 09EA
Signing time: Sat 29 Mar 2025 04:01:13 +0000
Manifest this update: Sat 29 Mar 2025 04:01:13 +0000
Manifest next update: Sun 30 Mar 2025 04:01:13 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: Y0A5vRS3kMDIZPLyiqzNFBJ63y3o9cOL17LY0ftYc08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:98:e5:00:f0:d0:9d:72:c3:bb:90:d7:e1:a6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Mar 29 04:01:13 2025 GMT
Not After : Mar 30 04:01:13 2025 GMT
Subject: CN=08cb686f7152ed34ac3e56fb3684d9afe2cbec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:11:2e:1d:c6:89:41:06:24:7f:de:cd:1f:
ad:36:45:5a:44:1f:6e:94:d0:9f:5c:15:37:8e:ab:
a7:49:f8:b2:cc:80:05:da:e5:ff:07:5f:d8:05:a2:
82:63:77:af:b9:4c:3c:70:9e:c0:7b:8a:a7:d4:c2:
aa:f5:0d:40:c0:7c:71:c7:6b:81:ea:dd:90:b4:c0:
fd:98:29:35:07:e5:02:ff:e9:68:b5:51:ec:80:65:
f2:3c:71:ef:88:8b:9a:34:18:35:d6:3c:a9:53:37:
80:09:5c:2f:db:b1:4f:cd:f0:02:b3:86:26:09:b9:
ee:de:18:21:5f:ca:54:19:9c:f9:0b:8f:2d:b6:03:
44:e7:ce:8a:04:79:09:38:c5:62:31:40:53:a8:1a:
aa:f7:74:70:70:4c:6f:a6:03:b9:e0:37:e7:70:fa:
98:58:96:c8:bd:9a:a0:9c:9a:39:95:96:ef:3e:5d:
26:a0:67:43:a9:f0:c1:1d:a6:61:23:a7:45:78:99:
ec:cc:ec:9c:f1:da:e7:e7:70:1a:aa:ed:d5:76:bb:
ce:d7:b4:48:e5:40:7d:66:e7:0c:a8:45:92:10:1b:
5d:9c:e2:ac:7b:ac:f8:c3:07:57:26:88:65:32:e8:
53:10:a1:ff:5f:16:c4:d2:3c:df:a1:5a:f7:bb:d4:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:68:6F:71:52:ED:34:AC:3E:56:FB:36:84:D9:AF:E2:CB:EC:8F
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f3:32:e0:93:dc:9a:c6:68:34:0f:59:ec:57:7c:63:2d:2e:
f3:58:c5:2e:cf:a3:8d:42:28:6e:35:d5:0e:bc:b8:25:ea:2b:
ed:ed:12:12:79:f8:0e:bd:d2:e2:7e:0d:f9:9f:18:a6:30:55:
95:90:3c:56:4e:74:ed:e3:4c:26:73:71:cd:3b:15:c4:2b:db:
d7:fb:98:6a:1c:e2:e7:96:cb:14:00:ce:1f:d3:ec:51:55:65:
c3:2f:14:b3:fd:df:af:d9:f4:99:2c:ea:e2:99:68:6d:ce:44:
c3:8a:9e:f2:a8:0e:00:52:b8:49:59:36:4e:d0:e4:78:99:e2:
2c:21:db:da:ce:f2:67:b1:67:6d:74:be:1f:db:e9:2c:b5:21:
97:f9:81:c6:45:36:b8:75:88:43:74:91:9f:1d:82:03:eb:35:
cb:07:20:78:bd:16:e2:22:3e:70:f6:ca:62:4e:71:02:11:cd:
a4:15:e9:f9:1c:72:a5:40:2f:56:bf:b1:70:79:43:bd:1d:1f:
39:e3:02:be:5d:63:95:45:30:c4:d6:ce:8d:03:a7:b6:90:4f:
96:33:8e:ac:e9:7f:af:a1:05:ed:a1:a7:26:69:53:fc:d7:0c:
7a:eb:27:b7:1c:63:9e:fa:35:f0:0f:42:f3:d2:5d:37:ba:b2:
56:a4:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:47 2025 by rpki-client