Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: nSKawo0c3kymCa3jjxYYpAj9xCAk28JYYCL8MGi8CGY=
Subject key identifier: DC:B4:66:85:87:7E:D7:2A:5F:1A:99:A2:9B:5D:59:4F:5F:02:AD:9E
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 0195E07D4E2985EBE3DC7D153AF047481FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 048A
Signing time: Sat 29 Mar 2025 06:01:03 +0000
Manifest this update: Sat 29 Mar 2025 06:01:03 +0000
Manifest next update: Sun 30 Mar 2025 06:01:03 +0000
Files and hashes: 1: FIuiasWdjO3SZ5YCZyp495O6-Mc.roa (hash: AdKefC+I7JKd6sZS8fd83sJqmU6HrKCEQYygObuAMT0=)
2: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: 2RxuLhszEpRUOVKSwNEcNybh1VRURBdzrONOfJOWeEo=)
3: uAqsYudX7mPIe3ZhGSNb-LLk9zw.roa (hash: mQhnijyqTK1dj7ry7R8uLAun/5RKJF5onMi2LcOOMfA=)
4: xS11sqn1yyKhK8owzSnnVrJ38_4.roa (hash: Q8QkF/vYZYfACSyCcmshuktJoPK49D0JpDA/QO1e388=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:4e:29:85:eb:e3:dc:7d:15:3a:f0:47:48:1f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Mar 29 06:01:03 2025 GMT
Not After : Mar 30 06:01:03 2025 GMT
Subject: CN=dcb46685877ed72a5f1a99a29b5d594f5f02ad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:c9:75:ae:57:77:db:b3:b7:ee:ba:71:ad:
87:f8:72:ed:6a:d3:a1:a1:cf:fb:a2:e8:c6:f6:59:
a4:90:38:82:1c:00:b3:0e:7f:73:e0:44:ca:e3:04:
d8:22:52:ed:60:c5:0f:c2:14:d0:7e:74:c5:97:e4:
33:b6:a4:04:6a:e4:20:ee:74:64:4e:34:29:b9:fe:
08:92:97:92:91:92:23:cc:08:4a:d2:f4:43:a4:4e:
84:6e:72:5c:1e:ca:5d:2f:06:68:71:53:26:c7:d7:
63:e3:7e:db:27:17:e9:cf:5e:61:03:c7:27:4b:a6:
52:80:75:b4:9b:38:6f:c4:8f:99:0b:b6:5b:99:a5:
12:30:ef:ba:23:9b:c7:a7:f0:9f:67:75:2d:70:15:
10:ea:67:6f:b7:29:77:ce:c1:66:30:ff:2e:ed:2b:
24:04:b3:3c:ec:c2:79:c8:35:55:53:12:cc:5b:4c:
31:bf:8c:63:9b:f4:4b:fb:e5:26:9b:52:89:8b:2e:
f7:7b:80:e0:1d:33:77:26:4f:16:b6:13:cb:72:d9:
f7:9d:34:0d:68:d7:6b:3e:15:39:af:e9:be:d2:8f:
b5:2e:6a:25:61:d2:7d:d2:03:37:5d:21:84:2d:04:
b0:d8:97:f3:29:bf:66:a8:20:45:d4:9b:33:20:1b:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B4:66:85:87:7E:D7:2A:5F:1A:99:A2:9B:5D:59:4F:5F:02:AD:9E
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:81:60:11:6e:f4:00:17:8c:de:2b:36:56:19:88:5e:e5:28:
98:22:d8:34:09:25:26:3d:e5:41:e4:e4:68:f8:fb:63:38:3f:
6e:85:c6:a3:6f:e7:58:00:0f:0f:e6:71:2e:41:9b:2a:9b:46:
3d:6a:c2:90:27:80:1e:43:94:27:bb:cf:d6:e0:57:b6:f2:4c:
1b:95:0f:96:bf:7b:7f:91:38:29:02:2d:ab:e9:3d:a8:03:d9:
f7:8b:90:ab:14:75:c0:a7:e2:0b:9c:4f:db:ce:87:90:d8:4a:
b0:2c:31:f9:b5:a0:f9:d5:c7:cb:f9:45:b2:d9:51:c4:23:e4:
7c:e6:4d:2e:16:79:be:39:b3:93:28:44:d8:b3:c4:51:da:b6:
bd:d7:1a:11:d0:1c:6a:43:b0:71:6c:0c:46:99:1a:f3:55:94:
d9:90:44:f4:4f:30:9a:b4:be:e1:cf:81:96:23:f9:47:d7:91:
d8:37:8b:88:23:ce:aa:da:b0:74:47:0c:a6:9c:ad:2c:b3:26:
4e:2d:1b:cc:af:a6:b3:62:74:26:9c:78:e8:e7:66:3a:4b:59:
37:34:30:67:27:5a:a3:3f:63:94:51:45:60:f0:5b:dc:56:f9:
6f:2c:f4:f9:4a:7a:ad:d6:5d:1a:62:84:28:a8:b1:5d:87:7e:
f5:57:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:32 2025 by rpki-client