Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: 6P+DC26X+ImK6nJW6dsQ4O8fao4/ZWlM2yZPvI9GD8c=
Subject key identifier: 8C:56:C2:81:E2:0D:41:0A:E1:88:7A:66:AB:93:1C:7F:A5:2F:63:5A
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 0195E00F9CCA6DA0C25494BDC36A0AD94EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 10F7
Signing time: Sat 29 Mar 2025 04:01:14 +0000
Manifest this update: Sat 29 Mar 2025 04:01:14 +0000
Manifest next update: Sun 30 Mar 2025 04:01:14 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: JeCv+bOWVS3AW1TMfO9JUBsS/sElB7oTFkn+Jc82cZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:9c:ca:6d:a0:c2:54:94:bd:c3:6a:0a:d9:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Mar 29 04:01:14 2025 GMT
Not After : Mar 30 04:01:14 2025 GMT
Subject: CN=8c56c281e20d410ae1887a66ab931c7fa52f635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:50:43:8d:06:1b:3c:11:7f:79:00:a1:ae:
46:2f:a4:27:6c:10:a6:05:b7:61:40:a0:e3:9e:6e:
80:91:b4:ff:34:dd:4e:7a:e7:f3:3a:fe:46:6e:4f:
c2:83:cc:0c:51:82:83:a1:4e:39:ec:95:3c:0d:7d:
47:44:36:e1:9d:82:cd:01:7c:99:b0:86:73:e5:24:
5b:29:99:bb:74:28:86:5b:19:52:2b:2d:c3:52:d3:
b0:61:36:70:63:7a:fa:e0:6e:d0:71:6a:6c:10:c0:
83:64:81:67:ef:89:6f:9e:70:37:2a:e4:dc:c5:21:
24:9c:8e:7a:c6:f4:57:7f:05:95:b1:39:94:c1:7b:
b3:2e:5e:1a:03:2e:62:b0:db:69:e8:dd:d5:34:76:
b5:09:32:9f:ae:bb:66:2d:0d:6f:6e:8c:32:25:04:
f9:f9:80:1a:f7:ba:0a:d3:99:5f:c8:53:34:18:2c:
73:a9:c8:49:71:a4:6b:2f:17:d8:cc:e9:9a:45:6e:
2a:22:1c:e6:be:b2:c4:56:84:dc:d3:8a:b3:fe:53:
df:2c:1d:75:87:6f:cd:ea:5d:a2:d3:6b:ac:75:b8:
ea:9f:90:01:7e:38:b0:0b:52:0e:c3:ee:cd:f4:e1:
0f:1e:05:30:bf:f4:7f:02:12:05:6e:9a:6f:35:4f:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:56:C2:81:E2:0D:41:0A:E1:88:7A:66:AB:93:1C:7F:A5:2F:63:5A
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e6:b6:90:e8:e2:71:14:ec:33:83:82:78:ea:56:de:c1:c8:
77:57:1b:1c:dc:1d:10:f2:f2:ab:13:0c:81:f1:1f:77:58:09:
77:dc:1e:8d:c7:88:e1:9f:e6:0a:84:06:1a:3a:eb:e4:f3:b6:
67:8c:ff:16:26:35:8a:1d:39:3f:fe:46:e3:53:0d:47:75:ab:
c7:0c:bb:49:f9:a7:7e:f9:1c:29:16:f1:66:3c:8c:ae:fc:55:
dd:59:89:e5:24:34:0c:b9:6d:c5:e1:b3:b9:52:ab:a1:22:95:
06:c6:1c:e1:ac:ed:36:dd:51:5e:e6:5e:6c:60:fe:49:4b:e0:
0d:2d:51:95:c1:c9:b2:92:61:bc:b3:ca:c6:72:6a:12:84:bc:
e7:4a:d7:e2:c2:33:4a:c4:fa:99:65:70:90:d4:c5:11:e6:4a:
93:5d:b4:c6:02:60:ce:75:55:a4:5a:1f:ed:b8:c4:10:5d:62:
09:21:90:78:30:d2:b6:85:55:13:1c:ad:61:cd:9c:2f:c9:0b:
7b:39:1d:23:5c:5d:b4:1e:93:47:4f:d5:1b:ca:7a:0f:27:34:
fa:f3:e2:49:1e:36:ba:6d:22:0c:a4:e0:2a:49:eb:a8:22:a2:
8a:1f:f1:57:24:13:db:a0:da:2e:6b:70:18:f3:ca:9b:64:19:
9a:cf:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:30:54 2025 by rpki-client