Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: wS3u4bFF2Fmucwm/pzsnApPbSaTT3ZrtWhbpru/1tfY=
Subject key identifier: B3:F8:9E:94:2E:20:07:4C:D8:F8:7C:F8:07:7A:C3:DF:2B:45:29:12
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 0195E046A68CC5D41813A18AB558AE85D3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 05:01:21 +0000
Manifest this update: Sat 29 Mar 2025 05:01:21 +0000
Manifest next update: Sun 30 Mar 2025 05:01:21 +0000
Files and hashes: 1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: aBiXCI1RhRi809x0QZXPa4V2nNkvL4Lhyr3iWuW8sK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:a6:8c:c5:d4:18:13:a1:8a:b5:58:ae:85:d3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Mar 29 05:01:21 2025 GMT
Not After : Mar 30 05:01:21 2025 GMT
Subject: CN=b3f89e942e20074cd8f87cf8077ac3df2b452912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:4b:b8:d2:ec:74:a8:bc:35:f4:55:c2:60:
a9:4a:0b:cc:a4:da:6c:d2:b5:de:9a:23:97:9c:c1:
08:27:3c:e7:5b:0f:2e:d6:7a:72:c8:9c:18:60:72:
c9:38:4a:4a:50:9b:bd:1e:47:a4:3f:40:2e:bf:29:
0a:c7:9a:fe:68:bf:4d:84:59:71:81:ac:38:e0:c1:
4e:93:61:d3:d8:ae:b4:09:c1:7b:1e:ac:91:8d:e2:
e2:79:9c:f2:ec:f6:68:20:bf:77:30:3f:b9:93:71:
eb:f7:01:44:f9:f1:ac:33:bb:41:a6:6b:99:20:2c:
79:54:d5:c7:21:e0:fb:e9:68:f5:68:91:b3:a0:78:
f9:8f:bd:8d:e9:3e:60:66:06:fb:37:48:44:cb:4b:
8b:72:22:1b:99:75:ec:f8:88:d1:c2:30:f9:4c:5a:
4e:8b:50:ca:96:20:70:0c:fa:fb:15:94:0f:84:10:
3c:5f:19:09:a2:b5:df:4a:08:dd:fa:ad:7b:8c:2d:
06:bf:9e:bd:20:cb:8c:a4:d8:ff:1d:ab:0a:ee:50:
94:5d:ea:d5:46:16:12:7b:2f:03:14:67:0b:21:5b:
c3:94:d9:01:91:f1:a2:48:69:a3:80:0a:4c:c0:c3:
0d:39:16:b9:eb:34:db:ba:37:e3:ac:75:b5:bf:da:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F8:9E:94:2E:20:07:4C:D8:F8:7C:F8:07:7A:C3:DF:2B:45:29:12
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5a:1b:a0:9f:00:b9:bc:66:1e:49:24:7c:fb:89:d6:25:45:
3c:66:b6:24:42:da:28:22:c2:bb:28:c3:f9:8e:9d:3b:97:24:
02:43:6d:a4:44:95:7f:c4:88:3c:1f:e8:02:55:20:50:4b:30:
4a:ba:b3:55:21:85:a6:a3:94:90:74:8f:16:be:d7:e4:43:ca:
5d:ca:fe:ab:d6:96:ff:3f:85:f3:e2:d9:c9:f0:dd:1c:d1:2b:
1c:aa:56:f6:ff:fe:9b:a1:55:86:fb:5d:f5:a4:c2:b7:6c:55:
89:51:ce:b6:d7:28:f3:6b:a4:e6:6d:84:b9:e3:de:6d:df:98:
4c:55:fe:2c:2b:1f:50:ac:95:d4:ab:81:99:8a:19:b8:f7:15:
92:40:f9:a5:2c:b0:8e:6f:b3:b0:f7:97:24:c2:cb:34:22:d7:
a4:14:29:0b:5a:49:ce:db:d3:a5:fe:cf:ed:a1:6a:f9:60:06:
28:59:07:65:85:62:29:1e:e2:f8:e0:10:11:e3:3b:ff:4b:c8:
33:87:1d:15:15:f0:fc:9e:fc:dc:07:e2:77:32:7a:cc:ec:96:
1c:8f:a0:04:8d:c8:1c:9e:8d:40:84:84:b6:13:53:db:3c:fd:
ea:63:2c:1b:11:62:e3:60:6e:10:15:1b:16:0a:4d:5f:5f:15:
f5:0f:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:59 2025 by rpki-client