Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
File: Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json)
Hash identifier: vL2gUPVQVoTHI9y9NCn6e8FhIaICUwxbM4dKN5NxTlE=
Subject key identifier: 80:52:3A:E1:18:BB:25:76:31:16:EF:1C:8F:E8:72:26:30:9C:DD:29
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 0195E1224B29B753FEB24AD131B01E5FF59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
Manifest number: 14C9
Signing time: Sat 29 Mar 2025 09:01:15 +0000
Manifest this update: Sat 29 Mar 2025 09:01:15 +0000
Manifest next update: Sun 30 Mar 2025 09:01:15 +0000
Files and hashes: 1: 03R0VF3AsIUztN8h2zD8N2flDJY.roa (hash: 1xiwS0dYiDHRwMXNwpfOsM1AyiKMBufOaNLQPQKn/9E=)
2: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: 9KBFbJdM+7HJOhvJubFbuEjMUnjfBLI9l+OmEQ4sghw=)
3: Es9DToahcsj0ahEtb--Fy2u42F4.roa (hash: nfMwvWvI1T9eF9JsdtFDjnCaRTVkyNEeCBV5LJRL/I0=)
4: Kk55CxMuRoABHPQT4nyNv0rGWGc.roa (hash: lvAnBMqzmoB6sfauO06Jjpq1kAnKY/291ymOUVXS2fc=)
5: Qa5zEwk763K1EispcaZSdgxy5B4.roa (hash: 1hv3iMS5WTQuyU34tHM2fX7wAkcRaS7Ns9UFZhwEs8w=)
6: ls30qglQhlzT6rdumlShksLULN4.roa (hash: QEAqfnuTNOFE0+L1NYjaIvQVrbFOKL5GAQ0VuflmL9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:4b:29:b7:53:fe:b2:4a:d1:31:b0:1e:5f:f5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Mar 29 09:01:15 2025 GMT
Not After : Mar 30 09:01:15 2025 GMT
Subject: CN=80523ae118bb25763116ef1c8fe87226309cdd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:3a:3a:9b:b1:e6:5d:77:59:a6:64:06:a7:
85:fd:7a:fa:12:6b:c6:bf:e9:0c:e7:59:88:11:4d:
16:d7:0b:c9:b9:f7:5a:9f:ac:93:fe:ab:79:ea:82:
31:1c:cd:84:3c:83:0e:51:f9:4c:7a:2a:62:bf:5e:
81:1c:38:67:6f:09:91:4d:c8:03:dd:cb:e0:c6:e3:
5c:a8:35:9e:e9:07:f9:d5:64:ab:ee:e4:7e:4e:b9:
82:97:98:41:60:77:4a:a3:31:2b:21:ad:48:2f:d2:
c3:eb:ae:e7:ee:a8:9e:f6:c2:75:da:ca:89:86:9d:
67:11:9e:1c:45:73:d4:5a:d2:81:15:59:a2:e0:94:
a2:8d:bd:e8:12:1e:12:05:4a:26:04:51:57:55:59:
bf:b6:10:3c:fb:e7:fc:53:25:b4:3f:d9:bc:42:cc:
aa:ff:55:32:ef:4a:1f:7c:53:d3:c7:5f:58:5c:6a:
9a:ab:38:5a:8d:09:77:97:5b:45:54:a3:70:15:43:
56:8e:8c:2d:fe:0d:e5:b6:af:90:6c:7e:e2:1e:95:
6a:d6:de:29:ae:d5:1e:37:1d:c3:39:35:38:37:c7:
bd:05:eb:cb:20:9c:19:3b:0c:af:83:da:6a:ee:e0:
33:5c:e3:8d:bf:36:28:08:d4:99:02:32:24:18:28:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:3A:E1:18:BB:25:76:31:16:EF:1C:8F:E8:72:26:30:9C:DD:29
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9e:02:48:21:70:d3:84:69:9c:16:49:b2:9c:e9:06:47:27:
f1:75:49:bb:89:b7:fc:d7:8b:93:ff:ae:8c:99:35:aa:83:9e:
ff:3d:6c:69:1a:aa:f2:5f:9a:6f:3d:39:dd:96:0c:da:80:4d:
22:99:ae:5a:42:30:0f:ea:f7:f5:d1:02:6f:67:0e:32:3d:f0:
8f:19:db:39:84:7e:5f:ce:ba:40:25:1e:de:8f:a2:98:51:a4:
39:de:1d:68:a8:bf:c1:06:ea:b0:ca:db:f9:55:5c:71:96:20:
01:e0:62:b8:a0:bc:d1:4d:54:10:4f:55:53:cf:ba:dc:84:b9:
a9:8b:ec:e5:94:e9:4e:ba:36:e8:77:e2:7d:30:df:cc:93:6d:
af:d5:43:e9:5e:35:bf:bf:45:26:4b:a1:12:c6:e7:97:97:65:
62:55:69:d7:61:29:06:e4:a9:17:75:89:4c:30:06:ae:16:0b:
f0:0b:d3:b6:ee:ae:09:cf:be:33:65:dd:3f:08:95:60:1f:fd:
3c:f7:16:5b:17:79:3b:78:92:cf:7a:f0:88:94:40:9f:5a:04:
d6:22:7f:d0:a0:64:9c:f5:7a:c3:15:43:55:d9:ce:4b:0a:3d:
44:78:4e:e8:58:3c:94:86:04:3a:0b:bd:53:fa:33:d3:94:2b:
f7:81:3b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:11:58 2025 by rpki-client