Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: /7/2lAYkwpgkRH5VvEYfx/5Vn3V9wwxp2sQzMdxtchg=
Subject key identifier: DE:42:B7:A8:BA:C0:0D:58:E4:89:20:88:70:F8:B9:CE:62:92:04:EF
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 0195E12212647B00BDA8ECA458EA9A19E825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 086E
Signing time: Sat 29 Mar 2025 09:01:01 +0000
Manifest this update: Sat 29 Mar 2025 09:01:01 +0000
Manifest next update: Sun 30 Mar 2025 09:01:01 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: RMzPjczwf9DtOpppLoiQ6uV2aXSZJQAoAwm2GhS53c8=)
2: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (hash: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=)
3: oI7kOSiG8h1OQh9w777ujGQ8d5c.roa (hash: 7bzozQwhPvIcjtgW8D6KNMw02ktIJKUDIRXI6dPZ7uY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:12:64:7b:00:bd:a8:ec:a4:58:ea:9a:19:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Mar 29 09:01:01 2025 GMT
Not After : Mar 30 09:01:01 2025 GMT
Subject: CN=de42b7a8bac00d58e489208870f8b9ce629204ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:94:22:8e:e8:12:a0:3c:25:d4:76:50:c8:
80:b0:0e:86:eb:53:1e:82:bb:38:51:fd:4d:2a:24:
dc:be:9c:6b:40:48:21:5c:a6:f7:04:1b:c0:25:80:
7f:c1:eb:aa:ca:a9:d4:f9:ca:03:1f:ef:59:60:e5:
3e:e7:20:eb:a2:bd:71:54:e1:95:56:48:2a:01:bb:
b9:6e:95:92:46:b2:3a:47:a3:46:56:8e:ec:19:b7:
f1:da:85:25:ad:a2:4f:ab:a9:8b:a1:da:a9:82:4c:
b3:2f:6b:ef:40:81:3f:42:7e:78:7f:56:e8:3a:d9:
41:89:75:b7:08:17:2b:26:e5:64:1d:4a:e5:cc:6a:
93:81:d8:ae:f6:af:bb:03:15:3b:fc:f2:b1:a3:b4:
6b:28:be:fa:32:ee:b4:37:32:2c:13:f6:99:ba:f9:
8c:47:6e:c2:06:13:47:ad:34:7a:e3:67:72:33:d7:
60:6a:c4:6a:16:7f:86:1c:97:66:0a:72:e2:66:ef:
4a:fb:0b:b2:57:4b:16:1e:43:55:6b:65:db:70:4e:
d1:fb:8a:68:f7:b1:6a:76:65:de:fb:72:58:9d:b4:
3d:f1:1e:2e:33:23:f9:40:26:80:6a:af:3e:0d:7f:
ea:76:29:04:fc:90:bb:1c:ff:8c:de:90:cd:32:c5:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:42:B7:A8:BA:C0:0D:58:E4:89:20:88:70:F8:B9:CE:62:92:04:EF
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a2:80:e9:ba:28:29:80:8b:10:c7:6b:31:9c:8a:7f:e2:60:
51:d7:6e:d8:57:4e:8f:66:89:b0:af:90:4e:68:03:ba:12:b9:
b4:fa:04:4d:b4:4d:d9:f8:8f:97:32:3c:d0:3e:12:ee:a8:b3:
bf:a2:b4:af:1d:71:ca:d6:75:b5:37:c3:1d:10:0e:f1:ed:6a:
45:a6:fd:5e:21:f1:6b:7b:c3:70:3f:48:7b:e4:88:01:bf:c3:
2e:e0:b6:ac:87:12:ba:67:d1:14:af:e5:b1:b0:46:14:57:5f:
18:87:a6:a7:57:3d:8c:e6:41:23:5b:49:4f:6b:d8:ab:01:08:
8b:14:b2:da:bc:39:c1:c7:11:c0:33:08:32:7a:62:62:e2:18:
07:0a:cb:45:0e:24:90:fe:b1:15:8b:63:0d:f2:1f:63:7f:99:
fd:66:a0:6a:8e:db:06:7b:36:68:10:d4:3d:dc:9c:82:fc:e1:
05:d2:44:69:18:70:bc:82:d8:35:8e:bd:c1:59:dd:45:c4:30:
53:95:64:c0:d8:bd:2a:ec:2e:6a:1b:60:70:44:4e:4a:55:9a:
95:56:39:21:0c:1b:44:a7:98:4a:de:dc:07:ca:d6:1e:e9:a3:
90:57:10:46:51:e6:a1:7c:96:30:76:86:63:bd:11:f4:91:e5:
f9:e6:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:19 2025 by rpki-client