Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
File: 1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft (raw, json)
Hash identifier: iXajza/5UhZlEUmMGxgSqO5YlfMxch9J5ahzfeVQZhQ=
Subject key identifier: 9C:44:7E:A3:D9:6A:7B:16:5D:C4:25:7B:C8:6C:75:8A:12:A2:1B:AA
Authority key identifier: D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
Certificate issuer: /CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Certificate serial: 0195DFD94ED2373BEF389A844E41E83B7CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
Manifest number: 03E8
Signing time: Sat 29 Mar 2025 03:01:55 +0000
Manifest this update: Sat 29 Mar 2025 03:01:55 +0000
Manifest next update: Sun 30 Mar 2025 03:01:55 +0000
Files and hashes: 1: 1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl (hash: SOGzaGa+r0pOUUc1IppNOnxyXQBRa2bkO/Quk+1Egiw=)
2: ygeNrsucj-rGn8JTBcNIhnNtCcU.roa (hash: KBkElyIB1u/4stezxnXDGq1lV/mlLUiRmV5TkOx/9qs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:4e:d2:37:3b:ef:38:9a:84:4e:41:e8:3b:7c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Validity
Not Before: Mar 29 03:01:55 2025 GMT
Not After : Mar 30 03:01:55 2025 GMT
Subject: CN=9c447ea3d96a7b165dc4257bc86c758a12a21baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:fc:9e:95:05:af:c9:03:ca:f9:68:6f:cb:
fa:c2:76:ed:6d:e5:57:43:22:4c:cc:45:d1:a8:22:
b8:3b:7e:c2:f9:76:fb:82:c0:49:71:e4:e9:88:78:
f8:2d:92:80:13:dd:4b:13:2b:12:67:48:b1:4a:f1:
8e:48:df:05:c8:26:10:b7:1e:2b:62:5e:29:aa:dd:
ce:5d:49:f5:26:75:93:ad:29:e1:01:a1:00:32:9e:
83:a9:9b:a0:46:b2:c6:62:65:85:aa:d5:e9:83:e0:
14:3f:db:91:25:65:68:43:8b:7a:6e:a1:54:25:4a:
d9:93:ee:73:97:c5:ab:af:3a:0b:9c:d4:8b:0d:c9:
5e:00:5b:bf:28:99:b1:4a:92:45:c2:93:87:37:23:
2e:10:dd:27:09:8f:89:26:88:5e:b2:78:3f:4d:69:
68:28:7b:c1:50:8d:71:5d:cc:0a:e5:5b:44:e7:3b:
5c:da:20:ed:bc:3a:e3:49:63:dc:0f:94:1b:ec:17:
5c:df:19:3d:79:12:d2:ba:f0:e2:c3:60:f7:38:50:
aa:a7:98:32:a2:e5:17:ea:30:91:c1:f8:5c:c8:47:
51:6c:30:7c:b9:29:f8:a9:fd:27:9c:22:6e:ef:95:
a9:60:22:bb:7d:da:c6:fc:bc:3c:01:4d:35:e4:bf:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:44:7E:A3:D9:6A:7B:16:5D:C4:25:7B:C8:6C:75:8A:12:A2:1B:AA
X509v3 Authority Key Identifier:
keyid:D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3d:ca:29:2d:f2:af:3d:9a:d0:28:2d:c9:d1:37:ba:2a:4d:
20:d8:0a:16:f7:f5:6a:a7:cf:ae:a1:c0:d4:29:32:e7:b7:a6:
7e:27:1d:8e:d2:0c:4a:05:c6:32:bf:25:5b:62:84:35:b0:e9:
b5:9b:4f:bc:c9:6e:27:2e:ae:3d:26:c3:6b:85:4b:00:21:72:
a0:e4:f8:3b:d4:08:97:0d:8b:b0:41:39:71:80:1f:2b:5e:c5:
66:d3:a6:40:ca:20:4c:21:04:67:43:db:78:35:8b:c2:29:1c:
8d:cd:e2:cb:f8:cb:8b:df:84:fc:d8:b4:d7:c5:2b:af:22:34:
a6:bb:7d:9c:b8:04:b3:7b:c9:72:66:75:fb:e8:cc:44:e6:f6:
71:d1:94:85:18:e9:e0:5e:0e:3f:d7:f8:fa:0b:40:66:4f:c5:
77:fb:9b:82:92:da:bb:35:56:a3:01:78:ce:16:6a:8d:82:d8:
35:02:90:c6:a8:aa:66:02:7a:e6:02:b3:9a:97:25:14:af:3f:
d8:30:72:49:a5:ae:c5:68:ba:37:06:57:68:1e:f6:8f:1d:fc:
9c:5e:7c:30:81:c7:be:ef:16:57:db:84:b5:c2:a6:d5:75:64:
67:e4:95:14:fa:4e:78:09:d7:ec:fa:f1:01:ef:17:6e:1b:ef:
b0:7e:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:25:52 2025 by rpki-client