Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
File: xJqjIm6vrB530j6PzvGJADhAA8c.mft (raw, json)
Hash identifier: 8tYTC+bbGC4CwQYzuevuKe5/BC2jQq6aZcKX8v6gHQM=
Subject key identifier: 1F:22:2E:51:D3:06:A7:1E:22:95:6B:C3:E8:FC:DF:16:80:FB:3E:19
Authority key identifier: C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
Certificate issuer: /CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Certificate serial: 01963DD5037D16027B9FEC3423D68038BED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
Manifest number: 110A
Signing time: Wed 16 Apr 2025 09:01:32 +0000
Manifest this update: Wed 16 Apr 2025 09:01:32 +0000
Manifest next update: Thu 17 Apr 2025 09:01:32 +0000
Files and hashes: 1: CNKoWKZE8SuZNoh4YaxyoaNrSZk.roa (hash: XZ7fcxHcRuoOZZ0UNaTUM9CSIHeUUC4/M/LcaLiL3Ms=)
2: xJqjIm6vrB530j6PzvGJADhAA8c.crl (hash: iuNHlJZCRH+d319BAtCzXnB+GsmXekKbMytrhwqsXNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d5:03:7d:16:02:7b:9f:ec:34:23:d6:80:38:be:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Validity
Not Before: Apr 16 09:01:32 2025 GMT
Not After : Apr 17 09:01:32 2025 GMT
Subject: CN=1f222e51d306a71e22956bc3e8fcdf1680fb3e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:7d:8b:3f:f6:2f:b0:7e:37:cc:18:0f:ba:
1a:4a:71:a6:9e:cd:8e:b2:02:2d:fb:b5:e3:b1:a4:
0e:69:dc:1d:12:ae:96:92:60:e7:b2:aa:db:0f:2a:
f3:3e:4d:c6:dd:39:08:ad:12:d9:dc:c9:35:d4:d8:
ac:a5:a3:6a:c3:7d:4a:24:5f:b8:c6:fb:44:73:1d:
80:c2:21:3d:47:26:af:f7:0a:39:b7:f2:81:d7:d4:
ac:9b:be:5a:7c:e1:f8:ea:d1:f5:d6:e4:26:81:d6:
a5:95:ba:81:b7:5c:2f:c6:27:9f:48:da:40:6e:8f:
f6:02:fa:41:8b:bd:13:59:ca:af:87:4c:4d:78:73:
07:4e:43:5d:9f:bd:44:76:a3:3f:a1:89:da:b9:b0:
28:05:fd:66:6e:83:31:0c:b6:6a:58:4d:a2:da:3c:
71:ee:d5:54:ac:39:1d:4d:1f:43:e1:a2:cc:a5:84:
74:aa:76:d9:dd:44:86:cb:72:b0:2f:35:55:ac:65:
7b:bf:e6:f9:4f:15:b1:57:4b:62:38:fc:b3:9f:dd:
ae:30:12:17:31:17:8c:6c:d8:5c:e7:02:c7:32:f8:
2a:c6:36:cb:51:4f:09:d0:69:74:66:aa:9a:12:af:
a4:14:da:16:5e:be:88:f8:53:a6:e2:9f:65:6f:46:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:22:2E:51:D3:06:A7:1E:22:95:6B:C3:E8:FC:DF:16:80:FB:3E:19
X509v3 Authority Key Identifier:
keyid:C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b0:71:b3:85:52:9b:9a:c4:a3:40:8f:b5:3b:2f:63:b9:5b:
30:12:85:17:97:43:9e:41:bf:8e:30:1f:18:01:c6:29:4d:ce:
5f:dd:f4:25:2a:7a:cd:68:9f:a7:12:77:41:c3:21:b6:da:e9:
af:19:26:e4:30:b9:24:c5:25:da:1f:c4:da:6e:d5:a7:ac:b2:
c9:a4:c4:10:11:8b:71:a6:78:6c:09:83:62:96:cb:80:52:2f:
8a:49:cc:91:bb:4a:48:1e:98:76:be:19:8d:49:b4:db:39:47:
a5:0f:b0:b1:d2:a4:4e:5e:dc:1f:98:1a:3f:78:b6:7f:90:ba:
57:02:a8:66:9d:5f:5c:bd:c3:c3:25:99:b9:4a:3d:0a:58:24:
52:08:7c:c4:f1:90:16:14:33:9e:e2:fd:c2:2b:8f:1d:9c:bf:
b5:cc:f4:37:05:18:2e:a5:54:85:a0:75:36:70:8a:53:16:3b:
f3:35:70:9a:ca:d9:e0:52:40:5d:72:20:cb:2e:9a:27:3f:bc:
ac:3d:27:39:18:4b:fb:f1:b9:75:cd:18:fa:17:3b:66:6d:7c:
99:c3:65:97:a3:e9:99:4b:73:aa:f9:5a:d4:03:01:3a:63:a0:
10:92:fd:2e:14:ee:03:4f:63:60:98:c0:4d:83:90:74:7c:35:
89:54:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:49:40 2025 by rpki-client