Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
File: zXPyONls9npe_Aw3R2_TBgKa9VI.mft (raw, json)
Hash identifier: fHfJ9sTtM7m9ovUsbD7xu8eBJ2N6MIiQRXd3KLxHvpU=
Subject key identifier: 68:28:E9:C9:2A:94:A3:CB:71:87:7E:49:D8:64:37:82:05:18:E5:45
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 01972FA881A9F68A73BFE2824FB74635DF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
Manifest number: 1572
Signing time: Mon 02 Jun 2025 08:01:01 +0000
Manifest this update: Mon 02 Jun 2025 08:01:01 +0000
Manifest next update: Tue 03 Jun 2025 08:01:01 +0000
Files and hashes: 1: 1IglzTgNxvlQxtZzdqvHXP8KoF8.roa (hash: ONhCC/oPBTKCApZ6GbcEqvO3nMk4C52NzJJDkv5+JsI=)
2: BN93epoiflbuobmxVOrnJQZcb5s.roa (hash: tPBXpEVrebg3/mFW8ov1/UOfYTfxAPNL3JWDyTkPOJk=)
3: HT1N8Mmz6IMM5YW385P2T31kK7g.roa (hash: eDZrD7or10sxe0ZnfIhEw2KQZGg5eDEQrsVwHBWFKyk=)
4: zXPyONls9npe_Aw3R2_TBgKa9VI.crl (hash: lUjsne/38RAfxKjlaJeqqBJY0UUa5VeDlmdRT5kbHOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:a8:81:a9:f6:8a:73:bf:e2:82:4f:b7:46:35:df:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Jun 2 08:01:01 2025 GMT
Not After : Jun 3 08:01:01 2025 GMT
Subject: CN=6828e9c92a94a3cb71877e49d86437820518e545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:0f:13:95:3f:0a:3d:b8:28:87:d9:ab:4a:
82:70:46:b5:21:58:82:92:7c:ff:09:b0:52:90:c2:
73:94:1b:f3:06:70:84:23:89:4d:29:47:b8:2b:34:
16:4b:82:f0:65:12:d2:c0:93:e9:c5:25:10:11:6c:
7a:01:eb:61:d3:aa:49:1f:56:db:30:a4:13:88:55:
2e:4b:b7:cb:68:5c:77:c0:2c:a1:24:3d:4a:7b:aa:
f7:de:87:52:df:bb:12:5b:62:de:72:ea:d0:f0:c2:
b4:e9:b4:cc:b2:40:6e:64:37:42:19:55:70:19:78:
23:c3:6e:ed:e7:d6:6b:40:b5:41:03:12:ba:49:53:
19:28:63:4c:59:04:20:d1:1c:0d:b0:a5:2b:9e:0b:
95:6b:86:6e:6f:aa:58:98:3d:cf:fd:64:b4:0b:5b:
49:5d:cc:4f:c3:5d:6f:9c:e2:b0:a7:6b:44:f2:8d:
e0:7c:f2:6d:5f:52:0c:a1:b4:74:1c:a2:09:f2:77:
f6:a9:c0:ff:a6:4e:a1:7b:c8:9a:04:fa:a6:22:d9:
b5:95:3b:e0:21:f9:a3:a3:b0:06:c7:f8:7c:5e:61:
75:6f:5d:91:e0:ee:e8:0f:54:8d:cb:f2:7d:56:c5:
c5:7e:ba:22:ec:66:3b:78:6d:4f:04:7a:e8:10:52:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:28:E9:C9:2A:94:A3:CB:71:87:7E:49:D8:64:37:82:05:18:E5:45
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6c:20:1c:ae:56:fe:52:9c:a7:b6:ab:de:6d:7d:e5:13:a4:
2f:6d:53:28:44:52:86:c4:59:53:a1:5e:b7:09:bb:83:b8:f3:
af:eb:e2:a8:da:0f:a6:b9:1f:4a:9e:96:d7:c1:e7:c3:46:34:
eb:50:fe:61:55:7f:02:58:83:0b:2f:fc:6e:24:11:6f:6b:06:
81:36:3b:75:41:30:aa:4c:e8:94:6b:28:80:76:32:46:3e:04:
f9:6b:9b:dd:8c:47:2d:3d:65:7d:57:99:47:c7:c5:75:4d:4f:
5d:3c:b3:ae:e9:b0:ab:87:56:67:c5:0f:d7:26:40:1b:bd:db:
73:53:3e:fd:5f:73:96:b4:03:d6:fc:a1:e7:34:9e:2c:c5:6c:
23:2f:73:f3:7b:cb:27:1b:91:bc:b2:03:b8:77:f1:30:d4:7f:
93:6c:c4:30:bf:fb:b7:89:04:04:08:ac:d8:8b:2d:ab:76:a4:
3c:91:d3:cf:4d:ff:32:15:04:d6:43:64:00:e3:61:f9:43:78:
9c:db:16:d6:2b:ae:3d:d5:a4:6a:54:cf:1e:05:43:b4:1f:a2:
0e:b7:b0:4e:2a:06:07:a1:a5:96:39:75:18:07:0b:c9:13:68:
6b:40:22:9a:91:36:ba:cd:b2:78:dd:f0:a0:b9:e6:07:35:c3:
1f:4e:f2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:26:55 2025 by rpki-client