Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json)
Hash identifier: gVbGvUoqnUDYjcRYWzYlmx9ej275B1UuJnaUjMNTMlw=
Subject key identifier: 73:F5:64:85:90:09:35:B3:7F:28:56:8C:2B:7C:22:C9:1F:26:4F:0D
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 0195DFD8DB9FBF87AE03A8643DD2CCE55C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
Manifest number: 0D11
Signing time: Sat 29 Mar 2025 03:01:25 +0000
Manifest this update: Sat 29 Mar 2025 03:01:25 +0000
Manifest next update: Sun 30 Mar 2025 03:01:25 +0000
Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=)
2: 6w6GslstW7dP-hGd9Y6a0xOTJ1Q.roa (hash: c/YkJLvVjnK6oPthfFlSxGHPywR+uY+AcXy43DN7bDA=)
3: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=)
4: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=)
5: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=)
6: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=)
7: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=)
8: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=)
9: hBKsbi06dqWQsHOJ9T-z_RIbUjA.roa (hash: uWUX6xGjuFBVk0pdcf+5Gpk/beOEbACzQvY2ZU/EXNs=)
10: jNNBKwU2mAjLQ1w3Ok95aTQxyPw.roa (hash: r1u8fTThBA818KHS3KubsjlhZxB1UdV+hCt2v0ZIYsY=)
11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=)
12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=)
13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: vuv33TQNVBJ7R1GXnGVVuh0WQ8LYcpX7Lv/6rovKznE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:db:9f:bf:87:ae:03:a8:64:3d:d2:cc:e5:5c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Mar 29 03:01:25 2025 GMT
Not After : Mar 30 03:01:25 2025 GMT
Subject: CN=73f56485900935b37f28568c2b7c22c91f264f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:bf:1c:66:2a:a0:f1:93:63:ce:8e:68:56:
2c:5f:8a:1e:95:c7:ba:a7:91:c9:0c:8b:21:f8:e5:
b5:7a:e4:e9:1c:7c:a9:0e:07:a2:a7:b9:c6:1e:0b:
e1:6f:d0:4e:25:75:6f:7e:99:5b:b1:8b:5d:e6:ba:
f8:2b:3e:1f:d4:e7:f6:97:5e:6d:3d:16:23:e0:3e:
62:07:6e:57:fe:9e:53:28:9b:a9:65:3a:c9:05:90:
6d:20:c7:fe:0f:e9:20:96:cd:f6:79:2f:60:b7:fb:
3c:b1:c6:b2:ca:ea:e3:c7:5f:d8:cc:26:d6:15:65:
5d:66:cd:3d:dc:f6:9a:14:1c:6d:27:96:83:37:d7:
ba:fd:88:0d:f2:f4:0a:e0:f4:b5:45:01:31:f2:85:
02:7b:4f:f1:a5:42:40:ac:c0:b8:f9:84:84:69:b9:
33:40:a3:ff:3d:f9:d6:a1:8d:e4:af:eb:7c:e4:57:
d4:5e:c0:2b:3b:e9:6f:08:75:8b:e0:c4:8f:86:85:
6b:74:48:9f:7e:fe:63:4f:86:3a:5d:2a:13:e3:0e:
8a:ed:9d:41:c0:02:86:f3:db:f6:d1:9e:69:b0:da:
19:d0:41:39:be:fd:bc:07:e9:70:dc:b9:fb:ea:de:
f9:0b:54:09:56:55:9a:f4:46:c2:0b:be:b5:21:d2:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F5:64:85:90:09:35:B3:7F:28:56:8C:2B:7C:22:C9:1F:26:4F:0D
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:be:1c:fd:48:6f:2c:8c:c2:57:4c:58:b2:2c:25:f5:b2:a6:
2e:72:02:46:a4:49:fb:15:d0:c2:a9:b5:93:bf:1b:a8:f6:76:
cb:6e:b8:81:dc:d6:6a:bf:f8:9f:6f:fb:6f:b0:78:13:49:9e:
83:b4:c0:8e:56:15:c6:be:4f:59:02:a3:81:af:d0:e4:bd:1d:
0f:79:c6:fb:b5:dc:8a:a5:fd:07:00:0d:30:d3:3b:73:e8:20:
88:db:23:7f:91:a6:84:51:57:af:c6:a9:8d:59:6b:55:a2:f5:
a7:d8:e6:6f:5e:c9:99:9e:4c:b8:e4:51:ab:f7:70:02:34:87:
90:44:f0:54:fc:ff:35:35:c0:04:a4:94:b2:70:b0:e2:d0:88:
00:03:63:e1:de:95:bf:0d:50:d0:c3:9f:fe:b2:11:1a:11:76:
ee:71:dd:26:b1:49:2d:10:b9:3d:82:5f:39:ea:e7:fa:a4:34:
e6:ab:4c:ea:c7:7f:80:50:15:78:07:63:09:11:98:c8:3b:3a:
27:bc:af:64:86:e2:a3:f1:42:23:65:f5:99:13:50:f9:3a:81:
78:02:c2:c6:6c:be:35:9b:8a:3f:cf:ab:f6:64:cd:13:a9:d3:
05:a6:8e:a8:ba:1f:03:9c:c1:22:ce:5f:29:b1:df:ef:89:cc:
85:46:c1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:07:21 2025 by rpki-client