Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
File: bzycduKvxzzO28ngKS_7mfZec1I.mft (raw, json)
Hash identifier: yjdQq6KZo4ityEjZiOuiawkKRTwY6ACU+mf6WclLzHE=
Subject key identifier: 58:EA:7C:57:13:D5:20:00:AE:5C:4B:5D:D7:20:D9:90:8A:24:EB:44
Authority key identifier: 6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
Certificate issuer: /CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Certificate serial: 01979C7270E0CFF3D56D1B7A89896A018B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
Manifest number: 0D04
Signing time: Mon 23 Jun 2025 11:00:35 +0000
Manifest this update: Mon 23 Jun 2025 11:00:35 +0000
Manifest next update: Tue 24 Jun 2025 11:00:35 +0000
Files and hashes: 1: 0uWLA5mOdiy3OLJeZ1Ov94IOtqs.roa (hash: buxeJp/x66aw9yBb+1kLLqoKDBL9w3efxSEQZ/YnH08=)
2: bzycduKvxzzO28ngKS_7mfZec1I.crl (hash: DUDrDRXLq1GgpNEG+qPIpZ68WlyNX1XqvEzKzRldsh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:72:70:e0:cf:f3:d5:6d:1b:7a:89:89:6a:01:8b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Validity
Not Before: Jun 23 11:00:35 2025 GMT
Not After : Jun 24 11:00:35 2025 GMT
Subject: CN=58ea7c5713d52000ae5c4b5dd720d9908a24eb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:49:48:a3:00:46:45:6e:92:92:82:eb:d7:
d4:d9:23:d9:e6:c9:1f:e0:05:7b:ff:c4:3b:84:fa:
fe:9c:56:56:0f:a1:f7:98:81:b3:0b:4e:d8:b7:b7:
fd:a1:7b:7d:b7:09:c3:9a:08:c4:e0:6f:90:87:3b:
a6:02:32:63:08:63:9f:be:3c:e9:79:d9:2a:99:ca:
c8:76:70:bf:dc:53:f8:15:03:42:58:1e:47:76:92:
ae:d9:52:f8:b9:c4:2d:45:08:96:ac:d0:c9:cc:ad:
55:68:4f:8b:a5:ca:2f:ec:b0:03:dd:79:42:64:2a:
e3:82:92:92:6f:ad:a3:0b:18:4a:82:77:76:0f:c0:
ba:1a:d5:b7:90:95:1f:27:c5:4c:99:e4:72:2b:23:
75:31:7f:64:e6:36:48:ad:1f:70:60:21:ae:5a:7a:
63:89:56:29:75:8b:a3:3a:f4:c5:10:e1:fd:f3:61:
19:ca:8e:cd:fb:8d:1b:3a:64:1b:75:93:eb:e3:a1:
bb:4c:b2:8a:e9:47:c9:6a:06:58:6c:d4:ca:eb:cd:
5b:a3:b0:92:fa:5c:dc:4c:d9:9a:b5:e2:69:e5:d6:
b8:20:9a:73:7f:d6:76:25:63:ec:38:9b:ef:31:df:
a1:d6:c7:8a:f6:ad:65:53:39:96:40:28:da:9e:e6:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EA:7C:57:13:D5:20:00:AE:5C:4B:5D:D7:20:D9:90:8A:24:EB:44
X509v3 Authority Key Identifier:
keyid:6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f7:4a:42:59:eb:e4:7d:eb:9b:db:04:a1:c0:d5:e7:e5:c6:
8e:e3:3c:25:fe:78:cd:a4:b4:1b:f2:a3:06:3b:e6:84:67:57:
7c:ef:1a:4b:3f:8c:2a:ae:55:8f:b3:eb:08:a3:9c:37:60:81:
5f:44:68:60:9f:eb:3e:12:64:58:1d:e0:de:cc:b7:d3:d7:57:
7f:22:6d:6b:fc:6f:23:df:6d:70:54:7a:c3:ee:2d:ff:72:25:
5f:cd:4d:35:5c:03:b1:c9:ec:c3:e2:36:5d:96:0c:60:7c:3b:
57:bc:f4:dc:90:3a:2f:a3:3d:cb:cc:fc:f0:eb:ce:54:d1:22:
ae:e5:a9:85:e2:02:b9:3f:4f:19:7e:3b:ca:16:4d:5b:3b:cd:
b8:c8:a7:2b:99:7e:33:f0:a1:cc:83:f6:a9:8a:3a:f7:ee:aa:
e1:cf:fe:21:20:a8:06:63:09:78:f6:c1:1f:8b:12:1b:f9:bd:
d4:94:0c:61:69:93:8c:4e:aa:08:cb:88:eb:f2:61:a4:b5:15:
e6:bc:78:58:96:02:e1:f9:80:a2:b8:8f:40:14:b2:e1:85:a7:
3a:f0:d7:0d:46:78:d7:a1:47:2e:70:ab:a4:d9:8d:e1:21:a3:
9d:56:01:67:c8:0b:b0:21:44:99:bc:21:dc:41:04:57:0b:02:
dd:b6:b9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:40:51 2025 by rpki-client