Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: WSCEhfIJDqyUQpROxgDQZiJEuVUeA3Wt0kEwZMWlFTA=
Subject key identifier: 06:3B:71:99:7E:7B:81:63:CD:80:7F:72:9E:B6:68:92:C1:FB:E2:F3
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 0195E07DBABC9B84510FEE8EFC9D59F8B0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 0D28
Signing time: Sat 29 Mar 2025 06:01:30 +0000
Manifest this update: Sat 29 Mar 2025 06:01:30 +0000
Manifest next update: Sun 30 Mar 2025 06:01:30 +0000
Files and hashes: 1: _BNYdzVBVSUeXINGJrysLOoOwfM.roa (hash: hYn60LUqBKRakCcFPhMXiHrGnB1pZCgNDpIpAl6eI3k=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: BO1dZWmY1IiBPkaIpLspks0IHmiNCgBZxX2OLnbgTZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:ba:bc:9b:84:51:0f:ee:8e:fc:9d:59:f8:b0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Mar 29 06:01:30 2025 GMT
Not After : Mar 30 06:01:30 2025 GMT
Subject: CN=063b71997e7b8163cd807f729eb66892c1fbe2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:e7:86:c4:27:b9:10:c7:9f:45:86:4e:bd:
9c:91:90:73:b1:d8:89:ec:67:f1:9c:f2:97:ac:6d:
e9:d8:2d:33:69:e7:6e:e6:d1:fc:66:f8:33:3e:9a:
08:90:73:90:cd:32:75:e8:fc:ed:d1:88:11:c8:7b:
87:24:64:7d:36:23:d4:4a:0c:01:79:09:c0:76:d7:
d3:c8:45:fe:2e:42:73:40:66:fd:a3:96:39:20:52:
71:a7:e5:4a:c6:cb:6a:2d:8a:59:69:f1:66:d9:c9:
bd:2d:10:8d:26:5c:b9:bf:60:43:a9:b6:bf:b0:c7:
d1:f9:6e:fa:66:af:86:a0:58:eb:18:75:e7:ae:dc:
c9:76:b3:57:1f:0c:18:d4:86:73:a7:12:fa:95:c3:
ab:c5:e7:27:f5:e6:fc:ef:03:d7:bb:c4:a1:14:fc:
8e:a4:0d:c0:0e:b8:a8:ad:9a:16:bb:64:ee:b9:de:
74:40:7a:80:02:f4:ad:24:c9:84:0c:f0:79:43:25:
60:c5:db:2e:e0:f3:79:68:bd:1f:d5:b4:86:a0:15:
fb:74:06:a8:5e:a9:94:94:15:70:91:60:fa:cb:d2:
62:34:83:c2:e6:21:00:ee:95:86:5e:34:86:fa:ff:
bf:57:a4:16:f1:96:a6:02:63:bb:d9:59:86:fb:cd:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3B:71:99:7E:7B:81:63:CD:80:7F:72:9E:B6:68:92:C1:FB:E2:F3
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:16:53:3d:c9:9a:0c:f1:73:67:4d:fe:63:a7:47:12:cb:b3:
0c:59:8d:13:f5:70:47:c0:b5:51:2e:b0:5e:3f:0a:2e:e0:c4:
fa:9f:bc:c4:0f:d4:dc:20:8a:01:c5:1c:ca:b1:87:a9:39:ab:
b3:6d:5f:b9:61:04:62:a4:b1:9a:04:69:58:f7:1a:91:cf:d0:
a3:1d:ff:09:b1:8a:79:05:ed:fb:ec:8d:4f:37:f4:32:a6:6d:
2a:98:01:db:63:72:8e:b1:28:4e:9a:72:85:b7:a8:bf:06:d3:
d3:bf:41:4f:82:2f:16:c3:91:fe:0e:fc:70:61:80:68:8b:11:
06:7d:f4:2d:08:7c:f8:23:c8:6b:9c:d1:d7:9c:d7:9c:13:34:
2c:3b:16:4d:94:ed:77:ed:21:a2:6f:e8:6b:6b:df:28:cb:9e:
38:c4:c7:09:ef:40:7a:78:42:af:d9:a9:c6:a4:24:cc:c4:71:
e2:0d:4c:a1:b3:b4:3a:a8:a5:0a:98:ef:bd:86:49:0c:d3:2b:
ca:f0:34:91:a7:00:59:ca:39:48:96:b1:9f:90:a6:97:2c:7a:
c9:74:c9:29:29:1f:55:9c:e7:18:e7:07:a3:2d:59:9f:d4:48:
5d:1b:a3:43:af:24:69:0b:57:75:04:81:32:11:a1:84:11:d9:
b1:aa:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:58:24 2025 by rpki-client