Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: 8fagErKC5Qzk/dVt3VNF+qwQVb0zza4MHSyXE0xii4M=
Subject key identifier: EC:EF:62:73:00:D8:AC:A8:2F:AC:0F:C2:7B:AE:35:35:15:41:46:4C
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 0195E07D91722A6C2165D8BE12C578BADCD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 06:01:20 +0000
Manifest this update: Sat 29 Mar 2025 06:01:20 +0000
Manifest next update: Sun 30 Mar 2025 06:01:20 +0000
Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=)
2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: Z/hykmr2Hb9TzgqJUFz6FItEq46vvJ8/7kCIZMWWfNY=)
3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:91:72:2a:6c:21:65:d8:be:12:c5:78:ba:dc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Mar 29 06:01:20 2025 GMT
Not After : Mar 30 06:01:20 2025 GMT
Subject: CN=ecef627300d8aca82fac0fc27bae35351541464c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:9d:7a:b7:5b:1a:cf:bc:d6:4f:92:b2:de:
79:2c:b1:41:18:1b:83:db:8c:6b:36:86:78:00:8a:
a1:d8:98:02:99:8b:75:03:f1:25:23:18:c2:02:a7:
ee:df:11:ab:aa:12:99:20:73:51:d7:9c:11:c2:a8:
9f:85:27:1b:ba:fe:09:e0:97:75:13:c4:c1:14:3e:
83:4a:6a:05:0c:22:81:53:38:2a:10:af:2a:61:ef:
69:ad:d1:30:e6:17:82:8b:86:6a:54:a7:da:46:2e:
32:a9:8b:5e:44:74:4f:09:47:b8:b4:0a:7d:2a:db:
03:34:37:6f:d4:ac:e6:e4:29:d6:95:24:7a:7b:90:
58:6b:2e:85:25:e2:59:e9:9c:90:f7:ab:ff:75:0c:
62:3a:f1:80:2d:a3:b8:04:ca:43:e5:eb:f1:c2:b1:
9e:de:03:a1:07:65:2c:69:31:32:5b:83:81:6e:69:
06:67:5b:99:77:7f:60:e4:3b:af:07:22:94:77:09:
a8:8f:0f:76:ff:c9:d4:6b:7b:7d:4e:21:ff:98:32:
90:8c:04:0a:96:10:63:d9:7b:94:29:23:62:ac:1a:
5d:c8:e4:87:c3:49:bd:0d:e2:a1:f6:31:15:18:b0:
f3:52:00:50:82:71:c6:99:9b:b0:6d:58:96:75:06:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:62:73:00:D8:AC:A8:2F:AC:0F:C2:7B:AE:35:35:15:41:46:4C
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:f9:bd:d1:2c:94:b5:9f:cb:77:12:95:51:25:db:26:77:
80:c9:32:22:cf:b5:5d:9d:ee:04:26:4d:5d:a5:b2:14:c3:72:
30:0d:39:b4:ee:30:22:34:78:0f:88:18:36:c1:dd:bc:45:b4:
d0:77:6b:c6:dd:10:8c:c4:2d:e3:72:ad:70:a4:61:a1:a1:8e:
15:34:80:2f:ae:1b:3f:7a:3d:d4:26:34:3d:16:34:64:c8:aa:
aa:ab:0f:64:ba:14:15:d5:61:6a:9d:e9:19:50:a9:26:67:d9:
1b:da:f1:19:7f:68:9d:47:17:56:28:2f:0f:44:11:03:04:39:
f9:ff:b4:d2:f4:79:13:19:f8:da:2b:77:96:08:8e:3e:1d:37:
bd:5c:67:03:46:de:9f:4f:c0:d6:6a:26:ab:ee:89:0f:41:3d:
aa:43:61:2d:43:dd:66:c3:c5:dc:f8:2f:73:5d:60:bc:08:cc:
10:ff:0f:0c:5b:63:4b:a5:cd:5d:17:0a:07:a5:20:97:b3:fe:
bd:b7:97:43:91:44:a9:4b:5d:7e:f1:fe:c1:47:f3:57:ba:22:
d1:81:70:df:04:cb:e1:99:a8:d4:a5:29:50:39:2a:5f:4b:15:
61:9b:c4:0e:25:0b:65:c2:f4:09:89:32:98:e3:2a:09:ce:9b:
ff:48:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:42 2025 by rpki-client