Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: DB6FDlw9sRRGEF2m5lrRgny4c/nY9VKml1G6A9F82c8=
Subject key identifier: FC:51:6A:38:01:97:E2:44:2C:0D:23:BB:D4:65:0A:1C:D0:72:32:9D
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 0195E158E123765DEB35241F630CE99372BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 05A9
Signing time: Sat 29 Mar 2025 10:00:53 +0000
Manifest this update: Sat 29 Mar 2025 10:00:53 +0000
Manifest next update: Sun 30 Mar 2025 10:00:53 +0000
Files and hashes: 1: lZ0k4HCeYgJ0Z--pVxoJOUL75A0.roa (hash: Eir5xG3bxnWZXnAYjpN3gzblSfPJDFtKlMunMUTHMBs=)
2: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: s/63KSn8Uk3bKY5g/kmb0Dep9HTGd25mEuE3vseKyEI=)
3: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
4: vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa (hash: TDy4p0/0R2wjKaBRPb/eq3sprSVIkaJesmw7dyJ2VEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:e1:23:76:5d:eb:35:24:1f:63:0c:e9:93:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Mar 29 10:00:53 2025 GMT
Not After : Mar 30 10:00:53 2025 GMT
Subject: CN=fc516a380197e2442c0d23bbd4650a1cd072329d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:fb:8a:64:53:6c:5e:8c:e4:dc:0a:48:91:
2b:06:15:1a:24:95:b1:b8:b3:bf:e7:1b:15:ac:be:
47:ce:7a:33:fe:7e:06:69:21:b0:27:6b:bf:51:57:
0a:9c:aa:a7:38:76:e0:4d:9c:c7:b8:e2:63:5a:c6:
8d:42:fb:25:ab:f8:0c:aa:e1:60:b3:bf:05:49:55:
48:a6:d3:ec:fa:55:90:de:a0:ff:d4:95:74:e8:55:
0d:60:9f:48:17:cb:e9:46:c4:50:0c:98:e9:4a:c7:
0a:43:e1:2e:ed:03:29:c1:58:a5:3f:b6:09:54:1a:
db:2c:90:20:34:fa:2e:91:27:f9:23:7c:ac:83:3e:
a2:f8:12:b3:22:37:c4:7f:27:5a:8d:54:ca:27:2f:
e7:9e:f3:0b:00:20:6c:7e:eb:8b:4d:7f:be:dc:d1:
42:54:c9:b5:c2:2d:e0:e5:71:18:ad:e4:a9:16:73:
55:c4:1b:b7:c4:3f:b5:fd:52:ac:ba:39:95:45:85:
f4:a8:66:9d:d6:e2:52:1f:a1:01:02:0f:a5:91:a4:
19:f4:00:e1:82:ea:ca:de:0e:74:06:0c:87:23:0d:
c6:f3:34:a0:27:4b:de:a2:9a:60:ed:59:4a:8b:24:
7a:0d:da:c6:b7:35:e4:fa:50:27:6a:3d:a3:6c:ce:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:51:6A:38:01:97:E2:44:2C:0D:23:BB:D4:65:0A:1C:D0:72:32:9D
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bc:fe:5f:6b:c2:60:19:ae:e0:30:86:21:9d:04:f8:82:2f:
19:c5:fa:bb:ae:7e:d7:ac:d8:d8:4f:a4:f2:71:24:e3:19:64:
8e:f0:25:7d:f5:ec:e4:d5:35:8d:19:42:35:dc:2f:85:a7:c6:
c5:5d:f5:8f:dd:5c:f8:9e:58:eb:fe:01:59:54:6b:70:92:fd:
74:f6:a7:61:9d:7b:fd:10:23:eb:f2:46:de:17:8d:b1:51:69:
08:a8:0d:1a:4f:f7:47:b4:2d:15:25:e5:4f:09:1c:b5:67:be:
57:54:01:15:2e:c1:e7:07:7a:df:e9:8e:6c:f5:40:cd:1c:d4:
95:d1:04:5e:5a:75:d7:65:ac:c5:b3:f4:cb:c5:f7:6a:c3:a7:
0d:24:67:83:79:1e:2c:4e:ad:98:10:67:a0:b5:06:d1:d9:ba:
27:3d:bd:36:58:54:0d:0b:59:50:c7:bd:25:e3:0b:f9:f8:ac:
6d:8b:e6:d3:86:57:88:f1:a4:b0:56:b7:b3:2d:9e:62:53:81:
3b:62:e6:19:fe:3b:26:04:f4:94:ba:ab:24:48:9e:58:67:a4:
ea:a2:01:0b:2d:47:68:25:f7:3a:2f:7e:2f:f8:f0:34:83:4a:
a7:7d:84:0d:27:65:a8:17:24:24:b6:c6:2c:0e:91:61:0a:c2:
7b:ea:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:31 2025 by rpki-client