Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: Fyfdxj47Os4zLP7/ED63ZtGJDx35vB7u5+NjCZ6InLw=
Subject key identifier: 7B:43:DC:75:D8:61:F6:0F:1E:8D:54:B0:FA:1F:A7:B8:8F:7B:6F:70
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 0195DFD9010E39A8FEAFC4B69510998D081A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 03:01:35 +0000
Manifest this update: Sat 29 Mar 2025 03:01:35 +0000
Manifest next update: Sun 30 Mar 2025 03:01:35 +0000
Files and hashes: 1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: sQPGJ0pgre3DldHG6JZ0Qb7hvyCL87iFFDUq131elg0=)
2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=)
3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=)
4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:01:0e:39:a8:fe:af:c4:b6:95:10:99:8d:08:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Mar 29 03:01:35 2025 GMT
Not After : Mar 30 03:01:35 2025 GMT
Subject: CN=7b43dc75d861f60f1e8d54b0fa1fa7b88f7b6f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:b0:8a:7c:de:9f:7e:36:fd:b6:11:0e:7f:
21:90:95:6e:f7:db:87:a4:42:4f:0f:98:cd:d0:84:
e0:34:19:aa:cd:6a:98:c7:b4:02:49:d0:d3:4f:e4:
9d:2b:c5:ce:a4:84:a1:9b:7a:06:0f:43:a7:dc:40:
1c:ed:43:4d:3a:4a:89:7d:f9:68:b5:a4:65:62:a1:
6d:80:91:66:3a:62:4d:a1:d3:2e:19:7c:ab:dc:0a:
90:13:07:07:0a:ee:0b:28:03:cd:b0:27:a9:12:8b:
c4:c7:c8:29:2d:28:00:ae:db:64:bf:50:f0:1c:9c:
0c:14:80:ac:ba:f2:2a:d2:35:93:91:07:c9:24:79:
50:a3:00:77:bd:6a:91:6f:d6:eb:b0:ed:ce:29:13:
eb:af:40:8c:50:38:9b:70:2c:1d:7d:2f:29:29:79:
96:16:b6:96:54:95:a7:3c:56:ed:fa:95:ba:fd:b7:
ae:09:4c:06:6d:d6:40:aa:42:7d:8d:a8:af:ad:78:
3c:b0:5a:ed:df:25:03:a7:ec:ef:f8:6f:7f:14:ac:
04:ce:6e:a5:eb:61:e1:2d:b4:aa:2d:41:6c:6b:bb:
e6:0b:05:15:40:4d:72:e4:10:30:e6:29:de:11:10:
95:f6:69:aa:bc:3d:0b:1a:4e:0f:1c:31:d1:7c:02:
8c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:43:DC:75:D8:61:F6:0F:1E:8D:54:B0:FA:1F:A7:B8:8F:7B:6F:70
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:81:39:53:3a:6e:5c:e2:93:e6:d7:c0:63:ca:ce:e3:df:0b:
0d:a1:22:94:43:5d:e0:16:68:34:b0:a7:ad:35:c6:f5:08:6b:
d8:0a:dd:24:71:e6:de:1b:33:69:85:74:47:52:8d:de:a2:6d:
06:81:b3:81:b3:99:44:01:48:5b:da:4f:19:68:99:5d:84:47:
e8:59:cd:2b:6c:48:fb:e6:13:12:46:17:9f:ce:13:46:2e:50:
fb:71:58:be:74:4a:fb:cc:6e:61:6a:b3:68:4b:ec:ea:95:21:
b0:da:7a:93:9b:5f:95:67:7d:e2:f8:e3:be:43:5a:6f:eb:19:
c8:9c:0e:fd:ab:af:90:a0:8c:56:b4:b2:c7:1f:ef:8b:2f:ad:
28:df:b8:9a:e5:4d:25:3f:11:ea:89:a2:16:c9:8f:ad:78:e4:
fc:d4:53:e4:b2:ec:db:10:88:24:60:a6:c3:c3:05:84:58:fd:
e7:a7:9e:2e:54:b8:0a:cd:78:4b:21:ad:8d:d2:71:9e:a6:75:
e6:b9:27:6b:ef:06:76:ee:8a:09:5b:a8:35:6e:72:2a:2b:c2:
17:bd:20:46:de:b4:eb:70:f9:ed:45:97:7b:66:1b:ff:0b:cd:
38:b0:7b:78:e0:51:fe:be:98:4b:e3:29:9a:f4:05:f9:b8:f7:
41:4f:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:24 2025 by rpki-client