Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: SE8KxEgHFHxmdBe7SLyBG9xZIBR6x4H5Vt3rdX88Z6s=
Subject key identifier: A8:DA:63:01:0D:F7:F2:98:2F:47:05:A8:AD:B1:C4:14:71:6B:92:3A
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 0195E158F3644966D6FAB696D785AA9C5AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 10:00:57 +0000
Manifest this update: Sat 29 Mar 2025 10:00:57 +0000
Manifest next update: Sun 30 Mar 2025 10:00:57 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: os5phMUz2ZzKPzxioEQqInUf6ZcL/SP/83h1scTZ4SI=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:f3:64:49:66:d6:fa:b6:96:d7:85:aa:9c:5a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Mar 29 10:00:57 2025 GMT
Not After : Mar 30 10:00:57 2025 GMT
Subject: CN=a8da63010df7f2982f4705a8adb1c414716b923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:f2:c1:5d:d4:54:83:9e:c0:05:09:5f:89:
5a:19:86:36:9c:8b:d6:3f:15:01:81:78:5c:50:f0:
d5:1f:23:17:ad:8f:d8:c7:a5:01:37:a0:44:0f:cc:
6b:c5:42:82:bd:50:92:5b:06:af:af:46:4b:69:7a:
ca:50:53:fb:5c:8e:20:e3:71:c1:a6:f6:06:68:3a:
7f:0c:97:c8:70:2e:4a:db:e5:d9:44:8e:97:68:f4:
97:03:ed:58:dd:e2:89:ff:0f:ac:7a:0c:5d:76:a4:
08:e9:83:91:82:c4:c4:64:1e:be:5a:93:17:77:62:
0d:59:3d:b5:3c:78:31:c5:8b:9a:4c:b1:52:83:f9:
21:b1:11:d3:b9:43:6e:94:4f:b2:2e:ce:9c:20:67:
06:80:dc:10:3f:cd:9d:1d:27:bf:f2:32:21:0f:24:
b4:06:8a:fa:92:0a:99:32:5a:36:d1:64:c2:7f:29:
5e:bf:40:81:7f:d0:da:02:fe:89:47:9e:42:97:e1:
ac:e2:8c:52:f8:c9:19:bf:2a:97:c2:c4:ce:83:7f:
19:23:15:e2:f8:6e:8d:ce:d2:b6:d6:93:64:1e:b2:
6a:1f:ed:2f:82:eb:5b:07:6b:37:b2:13:61:14:b5:
e4:33:1a:c3:24:96:4c:9e:27:23:08:a2:c2:c3:f8:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DA:63:01:0D:F7:F2:98:2F:47:05:A8:AD:B1:C4:14:71:6B:92:3A
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6a:13:87:83:6e:8b:ee:4d:a9:34:f3:2c:40:c4:c8:cb:a2:
72:39:b7:83:5a:29:a6:fd:b2:43:13:c8:ed:ab:d7:6c:1b:15:
ad:5b:79:85:25:98:62:4b:a2:11:4c:8d:e5:34:aa:d5:a4:1f:
00:f2:23:77:cb:34:70:5b:37:25:fd:06:9f:2c:da:23:47:f9:
5b:a2:0b:66:eb:06:ef:d1:88:78:2f:a5:1d:3e:4e:eb:60:a1:
0b:83:3d:98:e9:4e:80:b5:25:78:fd:d1:37:b5:8f:61:12:95:
c3:68:51:9c:e2:8c:e6:60:4b:25:b1:85:67:8d:aa:d7:dd:a1:
40:26:0d:41:f1:c5:39:7a:ac:0c:f7:a1:ee:2f:e6:41:88:1d:
2e:80:32:7d:57:ee:cb:30:30:20:97:46:ac:8b:c7:99:41:87:
b4:ed:57:4c:3c:37:55:78:d3:2e:70:e5:fd:20:25:fc:24:11:
d4:dd:9a:ad:6d:af:9d:da:c5:b4:e4:56:60:5e:05:7e:f3:76:
ea:14:b8:68:d3:c0:9c:d9:84:ab:ee:4c:41:56:ab:c3:a7:09:
f2:58:0d:1a:4e:c9:57:91:70:01:37:f4:91:e6:60:1c:06:4f:
2b:f8:e1:cd:4b:3e:96:6c:01:b2:7a:7c:2a:1f:1e:92:19:2e:
d0:58:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:39 2025 by rpki-client