Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: qvqEcoKdV2rQNczKJ7KfWv4puze01aQpAxGQ2Xzu/cU=
Subject key identifier: AC:4E:38:FF:0B:C0:1C:04:63:B6:0A:92:A9:E2:BC:84:17:B6:E5:CA
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 0195DFD97F439A90E8983347D156FC10219F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 20
Signing time: Sat 29 Mar 2025 03:02:07 +0000
Manifest this update: Sat 29 Mar 2025 03:02:07 +0000
Manifest next update: Sun 30 Mar 2025 03:02:07 +0000
Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
2: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: lO0z8mFR/Wl4YPtwtXPf6a/L6vbtINpHojAwgWSDUzU=)
3: bXG0GOoD81HOxWPjM9UhIty_ee0.roa (hash: mmMBtet64hPrKMhcTVqesrRFLaGci6KJ3hFnS33cvrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:7f:43:9a:90:e8:98:33:47:d1:56:fc:10:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Mar 29 03:02:07 2025 GMT
Not After : Mar 30 03:02:07 2025 GMT
Subject: CN=ac4e38ff0bc01c0463b60a92a9e2bc8417b6e5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:2e:fd:c2:1a:bf:db:90:f9:ce:ba:07:a9:
42:e7:9a:03:96:09:05:e5:4f:e2:30:76:9e:31:23:
0f:18:d1:d6:9f:7f:09:c7:27:b7:e4:b0:6c:12:f5:
56:3e:8f:b5:42:20:a6:1b:a3:4f:bc:78:1b:c1:43:
59:08:10:62:d6:30:fa:37:c9:47:b8:8d:f1:10:ea:
d1:6f:12:dd:8d:a8:5b:f2:2f:a6:2f:65:60:7d:3d:
5e:b9:f6:05:10:3a:74:e9:b5:74:c5:66:50:ed:14:
13:a2:79:38:b1:30:37:ad:22:07:62:61:49:54:53:
af:68:81:31:75:cd:db:16:3c:a8:aa:24:28:3b:f0:
15:d4:0c:df:a4:45:cc:f3:8f:7c:9d:5b:dc:4b:e4:
b3:50:3b:ae:51:25:5e:77:6b:a9:74:17:48:ce:24:
19:e8:d3:f9:dd:85:2e:f4:16:22:c6:ae:ab:06:76:
5f:63:f6:37:53:0c:af:ee:01:4c:4f:85:e8:ac:06:
a4:3e:60:a0:5f:aa:a2:88:f8:a7:99:2a:92:3f:7f:
ae:03:2e:d6:64:f3:ab:82:ad:eb:8e:bc:17:4d:f4:
f4:38:a1:1b:82:e2:07:5d:97:2b:bb:52:90:90:fb:
4a:05:46:20:3c:f4:67:6c:ec:7c:71:4d:91:61:7a:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4E:38:FF:0B:C0:1C:04:63:B6:0A:92:A9:E2:BC:84:17:B6:E5:CA
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:65:ab:e8:a1:0d:68:9d:94:fb:98:4c:e2:dc:e5:86:b7:16:
6e:5a:09:ec:49:fb:0f:02:e4:f4:a6:aa:65:59:cf:91:f6:52:
76:97:ca:77:45:7d:c3:0b:ce:e9:bc:74:44:e4:00:27:c1:c8:
c0:4b:64:96:de:20:0b:b4:16:82:9d:5c:05:18:41:8f:08:6f:
cc:1f:c2:04:8e:44:dc:a5:a8:79:7b:8e:b8:95:2f:47:ab:ad:
3c:a4:3b:71:b6:e5:19:01:08:9d:38:f9:2e:ff:dd:4a:73:ca:
2a:21:9d:ab:6a:fa:6f:67:30:d6:68:7d:ab:69:d0:76:6c:00:
8a:f9:09:4e:ac:9e:4a:a2:ac:c6:3b:58:df:8e:36:30:92:96:
8e:d7:88:1d:4b:07:a5:a8:ba:b9:b9:ca:fc:24:cf:6f:86:71:
77:7c:f4:ca:25:e8:f6:c2:f7:a2:97:35:97:e6:85:68:9c:22:
fb:26:6b:99:ef:55:9c:dc:d6:ed:85:d0:6d:6b:e5:b8:09:0e:
5f:1a:6a:51:0e:65:97:a5:82:52:e3:82:77:52:b4:a7:b4:25:
6f:e3:14:05:9c:1b:27:af:01:67:3b:c6:72:0d:0f:76:cf:aa:
7d:66:59:7c:20:5d:1a:4e:5c:43:1c:f9:92:7d:c7:41:a7:35:
f8:56:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:33 2025 by rpki-client