Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: irK6wqngPTf54FEBIF9Be7MK1CMqio2T1Ae5MeUk8e0=
Subject key identifier: B8:0E:FD:13:A4:79:21:AA:97:0C:5C:3F:39:AF:22:E9:24:FD:E2:4B
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 0195E1903830F1F8B93B35F648B44949A000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 11:01:19 +0000
Manifest this update: Sat 29 Mar 2025 11:01:19 +0000
Manifest next update: Sun 30 Mar 2025 11:01:19 +0000
Files and hashes: 1: 1-FBfA_qZ4ESfWWb5CknBppCISTE.roa (hash: QzTjcdbwU5fU8MtxewS2wXNIG8qK/6tc0F56xQAkXFI=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: p47+uesy2tyTj5+hzPN+4sCtD60NJMGYfzaqzoTl2jI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:38:30:f1:f8:b9:3b:35:f6:48:b4:49:49:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Mar 29 11:01:19 2025 GMT
Not After : Mar 30 11:01:19 2025 GMT
Subject: CN=b80efd13a47921aa970c5c3f39af22e924fde24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:0f:8c:8d:63:19:9a:6a:08:41:68:3c:e1:
a5:8a:e0:ee:2f:fe:f2:59:1a:58:19:75:61:b2:97:
c0:67:b4:64:95:a2:de:51:90:2d:60:77:9c:f8:0b:
e6:f4:c9:14:fb:92:14:5d:4b:31:33:51:55:62:ee:
cd:7f:77:67:23:29:82:35:36:5b:91:fa:80:a8:67:
a1:7a:67:7f:11:b3:b1:26:97:c7:06:9a:81:af:e3:
d6:60:13:5a:5c:cc:e3:2b:57:1a:3c:4a:6a:5b:4a:
d9:53:60:d2:a7:78:11:c8:54:7d:ed:df:b6:ee:c9:
b0:47:15:18:6f:2c:22:e4:42:11:94:ce:4d:bf:c6:
31:53:fc:89:9a:ef:65:4b:ae:99:19:51:d8:f8:ca:
e0:c5:bc:1b:4d:d7:de:37:a5:d3:d9:5f:88:19:4a:
a2:8c:16:af:73:0a:2e:68:3b:46:61:71:bb:ea:ee:
5f:90:74:a6:96:e7:40:3d:3a:6a:16:65:7f:fe:86:
0e:25:e8:44:2e:50:0e:ea:3d:23:c1:46:c9:86:69:
60:d6:42:63:6c:de:0d:ef:43:fc:46:8a:35:47:36:
b9:72:58:39:06:ec:c2:da:a2:fa:48:5e:26:02:5b:
25:98:46:f0:d3:fd:73:ed:76:c5:07:6d:30:dc:30:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:FD:13:A4:79:21:AA:97:0C:5C:3F:39:AF:22:E9:24:FD:E2:4B
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a4:31:4b:93:d8:57:b1:0d:8f:26:71:cc:cd:c5:ad:d0:7e:
a0:e6:a8:7d:00:a4:70:d3:8e:28:35:55:cd:64:dc:51:16:ae:
6b:01:93:ad:ba:29:35:1d:7d:cc:ad:ea:d0:bb:6b:cd:46:8e:
d1:d3:76:56:79:d9:e6:e5:89:a4:b8:77:66:91:7d:18:32:d3:
c9:76:ad:72:95:8a:eb:90:b3:5b:e6:e0:02:b8:25:58:4b:2c:
40:88:67:e4:e7:ca:5e:9d:a2:98:16:5b:e2:0c:b5:e0:fc:59:
15:c9:47:be:fa:7f:5a:1e:52:7d:4f:11:c4:88:00:5a:88:a7:
21:6e:52:09:58:0e:d6:b7:33:17:1b:d3:d8:1e:78:fa:77:ec:
37:cd:ca:71:16:1d:cd:c1:06:e7:68:30:c8:90:fc:fc:45:bc:
ba:2d:40:ae:57:90:71:de:ba:92:0c:c6:32:19:f3:b2:b9:e9:
b6:f7:6a:70:c2:e0:be:c1:98:d6:9a:78:9f:4d:da:44:f9:6c:
bd:48:10:6d:fd:e4:61:9e:65:08:78:96:a4:cf:51:a2:8c:f8:
67:9f:08:7a:97:88:da:f2:4d:93:90:fc:04:f8:1c:84:16:94:
0a:42:e6:4d:ab:ee:80:18:1b:51:37:e1:2f:c0:20:c1:ef:d4:
80:15:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:24 2025 by rpki-client