Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: MwqGcB/N6Uq12fI5YNOgtucmP8URs6gG+BqwBC6TtR4=
Subject key identifier: D0:C6:1B:58:51:06:21:D4:04:67:2D:34:45:EB:09:48:E2:B5:61:FE
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 0195E1597478057753EF0297D5F2D7ED5DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 090C
Signing time: Sat 29 Mar 2025 10:01:30 +0000
Manifest this update: Sat 29 Mar 2025 10:01:30 +0000
Manifest next update: Sun 30 Mar 2025 10:01:30 +0000
Files and hashes: 1: 0SGERXpsIldifCTWUfwaAPLWZj8.roa (hash: Wl6639BT2YEzAcDZ1BBEKA7sfTmRzgLCKdjibP72VaE=)
2: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: Ycowsvg0bNvbnO6edP6KqSH5qCyAKch7oqJm/g9f8sQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:74:78:05:77:53:ef:02:97:d5:f2:d7:ed:5d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Mar 29 10:01:30 2025 GMT
Not After : Mar 30 10:01:30 2025 GMT
Subject: CN=d0c61b58510621d404672d3445eb0948e2b561fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:60:57:c8:74:cb:38:7d:44:4a:5c:11:b1:
f3:a3:1b:d3:55:65:30:f4:ab:b6:3d:73:33:45:05:
e4:1b:2d:7c:c8:59:34:9f:34:6e:30:69:7c:c4:fd:
ae:50:d8:91:fc:e8:da:dc:72:70:49:9f:05:ee:cf:
5f:8d:09:6a:1a:a0:64:13:d3:3f:ba:01:b9:e8:c6:
3f:3a:c7:94:16:a5:16:91:75:f5:04:fa:13:84:1d:
d5:76:02:87:b0:18:88:5e:cf:a2:29:e8:0d:d8:90:
eb:08:dd:c8:00:c6:fd:6d:44:d0:0d:a8:3a:85:42:
14:ce:7c:c8:1b:f6:26:b5:f4:de:e4:ac:ec:fa:b3:
dd:3e:d3:03:f5:17:df:2d:ab:d4:8e:55:75:18:85:
50:68:19:4e:ef:84:f9:e5:26:eb:25:ba:bd:97:36:
dd:56:f7:d8:de:a6:28:53:f2:9f:bf:23:83:73:53:
31:89:9b:a1:04:a2:4f:b4:a2:b7:ad:6f:09:66:30:
f2:9d:e7:97:77:bf:ad:a0:23:d2:6d:cc:60:50:c6:
f3:17:57:ce:2f:4d:6c:74:67:30:f2:b6:82:b9:6e:
71:c5:77:d3:a4:46:cd:1d:6c:34:12:23:58:d1:b1:
2f:12:8f:98:81:5b:f0:7d:32:f3:9c:e2:86:ff:25:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:1B:58:51:06:21:D4:04:67:2D:34:45:EB:09:48:E2:B5:61:FE
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b0:64:72:52:8f:ac:3e:cc:c1:b7:df:32:c9:af:9c:66:7a:
1b:38:4b:0b:69:cc:01:d2:5e:60:df:d4:ba:d9:a2:ff:0e:c5:
42:96:7f:bf:f2:e2:dd:a2:31:aa:d6:c1:09:fd:66:f8:4b:eb:
14:c9:32:9c:54:dd:c5:ac:aa:43:bd:f3:10:b1:8a:44:2f:1b:
3c:a7:fb:8d:b1:d1:79:eb:7c:72:97:51:8a:ac:0c:4e:01:5d:
a4:7d:69:cc:b1:09:5f:30:3f:94:6d:0c:7b:b3:2f:8b:b7:9f:
44:60:60:a6:cd:f4:a4:3b:02:c7:03:30:d8:24:d7:f6:97:dc:
bc:bf:61:4b:0c:92:47:0a:61:75:a4:2b:bb:45:1e:1e:4d:16:
74:bd:55:a3:9e:62:c1:11:be:95:3d:1a:5f:9b:d3:ae:38:f8:
9b:69:29:7b:b9:54:64:9c:87:f8:8e:83:99:e4:8d:9b:58:46:
22:24:f8:d6:86:c0:31:b8:2c:3d:1a:49:70:e7:db:ea:5e:cc:
28:65:94:6f:e0:05:7b:1e:cd:70:ca:ae:31:24:02:e1:ec:2b:
60:20:60:f3:54:fe:36:5d:ab:69:4f:59:7c:57:26:88:96:f6:
89:95:06:c6:88:08:87:09:f6:bb:1c:de:93:7e:81:ac:03:ff:
a1:5c:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:48:19 2025 by rpki-client