Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: c8wSg6iSdGZOLtmSZ/JZgXNTp34TrguGKglqensRNcY=
Subject key identifier: A3:FD:FF:C3:75:BB:30:7A:90:5C:AE:C1:9D:8B:84:C5:EE:9F:FD:F9
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 0195E0B44DEB82C7FD49DA8B15E43DFC3750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 0EF8
Signing time: Sat 29 Mar 2025 07:01:07 +0000
Manifest this update: Sat 29 Mar 2025 07:01:07 +0000
Manifest next update: Sun 30 Mar 2025 07:01:07 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: 7RFKhQ1Q1m1HMzLh++gTv7WP6CuplYCSZHiTjrl3PUQ=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:4d:eb:82:c7:fd:49:da:8b:15:e4:3d:fc:37:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Mar 29 07:01:07 2025 GMT
Not After : Mar 30 07:01:07 2025 GMT
Subject: CN=a3fdffc375bb307a905caec19d8b84c5ee9ffdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:59:52:84:b4:29:5d:36:51:b3:84:4d:ab:
b2:0a:e6:ad:3b:ca:21:eb:f0:1b:9e:52:9b:ca:60:
dc:1e:ee:66:0b:36:5e:c6:6f:c6:f7:de:ea:4f:c5:
3c:3d:a4:49:99:0d:81:5b:4b:07:5c:72:2c:9c:98:
05:4b:9a:4b:de:55:32:ba:6d:08:62:dd:8c:29:a6:
6a:e5:fb:76:4a:a8:f3:84:cf:2e:04:c6:3d:31:69:
0b:2d:7a:ac:95:c6:a0:5f:7d:14:07:73:a5:ae:ea:
8c:65:22:9c:c7:df:4f:af:41:c8:93:b3:a2:0c:d5:
63:47:6a:fe:1c:60:b2:16:19:34:14:44:5e:0d:09:
04:48:0e:43:1c:0f:d0:7a:16:24:b4:3a:c7:79:2b:
aa:b2:91:a7:ae:a1:c3:f5:3a:d3:ad:4c:ba:ab:92:
99:69:56:80:71:dc:02:b4:93:15:8b:de:8c:7e:86:
ca:ed:eb:9a:29:88:ee:63:68:56:ab:ed:5b:e8:c0:
70:1d:67:aa:d3:cd:d2:56:7d:68:e7:6a:6a:21:0a:
a7:9d:9c:e8:36:c8:bf:13:fa:b5:1f:02:94:05:65:
49:23:dc:56:9d:c0:5c:37:9f:e2:97:e0:60:ca:5f:
8a:84:54:bb:85:64:37:72:54:2b:d1:a9:71:4a:db:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FD:FF:C3:75:BB:30:7A:90:5C:AE:C1:9D:8B:84:C5:EE:9F:FD:F9
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5c:43:ff:6b:d6:a5:3f:cc:40:dc:39:bb:3e:91:9e:f3:63:
f6:cb:ed:a5:4d:a4:02:e7:d5:2b:26:44:24:03:b1:96:ee:bd:
19:2b:18:b2:cc:90:f5:9e:fa:5d:7a:83:a6:8d:24:46:32:9a:
76:b8:e0:96:74:2f:5f:88:84:57:e4:74:c4:45:02:96:a6:a8:
54:46:b1:c7:25:1e:b5:f9:dd:6c:71:5c:30:38:1d:fb:81:56:
bc:65:f3:82:01:03:8b:fb:54:0c:63:e3:10:f0:13:cd:d5:6f:
82:8d:ce:d7:90:90:3c:24:85:8c:57:5e:9f:cc:ed:00:c0:05:
e7:fe:2c:7b:04:34:c3:8e:f3:cb:9e:d5:06:d6:ae:13:42:8f:
dd:18:11:12:56:c4:5b:22:32:ac:fd:7a:7d:bf:6b:14:22:57:
c0:63:39:88:7a:63:b3:d8:39:01:dc:d5:b2:24:7d:70:1f:2a:
4c:ed:a7:38:9f:e8:d9:e0:14:bf:b9:dc:0e:39:c8:a8:7f:b2:
66:bc:82:1c:00:ff:07:e9:2e:89:6e:0b:b5:a8:0b:48:b2:e7:
5b:7e:d7:8d:5c:f8:ff:ce:8c:1d:34:56:13:e2:d7:00:b5:33:
49:e5:0a:be:8f:6e:e4:66:0a:69:ec:f6:a0:1e:a5:98:05:5d:
0f:5d:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:39:44 2025 by rpki-client