Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier: efJe/Prrw/jJ8F22tnAZhxtPMbI+uXkS6vGhpw/25g0=
Subject key identifier: EC:6F:E6:06:B3:07:44:9A:97:B8:89:CE:6A:56:30:55:34:1A:C9:EE
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial: 0195E122440257ECAD35A3C9A1334CA28132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number: 047A
Signing time: Sat 29 Mar 2025 09:01:13 +0000
Manifest this update: Sat 29 Mar 2025 09:01:13 +0000
Manifest next update: Sun 30 Mar 2025 09:01:13 +0000
Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: NxEsDoj6cO4dD9xYIV09wXQU9vJmpH/lLraTPCp1TKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:44:02:57:ec:ad:35:a3:c9:a1:33:4c:a2:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Validity
Not Before: Mar 29 09:01:13 2025 GMT
Not After : Mar 30 09:01:13 2025 GMT
Subject: CN=ec6fe606b307449a97b889ce6a563055341ac9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:69:56:7f:d5:44:f6:45:c5:4f:7b:75:c9:
2b:1f:ec:76:a0:ed:44:d1:be:08:16:26:9d:73:2e:
59:82:f7:2c:6a:eb:48:fe:ba:78:d0:26:55:b9:b4:
c3:7e:0a:b5:d9:17:26:bf:78:9c:12:99:c6:8e:32:
8d:20:c1:18:8b:6f:05:22:bd:19:24:03:ba:e6:21:
f9:2b:03:6f:44:ad:a6:ce:58:89:ca:3b:83:34:b8:
f3:f8:68:bf:6e:10:c6:46:25:10:a9:3f:33:e1:0e:
80:b7:c2:3e:2d:fc:fc:d8:0b:cd:8b:cc:1e:12:e3:
99:38:45:b6:e9:87:d8:98:f1:3c:a2:ee:9a:3b:4b:
bc:a2:73:e6:02:75:2c:b9:35:f0:c6:be:39:26:7b:
a8:38:c9:c8:88:1e:55:ca:15:66:05:4a:e3:f3:64:
56:1e:2a:eb:3f:64:c1:2e:0f:19:e8:2b:10:0e:8a:
12:58:c1:4e:b5:49:f6:c9:69:9f:2e:b6:f7:ec:99:
df:11:bc:d8:de:8a:48:1f:7c:0d:c2:a0:c6:0e:6f:
35:d9:82:4f:e9:01:43:37:d3:a2:3d:08:5f:11:ee:
c2:be:27:e8:a2:7d:88:bd:7e:a9:2d:24:a7:7b:0b:
a6:5d:64:dd:d8:60:4a:35:a3:5d:16:af:e6:4e:93:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6F:E6:06:B3:07:44:9A:97:B8:89:CE:6A:56:30:55:34:1A:C9:EE
X509v3 Authority Key Identifier:
keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:26:d7:02:22:61:36:1f:e8:f6:96:96:cc:98:2b:22:f7:7e:
8c:dc:da:70:67:91:6b:ae:3a:45:03:48:b0:82:a0:fe:ad:bd:
9a:20:67:53:d4:49:aa:d6:7c:66:f0:0b:fd:81:39:81:11:32:
fb:ed:ab:33:0e:dd:c6:c6:a2:a4:39:af:77:58:ec:ab:51:1c:
1a:34:36:5e:64:d8:78:52:f0:53:82:9f:f5:b4:ad:99:ce:90:
45:91:d9:f8:62:fe:98:c9:8f:3e:e6:43:10:16:05:6a:b7:12:
16:df:42:e1:4d:44:80:c3:6a:15:f4:c3:f4:fb:c1:d7:48:8c:
11:44:82:d9:b3:50:7b:c8:64:d5:7f:a2:d0:5a:7e:39:d4:64:
10:ce:cb:44:94:56:30:ad:e4:18:00:ec:aa:41:ea:b4:b2:4a:
dd:3e:e2:e5:3d:34:e1:7a:9e:51:25:10:ca:f5:08:e7:f7:ee:
09:74:7b:15:92:53:96:4d:e5:83:93:c3:51:5e:14:ad:df:de:
e6:a2:a4:ed:cc:62:de:37:27:5e:8f:bb:d1:6d:7c:82:52:e4:
fc:a6:03:42:0c:e0:f6:00:a0:6e:8c:31:7b:5e:6a:b0:88:21:
1c:a2:78:ad:0a:58:7e:ee:7b:2f:8e:a8:45:a3:04:11:a9:1b:
27:8c:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:57 2025 by rpki-client