Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: wrTPNQlFa9fhN35Mc6ksCsmSts4JSE4dune9NlpO5cA=
Subject key identifier: A2:52:34:09:26:88:0A:F6:64:08:D8:93:34:EE:A2:D1:D4:54:B9:6A
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 0195E1595FDF4D64D26D7A741520452D3DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 0490
Signing time: Sat 29 Mar 2025 10:01:25 +0000
Manifest this update: Sat 29 Mar 2025 10:01:25 +0000
Manifest next update: Sun 30 Mar 2025 10:01:25 +0000
Files and hashes: 1: _ySRDLzQdwiGbOJn6VG0WghGnvs.roa (hash: iftvJSfyvy0E59eeWCgB+fQqIp2vGxrZU/nTeE6jx9c=)
2: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: wriVHI6glx5BxSkGHrVYjI4uP92lz95NjwA543zGsEs=)
3: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:5f:df:4d:64:d2:6d:7a:74:15:20:45:2d:3d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Mar 29 10:01:25 2025 GMT
Not After : Mar 30 10:01:25 2025 GMT
Subject: CN=a252340926880af66408d89334eea2d1d454b96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:4f:60:d3:a0:0a:cf:de:0e:07:f1:21:cf:
8f:8b:93:69:73:2e:a9:0f:76:9a:76:d5:aa:1c:14:
4b:4b:d1:43:4b:39:ee:24:f1:63:f3:cb:d2:fa:f7:
4f:a5:b5:00:b1:f1:1d:69:e0:b5:fc:c7:02:e0:3b:
12:49:fe:77:be:72:43:73:08:fa:20:68:68:29:b3:
6a:d9:5a:8e:48:b7:50:d2:bc:e5:fc:27:8a:17:cb:
42:5c:3b:ff:c9:a0:b3:8d:15:d7:10:88:64:a8:a0:
1c:22:44:10:1b:7d:5f:86:cf:0a:7c:00:d4:7a:fb:
58:06:e5:e6:ce:9b:86:46:67:80:8b:56:42:de:e1:
92:94:3a:a4:69:a8:20:68:0f:a5:07:7b:b3:66:00:
ea:e1:5c:75:b8:c3:a4:dc:4e:4f:8a:c4:cc:8c:78:
de:ba:d0:ea:70:f3:76:c2:bd:31:ce:6b:f1:e2:f5:
03:59:5f:9a:87:52:31:6b:83:34:4f:d2:8b:3a:d6:
9d:a7:5c:04:b8:a9:d9:d9:cd:7c:6e:a1:8f:c3:e5:
dc:dd:4b:4d:8e:b9:98:71:d3:c4:04:fd:64:57:fe:
e6:b7:b5:9c:bc:5b:60:2e:ee:68:c1:be:28:74:12:
88:9d:74:04:2e:73:f3:e0:82:c9:02:6b:77:69:1c:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:52:34:09:26:88:0A:F6:64:08:D8:93:34:EE:A2:D1:D4:54:B9:6A
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d2:f6:8e:d1:97:17:d3:13:8f:0a:2a:73:0f:e9:33:04:39:
61:39:4e:d0:50:45:34:74:cd:0a:0d:38:1e:d5:fc:b7:aa:56:
44:e8:51:49:d1:33:e8:78:32:4e:87:95:8a:e3:8e:1e:92:f2:
1b:85:cd:b3:58:1f:9d:b6:b0:af:5e:31:a4:28:03:0c:db:5d:
e8:4e:90:7e:c6:e6:fb:b2:5a:ae:e5:d3:2d:f7:75:12:3b:bd:
4b:38:cb:45:8f:da:2c:17:b2:4e:12:b8:49:bf:21:e8:31:5d:
a6:54:77:79:b6:07:df:dd:44:7b:70:82:f4:fb:f7:72:da:21:
b9:4a:ca:cc:af:d7:c8:d5:18:b4:c6:50:5f:75:b5:3e:78:2d:
80:b0:b3:54:93:0c:89:20:4a:a3:90:75:9b:c4:4e:33:8e:1c:
93:67:e3:d3:40:d7:76:9c:35:b1:ef:38:77:f3:f7:49:11:57:
d7:30:ba:91:82:1c:fc:ed:96:61:bf:50:f1:66:03:eb:af:0c:
01:bb:64:1b:1c:15:50:be:9d:4c:91:ff:81:e3:76:40:d8:03:
fc:24:1a:f9:ab:eb:cc:52:2a:c6:41:3a:44:ac:fa:02:b6:4a:
7d:6b:12:06:b8:ec:41:be:d5:ac:44:ee:ff:a6:78:b5:0d:ea:
ff:6c:c8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:04:41 2025 by rpki-client