Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: Wfhfk0G5rm3tgGOTEU0zKCmQVCTg3wTOfDSmB/qxoEk=
Subject key identifier: DB:5F:46:3C:5A:6C:E7:41:7A:75:0D:F0:8E:74:EE:66:90:39:F7:97
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 0195E046BCB50FD61D6DB0B219D840341C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 0B2A
Signing time: Sat 29 Mar 2025 05:01:26 +0000
Manifest this update: Sat 29 Mar 2025 05:01:26 +0000
Manifest next update: Sun 30 Mar 2025 05:01:26 +0000
Files and hashes: 1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: 294yNmQJKqZgUY3ZTG/J2RHAdtI9BDo1Lq/LpJId8sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:bc:b5:0f:d6:1d:6d:b0:b2:19:d8:40:34:1c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Mar 29 05:01:26 2025 GMT
Not After : Mar 30 05:01:26 2025 GMT
Subject: CN=db5f463c5a6ce7417a750df08e74ee669039f797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:30:b8:e8:d8:b0:c1:00:0c:31:e3:82:b6:
fb:be:d2:56:58:26:4f:b0:31:a2:30:78:c0:db:a7:
78:f3:40:95:6d:2d:d0:a9:41:e3:bc:26:d0:80:94:
ed:38:66:12:ae:c0:38:93:07:f5:d9:33:ab:af:b1:
bc:2b:63:69:d9:96:55:29:d9:ea:93:79:a9:5d:e3:
51:ed:80:d8:84:85:24:83:86:7f:d1:fe:d2:b0:2e:
59:6a:4c:d2:1f:7f:86:07:84:0e:c3:1d:6b:8b:1d:
2c:08:a5:60:e4:07:af:86:f6:1c:c4:c7:f3:8b:55:
ab:97:6b:86:9d:ea:f1:14:de:1a:f3:5d:08:97:b5:
40:8a:68:43:ee:0a:b1:2c:ae:15:9e:3b:0c:6e:0d:
6b:fd:d8:ee:4a:89:87:f9:07:c0:4e:3c:a5:bd:7a:
2b:ee:25:bc:7b:30:b0:db:5f:be:85:32:46:39:62:
ff:4d:13:c6:4d:01:86:b9:aa:8e:2d:7a:73:b8:1a:
7d:72:78:14:d7:c3:13:38:8d:3b:5e:79:0d:25:b0:
b0:97:ba:b8:c4:9d:aa:9c:89:a8:c9:9b:b1:ea:18:
f8:33:67:c9:d9:71:29:37:68:8f:dd:7d:67:ae:78:
19:2e:7b:a0:c1:dc:fd:38:f7:c3:4d:8a:b3:80:f5:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5F:46:3C:5A:6C:E7:41:7A:75:0D:F0:8E:74:EE:66:90:39:F7:97
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f3:1c:97:a8:7a:33:64:f5:32:fa:ef:a6:b9:52:47:4d:d1:46:
7c:53:01:bf:85:ba:a5:08:29:76:23:f6:f2:54:e7:c5:c4:03:
36:c1:60:a7:a8:bd:30:08:ff:11:b3:62:4e:63:3d:23:fb:59:
8f:c5:14:7e:af:b4:da:e4:e6:af:77:d4:c6:2b:ba:43:65:5c:
c0:e6:0f:4b:c7:5b:b1:26:d0:45:e4:49:6c:99:2c:7b:eb:65:
a4:64:b4:7e:b8:cb:aa:73:76:92:0f:aa:40:9f:de:c2:94:b3:
81:45:75:3d:84:60:45:93:b3:cb:fe:46:04:d2:37:f4:82:2a:
fb:fc:82:79:48:be:1c:fe:77:b7:9d:53:d7:a6:90:d1:fa:4f:
49:a4:59:60:ce:91:e3:be:fd:5f:df:ac:96:76:f1:af:1e:9e:
6c:08:73:3f:07:c1:43:e7:4b:5d:af:88:4d:84:88:d9:c0:07:
c0:17:29:98:b4:f2:b4:f0:99:a3:7b:ef:16:82:7a:02:4e:b2:
16:97:44:3e:55:f3:67:79:db:f5:b6:be:2e:84:6c:d4:54:04:
8c:f2:71:c4:9b:99:16:01:67:41:02:77:bc:2e:20:58:1c:93:
da:5b:f1:5d:0a:3f:f6:6f:df:17:09:28:34:19:4a:6c:7e:5b:
52:11:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:46:46 2025 by rpki-client