Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: oF34MfSVeW6xNc5u7/AggBJND3/fIEPKF36jOJuvs5s=
Subject key identifier: F8:4E:E8:20:5A:D5:5D:F3:09:AD:F4:2D:6C:CD:6C:DB:07:36:86:D5
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0195E19028588A114C572FFF198C3BD3FAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0BAA
Signing time: Sat 29 Mar 2025 11:01:15 +0000
Manifest this update: Sat 29 Mar 2025 11:01:15 +0000
Manifest next update: Sun 30 Mar 2025 11:01:15 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: qLLkzw/8bsuo1FZpEDCrRS/SeR6p0+/l4Ff4R+OiyhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:28:58:8a:11:4c:57:2f:ff:19:8c:3b:d3:fa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Mar 29 11:01:15 2025 GMT
Not After : Mar 30 11:01:15 2025 GMT
Subject: CN=f84ee8205ad55df309adf42d6ccd6cdb073686d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:a9:86:52:b3:da:d2:45:01:e2:98:5c:c0:
e1:ce:1c:47:26:6f:ba:7f:6a:a2:f5:11:8a:13:e9:
d1:d5:b9:a8:ef:84:3f:9d:e5:30:89:74:10:14:f8:
88:1d:e7:f5:bc:01:6b:a3:bd:e3:60:90:e0:3c:ac:
bf:4c:70:36:9f:32:85:8e:9e:52:95:97:81:f9:34:
0b:c5:28:ca:b8:56:32:1a:96:3c:e8:45:92:89:d2:
9f:81:ba:34:ee:18:50:c4:53:2d:8b:9d:7b:77:dc:
a1:1f:78:9e:cf:ca:9d:9e:80:fc:e4:81:95:a5:c0:
11:64:df:b4:09:97:7f:6f:71:ac:dd:57:f1:bb:19:
f8:ba:6e:83:8d:a0:3a:4d:c0:f0:a1:2a:07:fd:5c:
32:0d:e1:c9:4e:10:e6:a0:dc:db:7d:0d:3b:e5:e0:
ac:2f:22:db:d6:41:72:ac:ff:7f:c0:09:b1:0b:ca:
86:88:34:41:0b:48:0e:12:59:9b:63:b6:1e:07:70:
43:78:c8:88:af:0f:76:a1:ff:99:b7:16:3d:1d:5f:
c5:86:32:51:bc:3a:2a:09:ea:c9:a1:58:9d:11:55:
df:e2:b9:8f:17:d6:4b:c2:e2:7e:a6:e1:3a:9a:02:
aa:1f:90:13:d8:ce:7c:c6:ab:96:bc:a5:32:aa:76:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4E:E8:20:5A:D5:5D:F3:09:AD:F4:2D:6C:CD:6C:DB:07:36:86:D5
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:de:cd:a7:7c:5f:23:76:ec:e9:ce:94:0f:9e:57:96:b3:7a:
1f:c1:59:35:8d:b2:64:46:b6:a6:a4:88:03:ca:09:c5:9f:8b:
9e:21:a2:6d:4d:5c:a3:a9:8c:c4:45:ae:a6:aa:ab:3b:0c:23:
c6:61:ca:7b:43:14:83:d9:a2:02:bd:4b:a7:8a:aa:bb:e8:8e:
6a:9e:d1:d2:db:14:fe:b0:e3:c6:fd:bd:3d:e8:b1:6d:54:91:
a1:31:a9:86:ba:2c:49:d4:9c:f8:e1:ca:f1:2d:59:b7:01:e0:
be:27:00:35:92:7e:4c:8b:27:e6:f9:50:f3:9d:bf:99:4b:5c:
79:f1:34:85:b2:70:96:f5:49:f0:f3:af:e4:40:ec:52:c4:77:
db:4c:a3:f9:7d:e8:cb:82:11:a2:2d:8f:1d:77:b5:ff:cd:f4:
f9:c8:68:74:28:18:41:86:db:09:d1:10:8c:62:0e:e2:49:c5:
0b:5c:3d:98:53:1c:2c:6a:45:10:31:8e:1c:d1:1c:df:7f:17:
a1:c7:d4:9f:76:4f:8f:d4:29:5e:20:ea:14:10:70:b9:70:6e:
d4:7d:e1:0c:17:73:cb:04:11:ce:df:48:ec:42:15:21:99:e0:
49:bd:73:c6:c1:2a:6f:c6:03:a7:1c:0b:38:4b:80:fb:45:53:
a5:e6:0e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:30:21 2025 by rpki-client