Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: Nd9gBz2QxKAACV9Ebnbk0b5UXuoss//UIo58VbkzXZY=
Subject key identifier: 0E:65:84:B9:08:9F:3D:BA:A9:C6:1E:51:2E:45:BA:DF:4D:B6:D9:91
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 0195DFD8CD999D3726F1E4DD268C04775517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1394
Signing time: Sat 29 Mar 2025 03:01:22 +0000
Manifest this update: Sat 29 Mar 2025 03:01:22 +0000
Manifest next update: Sun 30 Mar 2025 03:01:22 +0000
Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=)
2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: 29FilVs4d0QQh06/61qO+ONe8MrEEzIm/5F5EPDQ8rg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:cd:99:9d:37:26:f1:e4:dd:26:8c:04:77:55:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Mar 29 03:01:22 2025 GMT
Not After : Mar 30 03:01:22 2025 GMT
Subject: CN=0e6584b9089f3dbaa9c61e512e45badf4db6d991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:b6:5c:53:5c:5f:5e:9e:3e:c2:ef:41:f2:
4f:87:6e:a5:fe:74:a9:45:a9:91:ba:23:37:a4:50:
38:05:29:c2:80:3e:4d:a3:d6:fd:45:b8:5a:a0:96:
73:c4:4e:4b:88:82:10:00:bb:2f:78:a2:e4:1d:4c:
d9:d9:40:98:26:2c:a7:f1:07:e8:32:62:1f:e0:15:
ea:47:b1:ae:6c:fa:11:8e:d3:c0:b8:2f:d3:ae:7b:
d9:a3:f5:0d:65:4f:e6:db:73:19:cd:25:f4:d0:85:
09:3c:a5:5e:2a:73:19:07:22:20:7e:a4:fb:88:ac:
1a:ae:34:24:ef:7c:0d:28:d5:16:d7:b5:9f:71:1c:
59:69:45:1b:89:6b:73:34:fd:e9:e8:d9:69:0e:2e:
af:25:a0:e3:a3:c4:8a:98:e2:7e:92:da:a4:fd:93:
25:ad:f3:50:f6:88:41:65:4b:95:05:53:26:5b:81:
69:87:25:f8:8d:19:6a:6e:a3:ae:89:67:a1:48:f8:
e0:e8:a9:2d:f0:5a:0b:62:5d:23:d0:99:9c:df:06:
29:61:38:33:62:33:92:9d:1a:8f:40:4f:e3:7f:1f:
40:39:8b:9f:34:f9:74:6a:aa:31:05:fc:50:e3:9d:
f8:2e:2e:b0:04:37:f6:19:74:82:47:9a:e4:d2:2c:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:65:84:B9:08:9F:3D:BA:A9:C6:1E:51:2E:45:BA:DF:4D:B6:D9:91
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f4:c3:ab:11:ae:c5:24:d4:61:50:18:42:5f:4b:23:d7:76:
a0:69:19:dc:a6:12:76:53:cb:40:c4:ea:f4:57:6c:50:2c:d2:
bf:9d:c2:4e:d2:94:eb:28:c3:3c:ef:90:3d:3a:70:c0:33:ce:
ea:b0:1c:6f:f4:c0:4d:84:df:59:bb:c5:98:ed:b6:b7:64:77:
37:3f:ef:bd:bb:45:f0:4b:da:6d:c3:00:0f:04:e8:1c:8d:8f:
b5:38:3d:c8:a7:7a:12:86:7c:b6:ab:02:fc:eb:b5:d4:6d:5e:
08:90:71:aa:5d:d0:7c:2a:9d:e0:a0:25:e8:ec:4e:c0:84:17:
f5:2b:2d:e3:66:24:2a:8c:62:be:49:76:c4:b1:11:41:70:5e:
11:75:bd:65:f1:df:82:fe:7f:fe:36:56:a4:32:71:a4:67:19:
16:66:cf:9a:75:d8:76:3e:dc:9d:a8:e2:29:07:32:c9:2b:2a:
0a:6a:92:05:27:a0:3c:33:a8:e6:63:db:68:ee:b2:f1:8e:4e:
5c:97:d9:9e:1a:13:e4:22:fe:e4:df:2f:6c:60:44:97:89:4b:
10:17:a1:1e:65:0f:c9:6b:2f:dc:8e:ed:dd:ff:38:fe:04:72:
8a:fa:3e:d2:3e:18:4e:ea:99:06:88:5b:7d:59:10:25:f3:0f:
82:37:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:16 2025 by rpki-client