Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier: YWBQvkUcx8JS3P/APQVA/s3nAI78VDVmB+atT993fRc=
Subject key identifier: 4A:B6:36:A2:4A:63:D0:9B:48:68:57:77:A0:BD:F2:74:56:4D:D2:D3
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial: 0195E00FE605C22B53FBCA0738B3387A59A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number: 14BC
Signing time: Sat 29 Mar 2025 04:01:33 +0000
Manifest this update: Sat 29 Mar 2025 04:01:33 +0000
Manifest next update: Sun 30 Mar 2025 04:01:33 +0000
Files and hashes: 1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=)
2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: GyifAzFnhMYtzLbKTRJNli7w0fLIZIsrFxotLLHnnS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:e6:05:c2:2b:53:fb:ca:07:38:b3:38:7a:59:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Validity
Not Before: Mar 29 04:01:33 2025 GMT
Not After : Mar 30 04:01:33 2025 GMT
Subject: CN=4ab636a24a63d09b48685777a0bdf274564dd2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:94:f9:ce:a5:4f:0f:60:8a:0a:4f:10:a5:
2b:5f:58:fa:39:63:bb:4d:64:26:f8:f0:fd:3b:2c:
54:b8:11:9e:09:df:0b:56:fe:00:e1:51:96:6b:96:
e6:c8:35:e8:01:be:e2:1a:03:84:e3:5c:cc:b6:b4:
b5:80:8c:fb:59:dd:d6:71:0b:41:75:b5:4c:1d:20:
fd:6f:f1:4c:f7:25:fd:52:3c:e2:07:9d:55:8d:75:
21:08:3e:f8:42:d1:8a:89:dd:d0:a2:b4:41:cb:fa:
78:87:7c:2f:f1:3e:c5:af:08:d5:22:5d:2b:07:91:
b5:49:b1:87:b3:81:b7:e8:36:3f:7c:39:37:14:18:
23:a3:44:f4:03:a3:3e:a4:69:03:7c:56:df:b6:01:
0a:de:40:1e:66:00:20:fb:e0:cf:d4:54:9f:96:38:
b8:77:53:71:1e:a1:20:a9:76:94:6f:3d:78:cb:8b:
60:5d:df:26:62:8e:44:e6:c6:4b:3b:9e:dd:f6:60:
53:da:cc:e2:84:53:01:72:7e:ea:95:e9:01:1f:b8:
e4:ac:74:98:e0:df:48:2c:f3:5b:18:6d:1d:4b:06:
2f:06:ea:3a:89:54:e3:d9:51:0c:8a:a2:f0:39:08:
38:d6:33:25:b7:b2:16:f1:fd:0b:e3:10:2f:3d:08:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:36:A2:4A:63:D0:9B:48:68:57:77:A0:BD:F2:74:56:4D:D2:D3
X509v3 Authority Key Identifier:
keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:c7:46:a8:d3:c1:b2:6f:7d:9c:5d:46:22:e0:6c:57:1f:
9e:5f:d7:92:4b:07:4e:be:fb:73:b6:fb:d5:41:05:fd:3d:27:
0b:41:57:ab:5d:4a:45:f0:41:b6:b6:76:0b:84:8f:b4:a8:58:
cd:e0:f5:1a:d6:8e:7a:bf:47:bb:3f:82:5b:0f:42:13:0e:5c:
90:f6:63:bb:31:ee:ff:5a:d8:00:f7:c3:cc:eb:bf:da:e1:bb:
28:06:f2:98:b7:41:9c:f8:14:02:bd:73:16:ab:b4:3a:56:33:
4a:b5:1a:7b:8c:ed:a0:f4:eb:18:0d:a3:39:9f:09:99:c4:a1:
01:07:d7:f6:6b:7d:cf:0d:94:12:55:ab:b0:e2:2a:6a:71:ed:
0a:59:b5:f2:ac:5f:df:75:ad:77:04:b1:fe:f7:dc:49:f0:f4:
0f:4a:c7:4e:d5:26:70:88:54:be:97:ac:a7:62:ba:93:0a:c4:
d5:41:b2:9e:1d:00:5e:07:fd:50:1b:47:8a:35:4e:8f:47:0f:
7f:32:b1:94:53:d6:4e:ef:79:88:75:57:29:56:27:7f:12:88:
f7:8a:2a:f2:a5:f8:e2:d2:f9:26:27:9a:f6:e6:20:ae:ee:f4:
4b:99:21:72:91:18:39:df:30:eb:25:9d:52:e7:bf:a7:f7:e5:
ca:0a:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:08:19 2025 by rpki-client