Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: 0eTi+UCud7bUPks+93UfVelH8+NTo7E4qBHDZ1R3frY=
Subject key identifier: 9B:90:CE:20:AD:AB:78:2A:D6:EB:BE:5F:7C:D9:1D:69:E2:D0:06:9F
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 0195E158FC190C99C31291D3D98F715095C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 03F7
Signing time: Sat 29 Mar 2025 10:01:00 +0000
Manifest this update: Sat 29 Mar 2025 10:01:00 +0000
Manifest next update: Sun 30 Mar 2025 10:01:00 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: FA94If3aZ71KtX85HJARH8cvvY5VY7TIunTB0qbMViI=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:fc:19:0c:99:c3:12:91:d3:d9:8f:71:50:95:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Mar 29 10:01:00 2025 GMT
Not After : Mar 30 10:01:00 2025 GMT
Subject: CN=9b90ce20adab782ad6ebbe5f7cd91d69e2d0069f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:99:29:bf:a8:89:df:34:7c:90:13:39:29:5c:
b5:9c:6e:17:69:0f:ec:bd:55:6c:13:c6:72:3b:95:
77:57:63:9f:af:82:5b:63:cf:06:49:1e:ad:1e:b4:
0d:cb:c5:9e:9a:05:25:f7:82:f5:09:4a:d7:81:9c:
12:0c:9e:4b:36:c9:bb:f0:2f:72:6b:31:14:30:a9:
dd:40:bc:ab:36:59:e2:f7:1b:00:86:66:fd:c0:81:
98:52:bf:1b:4e:b6:42:69:c9:b3:86:1d:63:f1:a3:
fb:a8:aa:67:57:21:52:c5:76:4f:40:f8:74:2e:99:
8a:55:06:f6:a7:33:11:ae:ab:9d:fa:11:50:dc:f5:
19:a1:d5:80:52:85:5e:f8:f4:73:07:f0:a5:e6:8b:
e8:0d:66:b0:56:e6:3b:e8:b1:51:fc:f5:0f:42:63:
c3:db:ec:bf:46:3a:52:fc:32:39:50:65:e7:25:60:
44:dd:5c:8f:90:74:06:59:a5:9c:dd:53:cb:d9:7a:
53:e6:d7:91:53:22:f4:b7:08:8c:7d:31:78:c9:8f:
0f:df:bf:b6:8a:35:9d:53:a6:c2:5c:45:20:93:e4:
53:a8:5e:a8:d5:42:f1:b3:6f:18:bd:d8:be:1c:3f:
e0:e8:7b:80:8f:c0:42:99:76:08:0f:0e:f7:fd:3f:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:90:CE:20:AD:AB:78:2A:D6:EB:BE:5F:7C:D9:1D:69:E2:D0:06:9F
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:25:60:df:1a:a7:15:58:ab:24:7c:8e:db:b7:2b:ce:3c:7a:
3f:77:eb:39:38:df:78:78:55:f9:e0:d7:27:7c:df:26:63:98:
28:79:0d:38:a8:8a:89:70:e7:bf:44:94:f6:77:ce:74:f7:e5:
e1:e0:73:d6:a4:0b:c9:81:5e:8e:f8:1a:de:c1:72:5b:03:83:
c8:85:a1:93:30:b6:17:57:e4:bf:6d:52:62:c8:80:4d:b3:15:
2f:c3:c7:f9:73:8c:27:5d:07:79:1f:a4:c7:ae:90:6d:25:5c:
32:50:25:77:90:88:7e:c7:4d:d3:04:88:e0:2a:bd:54:36:65:
08:81:bf:65:28:36:4b:e0:68:61:c3:6a:c2:0e:8d:ee:13:92:
55:7e:32:40:7f:0f:8b:b1:b6:61:a1:04:7c:4e:76:d5:de:b2:
ba:df:68:6d:5c:43:18:5a:0a:90:93:66:cb:ca:24:22:2f:7b:
31:c3:50:10:6b:2d:76:b4:f8:a3:59:23:12:fb:39:3d:bb:f4:
4b:8b:5c:ed:a9:ea:ba:6e:20:42:ff:de:32:49:38:f1:cc:90:
79:b1:16:89:99:7a:57:e8:99:87:5c:f2:d5:f2:9e:4e:46:45:
37:04:e6:01:29:2d:36:53:3a:d7:e0:4a:25:65:bb:0b:03:33:
b9:bd:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:58:31 2025 by rpki-client