Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: 8zcksJ+KH/KtsXMTkdXf5PVLhGqKauXIJ9EvW1ViaQE=
Subject key identifier: 20:E6:92:D1:13:50:A4:DA:17:11:D1:15:E7:5F:DE:1C:E3:9F:09:AE
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 0195DFD894C2659568E5EC087B249D4C152E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 0D56
Signing time: Sat 29 Mar 2025 03:01:07 +0000
Manifest this update: Sat 29 Mar 2025 03:01:07 +0000
Manifest next update: Sun 30 Mar 2025 03:01:07 +0000
Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: /JdpQJguwKLRKnF+ICt38VwCA0yhmREs8Z0GovLxKxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:94:c2:65:95:68:e5:ec:08:7b:24:9d:4c:15:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Mar 29 03:01:07 2025 GMT
Not After : Mar 30 03:01:07 2025 GMT
Subject: CN=20e692d11350a4da1711d115e75fde1ce39f09ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:fa:1b:1b:ca:93:8c:76:8c:c8:5c:5c:47:
89:56:2a:f7:21:18:5c:21:2d:90:1f:be:24:ae:7f:
e9:f9:6c:57:49:56:72:3a:4a:14:5e:2b:4a:55:c0:
2e:9d:96:35:8a:b0:6d:e9:59:f8:90:87:36:cd:54:
50:4a:ce:f7:cc:fa:12:57:63:6a:91:02:8d:fa:f9:
8c:7e:88:45:6e:68:cf:04:da:10:1a:28:97:32:5f:
da:49:d6:85:ae:bb:6e:47:e9:54:3e:70:ef:4f:11:
26:1a:43:c8:96:96:08:1f:02:04:a5:b3:e8:5d:bb:
01:55:ea:58:49:fd:c8:24:4b:2c:6c:46:ea:6c:a7:
fb:64:65:58:c9:d8:05:01:ef:6b:fd:a6:7a:e3:d8:
44:a6:58:c1:d0:ee:4c:b1:fb:31:81:0d:85:22:70:
a1:56:96:81:41:1e:8e:6c:b9:4c:98:b9:8d:83:65:
96:c6:f1:01:7a:9a:49:90:bc:b2:fa:d6:07:01:ea:
d6:57:2c:26:c1:2b:b6:fc:69:ce:6b:3a:f0:84:f6:
f2:4c:b0:13:52:dc:b0:08:33:d7:2c:ac:74:24:87:
54:24:05:7d:2d:0c:9a:3e:dc:29:18:2f:d9:9d:7d:
0a:07:66:84:46:a5:ce:23:f0:d4:6c:83:1a:0c:83:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E6:92:D1:13:50:A4:DA:17:11:D1:15:E7:5F:DE:1C:E3:9F:09:AE
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7e:02:17:e4:ae:36:21:97:1b:4d:10:ba:a3:f5:f8:4a:df:
65:e3:9c:55:42:8e:46:18:71:ad:3a:c1:b2:3a:f7:db:8d:35:
88:cb:23:99:1e:48:54:f6:43:f4:a0:d1:9e:75:eb:ec:2e:80:
d8:99:f5:e6:27:06:7c:87:9b:35:9e:fc:e7:43:79:ea:e3:02:
df:87:c5:3c:67:fb:0b:e1:c2:53:b3:e3:c2:c6:88:34:1d:b5:
b8:17:0e:c2:4f:a6:81:6f:49:cc:95:cf:f0:b6:60:2a:0a:19:
20:eb:6e:df:0b:e5:2f:03:c4:18:da:53:34:14:d0:a6:96:1f:
80:b2:df:91:13:c1:21:8b:d7:ae:b2:24:b3:fc:08:f8:c9:a9:
cd:2e:e6:af:31:6f:d7:ea:da:6f:20:7d:8f:42:58:c7:65:34:
8d:17:c7:0d:18:77:4e:6c:af:5c:a8:14:32:31:24:93:fa:4a:
fa:1a:8d:4e:fa:cf:aa:3d:4f:16:b5:47:34:8d:bc:2c:2d:b6:
01:0c:cc:cf:00:d7:d9:3c:ce:e1:d4:3e:03:3a:64:94:0f:3b:
d6:44:d5:5c:dc:da:39:dc:e3:2f:12:fc:53:a2:be:08:25:26:
64:2f:92:bf:f7:78:c3:bf:72:7f:df:c6:47:9d:ac:3e:fb:a4:
f7:eb:da:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:19:44 2025 by rpki-client