Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: uFebVqycuimVbJk8LY1VMqbzRPpTVa2vfz3YGZf6+CQ=
Subject key identifier: 62:24:77:08:DC:73:06:BB:8E:76:E3:D0:6E:00:13:F0:7A:DC:67:94
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 0195E15924A26DC07A6DAC75F54396E15DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0929
Signing time: Sat 29 Mar 2025 10:01:10 +0000
Manifest this update: Sat 29 Mar 2025 10:01:10 +0000
Manifest next update: Sun 30 Mar 2025 10:01:10 +0000
Files and hashes: 1: JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa (hash: oEwUEmn9BEj5nCyDqmNSjb0S6HVplNaKnZXZP0H/66Q=)
2: UojdXawnx16jHvQuUPhyRGr9AUA.roa (hash: Hr78TmcOhe37IFpeiMzuuAac0/dugWioMJ66bJbp/E8=)
3: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: /RHtsWPujs6qrWs6balSVh28VsD8rqApYc++6yT6jSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:24:a2:6d:c0:7a:6d:ac:75:f5:43:96:e1:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Mar 29 10:01:10 2025 GMT
Not After : Mar 30 10:01:10 2025 GMT
Subject: CN=62247708dc7306bb8e76e3d06e0013f07adc6794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:f9:5a:f8:fa:20:92:6d:3c:a0:f9:7c:ec:
88:b5:7f:ef:d6:af:fa:98:7a:aa:28:24:24:79:2c:
15:5b:ef:30:03:e6:10:70:c6:6d:55:b8:b2:34:73:
1c:2d:fa:5c:ef:3a:64:a7:80:c6:4a:22:94:97:0b:
3a:83:20:b2:ab:ec:3b:57:e9:23:c2:5f:77:bc:18:
40:3d:f2:95:e5:5a:a5:0a:44:79:28:ee:42:d1:91:
42:2b:c0:b1:7a:6f:1d:2e:36:48:4c:ee:ca:18:21:
08:ac:e2:6b:1b:ad:c7:af:38:d5:0a:c7:80:7a:5c:
b1:66:d4:5b:b1:03:42:e3:4e:ec:7e:85:64:91:73:
12:2e:05:f7:ae:ac:ab:3e:41:c3:c2:6b:88:7a:e9:
17:17:54:12:68:ce:84:7f:05:ce:eb:d4:6b:cb:0f:
2c:a5:6b:8a:c9:fc:d0:1d:9c:11:99:21:1b:df:bb:
4c:10:0e:7b:cb:a7:ae:eb:e2:1d:f1:f8:bc:59:9d:
74:c0:24:49:df:30:d4:da:aa:f4:77:1b:cc:aa:30:
5c:6f:91:b6:1c:f8:3b:78:4f:89:96:4c:b2:08:1a:
86:85:96:82:ba:5a:32:ff:46:a8:fb:7a:58:44:b0:
12:80:3c:0d:25:22:d2:10:3f:f7:86:a8:2e:2e:59:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:24:77:08:DC:73:06:BB:8E:76:E3:D0:6E:00:13:F0:7A:DC:67:94
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fc:b2:05:89:45:63:bd:62:ca:27:8f:55:54:03:23:32:d1:
ee:c6:fb:bb:2a:c1:3e:c9:93:92:12:96:15:0d:5c:9d:9d:83:
e3:9f:a1:2c:b6:0b:8b:d2:89:f0:4d:7e:3a:ad:be:e0:93:8f:
82:0e:cb:72:37:90:01:21:40:3f:20:4f:57:b2:83:37:b4:a4:
92:8f:9c:a8:a5:6b:af:c9:bc:e5:50:c7:d4:23:ea:d5:bd:06:
86:80:ea:2c:6a:58:0b:ae:c1:92:9e:dc:cf:a3:d7:65:4d:e4:
e9:33:15:b2:04:9b:95:76:5f:42:8e:7f:b8:ac:c0:5a:d3:aa:
a8:cc:c9:8b:d7:bc:94:ba:96:49:35:d2:0a:c9:7d:a0:c4:db:
61:27:9c:ff:ba:82:70:5d:f1:6d:ac:c7:77:20:90:9d:cd:ba:
3a:54:17:21:8f:52:8f:ed:a4:47:af:cb:9d:64:3f:f6:1b:71:
10:be:1e:e4:33:9e:42:f6:f7:4b:f9:a6:4c:82:ce:b8:21:3b:
2e:1f:d9:eb:f9:f9:cb:22:51:2c:13:8a:e5:50:91:ad:32:a7:
8c:a0:ce:f8:e9:4f:e2:38:c5:18:ee:6d:6b:79:5a:69:6c:7f:
8f:98:06:af:a3:e5:aa:9b:d8:49:d6:a7:95:8c:7e:08:8b:63:
f4:cb:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:46 2025 by rpki-client