Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: ZxS47AxNeDzeFg0l4a0qcWA4CWdaLy/3IsQ50xmy2G4=
Subject key identifier: 6A:CC:4E:57:1B:2C:06:D1:10:F1:9F:B3:EF:B4:F1:86:21:00:BC:BD
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 0195DFD8CF7D54B2B7466D09B793A86B134E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0DA8
Signing time: Sat 29 Mar 2025 03:01:22 +0000
Manifest this update: Sat 29 Mar 2025 03:01:22 +0000
Manifest next update: Sun 30 Mar 2025 03:01:22 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: utiaQxRGGmjPR/vhoRPOizhUCv1r4Pdxzgy6VKMIdA0=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:cf:7d:54:b2:b7:46:6d:09:b7:93:a8:6b:13:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Mar 29 03:01:22 2025 GMT
Not After : Mar 30 03:01:22 2025 GMT
Subject: CN=6acc4e571b2c06d110f19fb3efb4f1862100bcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:f3:1a:3a:7c:d3:c9:09:9a:6a:10:08:72:
77:90:34:1c:e7:3a:2c:3f:cb:c0:b2:1f:1c:76:72:
65:6f:9f:ec:a9:54:d9:09:f4:2c:0b:c9:dc:35:57:
17:3b:89:3f:d0:f3:f1:94:10:dd:88:d8:62:af:a5:
d8:ea:2b:48:7c:d9:2f:c3:52:3a:c1:b4:28:64:c7:
ad:84:d7:a7:eb:8f:37:70:8f:37:8d:41:d9:89:fd:
67:ce:ea:3d:56:08:f3:cf:1a:8d:10:85:96:d7:c0:
2b:30:58:4b:cb:8d:61:90:5e:3f:6c:06:ff:27:c6:
20:29:9d:4d:76:fe:6b:0f:bf:38:f1:b8:d5:bc:9f:
0d:8e:6b:f4:fb:c9:04:06:6c:99:c3:ad:f1:c3:9b:
38:95:e6:7f:6e:e1:44:1d:5b:35:a4:bb:02:7f:c2:
2f:18:1c:19:42:fd:e9:53:59:97:e5:de:51:27:14:
a9:3e:06:25:88:ef:af:5a:6b:56:27:44:dd:ab:a3:
46:48:d5:c1:96:98:eb:9e:7b:bd:20:11:7d:e1:d2:
fc:b2:07:6d:cb:f7:c4:23:3c:20:fe:54:9a:ab:f8:
f2:ce:77:75:3d:9b:c9:f1:1e:4f:70:b7:ad:8a:c5:
e6:bf:68:e6:fe:4b:d6:23:4a:37:35:47:e4:bd:9e:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:4E:57:1B:2C:06:D1:10:F1:9F:B3:EF:B4:F1:86:21:00:BC:BD
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:3f:49:bb:71:1f:67:22:09:5f:9b:01:d3:ff:7b:41:a5:
3c:00:34:0b:ad:ac:e3:c2:de:0b:60:b5:27:b4:64:63:eb:26:
2d:41:8e:d1:0c:3b:0c:50:b5:5b:be:f4:ab:91:7a:f6:64:63:
59:b9:89:65:ad:0c:2e:71:86:2a:ff:0c:14:9a:5c:0c:c6:b5:
f9:f3:20:f6:03:46:c1:33:9c:a9:6b:c4:27:c8:33:ba:09:c9:
4c:44:d0:a4:32:fa:58:f5:83:43:05:0b:34:fa:30:e3:de:fc:
5f:b7:04:a9:f0:33:43:1c:b9:72:e8:9f:78:3a:28:0d:89:aa:
7f:ba:8b:88:6f:50:0d:35:7e:1b:13:f5:cf:39:71:5c:c7:7b:
9e:8c:3b:e2:52:c6:69:d6:32:5e:7f:83:17:d2:29:26:4d:e5:
f8:2c:c9:f7:fb:aa:ae:90:a5:dd:69:c4:fb:7d:91:e0:45:a9:
f0:15:9b:09:90:2f:ee:94:4f:1b:3a:d2:5f:a8:6f:8c:00:2f:
c5:00:9d:1b:fd:19:02:65:7a:9c:4b:47:d3:f3:e8:f8:05:8c:
ee:00:9f:d9:5a:0a:da:9c:26:b1:12:63:f7:0f:d8:5a:c6:64:
e9:9a:af:90:5b:3f:50:d9:0b:df:19:bc:d3:a2:58:81:a2:80:
23:85:3d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:35 2025 by rpki-client