Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: XDreL71m0uaZEMg+GgaQB+94fahbQv2TjaRwPgWqfiM=
Subject key identifier: 5A:CD:0E:10:2F:B7:E0:DB:63:AC:49:7D:9D:12:B2:23:19:2A:21:E5
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 0195E07D483948052C0183BFBCC22852D386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 16
Signing time: Sat 29 Mar 2025 06:01:01 +0000
Manifest this update: Sat 29 Mar 2025 06:01:01 +0000
Manifest next update: Sun 30 Mar 2025 06:01:01 +0000
Files and hashes: 1: 0-WwVD2zFPGNgQhhntKyco3wY3I.roa (hash: bPryhs2CIXqAzaBTX4TIyszyma7cGcWiYG+PS79estE=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: Qqd7jO7rumImF/emfyqvyu9BqS/91Z3yxTI4U2Mfqe8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:48:39:48:05:2c:01:83:bf:bc:c2:28:52:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Mar 29 06:01:01 2025 GMT
Not After : Mar 30 06:01:01 2025 GMT
Subject: CN=5acd0e102fb7e0db63ac497d9d12b223192a21e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:68:99:19:76:1e:87:f2:7a:d7:43:b5:bd:
5e:f0:14:6d:30:dc:90:ee:f0:9e:7e:2b:ba:11:01:
1e:e5:97:d7:8c:8c:de:da:5f:f9:d3:5a:3e:8e:37:
98:d9:0a:66:43:2c:33:9b:e5:c5:f7:1f:78:75:58:
4b:68:a2:5c:33:1f:52:58:3b:25:03:f4:f7:46:1b:
f9:c6:fe:4d:42:88:7c:73:e9:f7:63:99:59:9a:35:
75:26:05:2a:9b:e0:4e:31:ab:4a:65:0f:74:ce:be:
02:4f:cd:6f:bb:0f:82:25:c0:15:67:29:57:7e:90:
b7:73:e3:14:72:33:7c:85:cc:93:01:6c:01:b7:3f:
62:ba:05:d4:44:f0:19:a6:26:a2:fd:da:a2:95:06:
35:e1:f6:df:e3:d7:f7:f2:63:41:05:eb:b9:d5:c2:
85:ec:fe:09:5d:8a:77:b7:06:43:08:4c:91:5d:b8:
cf:a9:88:db:27:49:4c:7e:43:b0:f5:a9:67:cf:d6:
c6:bb:ef:48:e5:98:75:7e:4f:2e:ad:4d:fa:be:11:
2d:82:df:ed:1f:07:d8:0f:c1:8e:96:d3:1b:bf:f7:
3e:b8:60:b4:e1:c7:ac:45:21:8e:4f:0e:7f:6f:fc:
ed:73:02:d7:fc:c7:2e:7a:65:d9:53:a8:af:c5:80:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:0E:10:2F:B7:E0:DB:63:AC:49:7D:9D:12:B2:23:19:2A:21:E5
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:14:cc:59:e0:a1:7b:d4:22:08:7a:b2:bb:d0:f2:9b:63:ec:
3a:06:ec:89:a8:7c:25:7d:cb:19:0f:e2:95:7f:1a:ed:5b:dd:
e1:31:1f:1f:a5:a2:0c:5d:a5:e2:23:98:c2:98:a3:37:3d:05:
e0:29:17:64:65:75:17:e2:e6:17:01:51:23:06:2c:2e:a6:78:
b6:fd:a7:4b:d2:4b:a5:7d:4f:4f:00:dd:5c:27:52:d9:42:87:
a3:39:8e:b9:ca:83:f2:09:74:c3:2a:55:e0:ae:c3:09:8a:9c:
70:7a:b3:c0:0b:c0:e3:08:d8:d2:3c:54:9a:87:8a:f1:ac:64:
b3:75:bc:a5:82:39:fd:56:0a:fb:a6:bb:ef:3c:9a:64:04:37:
d0:e2:dc:fb:6f:0e:be:63:c2:1c:3f:df:66:8b:f6:5d:63:73:
38:b9:2f:f2:66:f0:9e:8a:f6:00:08:86:0e:33:99:43:62:d3:
88:8f:4c:80:f1:2a:9f:01:85:9f:c3:b8:ae:b7:e1:7a:3b:6a:
cf:e3:88:9e:ec:e3:d6:48:4c:eb:82:aa:db:5f:73:59:41:fa:
6d:f8:dc:f8:b6:f1:32:09:5c:19:3b:24:6c:13:f0:27:25:48:
56:fe:50:c7:e0:88:03:d6:d6:ab:ac:ed:b3:87:9a:62:3f:3c:
cf:ae:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:07 2025 by rpki-client