Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
File: pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft (raw, json)
Hash identifier: SJgtIKQ3Oi3kTmdMXe3lvH0LRpqA1QXW+XeKc6uvTyY=
Subject key identifier: 93:3E:AC:BA:3A:C6:C5:6C:A9:42:AC:C8:44:24:07:38:EC:EE:13:07
Authority key identifier: A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76
Certificate issuer: /CN=a5920dec6ff00949e82161721eb94cc645e34776
Certificate serial: 0195D0D39BF4EC999BE86071EA88B2A0F8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
Manifest number: 0F6A
Signing time: Wed 26 Mar 2025 05:01:23 +0000
Manifest this update: Wed 26 Mar 2025 05:01:23 +0000
Manifest next update: Thu 27 Mar 2025 05:01:23 +0000
Files and hashes: 1: YR4ujQ2sFqpF0bDdCJnNqsqvwEU.roa (hash: yGa4f7/iphZYLthfBwuXeS2/L8/Ji+s9D58wXkN4t3E=)
2: pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl (hash: YZkoOzyq1eJSZ/o/EIyDdTFgAbGatj+6nN1rFD0IRnE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d0:d3:9b:f4:ec:99:9b:e8:60:71:ea:88:b2:a0:f8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5920dec6ff00949e82161721eb94cc645e34776
Validity
Not Before: Mar 26 05:01:23 2025 GMT
Not After : Mar 27 05:01:23 2025 GMT
Subject: CN=933eacba3ac6c56ca942acc844240738ecee1307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:85:38:86:c6:ea:bb:2c:89:38:64:2b:54:
01:e0:df:cb:b1:7a:23:6f:cd:e4:8a:b0:5c:0c:8c:
c3:7b:67:fe:4a:d4:36:91:a4:bc:af:0d:74:1a:6f:
52:39:90:ea:fb:58:05:3f:41:f2:76:60:a1:97:f3:
ff:30:4f:29:34:e4:5b:85:36:4b:b7:d2:e9:db:26:
24:68:df:9a:12:ad:1d:12:93:27:48:ca:d9:3e:4a:
6a:0b:62:76:60:8a:34:4b:2e:14:47:9e:13:82:25:
65:21:83:90:0b:ce:60:0c:7d:3c:bd:14:b5:2b:ee:
66:c8:a3:2e:16:ce:e3:1d:36:bb:10:13:27:5c:95:
ae:86:1b:64:25:18:e6:ae:45:fc:75:fd:87:17:76:
aa:18:0a:b9:bb:c0:7f:66:8c:fe:f9:d8:86:03:f6:
ca:90:49:9f:0b:ce:e0:47:cb:57:81:53:c7:d2:68:
60:74:72:79:b1:41:57:83:9a:c0:1c:f6:4a:3d:eb:
0e:74:26:58:04:3b:c7:67:d4:ab:73:d1:db:74:f8:
63:87:81:02:3f:3f:0b:64:4c:7e:2e:83:1e:20:c6:
0f:86:9f:fb:03:34:82:22:3c:a2:80:57:19:85:82:
e1:37:8d:d6:11:ab:a2:41:a8:1a:83:06:7c:81:6b:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3E:AC:BA:3A:C6:C5:6C:A9:42:AC:C8:44:24:07:38:EC:EE:13:07
X509v3 Authority Key Identifier:
keyid:A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a5:06:19:9c:f6:53:d0:be:ec:3f:61:9d:bc:80:5d:cc:b9:
c1:ac:04:3c:52:a6:66:d6:e6:22:32:97:bb:19:dc:ca:af:40:
c0:08:aa:30:67:13:72:4c:0b:b9:07:9d:5d:62:12:0c:e4:13:
b7:c1:6f:74:bd:af:98:a9:7c:d5:d1:10:49:7a:1c:e8:6a:4e:
a7:6e:4b:bc:4c:cb:82:72:30:d6:b0:d9:08:03:39:c2:99:80:
ae:22:f7:40:9d:f4:34:0d:ae:88:7d:85:4e:a8:18:56:66:95:
c6:66:7d:33:d6:37:7a:39:6d:2e:64:4a:76:b5:ac:c5:5a:5a:
09:1d:49:60:c5:30:6a:ae:5f:8b:33:2a:21:3d:d2:f6:51:05:
f1:32:e7:87:ff:cd:de:ec:15:05:0e:f3:e9:39:13:a0:c0:fd:
de:0e:ae:a2:e0:c9:39:0f:b3:00:d7:b8:7b:ad:b3:63:a5:ba:
8b:d6:04:53:2b:68:74:a2:5a:74:64:df:0f:0b:4b:0e:70:62:
c7:d0:ba:2a:2e:8f:76:77:3a:59:e3:a3:48:50:e7:17:cd:ea:
2c:9e:15:e6:e6:3b:4a:6e:e7:7e:9c:2d:cc:ec:0a:67:97:5e:
b6:90:29:f7:cc:fb:aa:57:57:78:34:5e:ef:97:f0:cc:6d:ed:
76:6f:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:03:08 2025 by rpki-client