Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.mft
File: zz5DvuJxGCQ5WjnJFBje6kwfNHs.mft (raw, json)
Hash identifier: inyA/1gqPBoWt9syR7D5aevZ4uYY6FzvL3gH0sqMVDQ=
Subject key identifier: CF:CF:D8:97:82:87:F9:AE:6E:82:1D:D0:4D:EB:76:7A:02:00:29:B1
Authority key identifier: CF:3E:43:BE:E2:71:18:24:39:5A:39:C9:14:18:DE:EA:4C:1F:34:7B
Certificate issuer: /CN=cf3e43bee2711824395a39c91418deea4c1f347b
Certificate serial: 0195AC907022CACB5E176D141291B27C8445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zz5DvuJxGCQ5WjnJFBje6kwfNHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.mft
Manifest number: 0339
Signing time: Wed 19 Mar 2025 04:01:41 +0000
Manifest this update: Wed 19 Mar 2025 04:01:41 +0000
Manifest next update: Thu 20 Mar 2025 04:01:41 +0000
Files and hashes: 1: ObH3csoETIFwP-5gslKZxBgQ_Os.roa (hash: LvFJbspgl3BO0RIVBUyf89UjAtdnfVH3O0ZG0D6ixs8=)
2: zz5DvuJxGCQ5WjnJFBje6kwfNHs.crl (hash: 9ns+b2AYTzI7VxscNGoTlYOYb3QERrwm5pgHKJPVvjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ac:90:70:22:ca:cb:5e:17:6d:14:12:91:b2:7c:84:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf3e43bee2711824395a39c91418deea4c1f347b
Validity
Not Before: Mar 19 04:01:41 2025 GMT
Not After : Mar 20 04:01:41 2025 GMT
Subject: CN=cfcfd8978287f9ae6e821dd04deb767a020029b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:d6:67:f4:07:2b:18:07:39:16:b6:b1:8e:
24:fe:09:90:96:1d:99:ab:2d:a2:b2:b3:0f:34:e1:
8a:1d:e7:26:90:1c:9d:bc:60:46:cd:e1:27:51:b3:
5c:e7:be:78:c5:67:aa:8a:9d:73:e2:23:d5:d0:ce:
ca:6f:e7:8d:64:3c:dd:c0:17:d0:36:5b:2e:b1:ea:
1f:93:1d:62:94:f0:2a:c7:e3:2f:7a:cc:b8:aa:09:
c6:86:77:7f:8e:5f:dd:1d:5b:a8:f2:9e:03:3c:44:
96:34:b0:9c:4e:74:2f:ca:9a:1b:7a:2c:4d:1f:30:
83:8b:75:6a:aa:d2:d3:1b:0a:70:19:c1:60:15:2a:
62:c0:94:91:a1:c0:a1:5d:90:24:70:90:da:85:ef:
8f:b2:cf:39:7f:13:c9:88:a1:c6:91:52:b2:9f:8a:
04:72:6c:2f:35:f8:5b:52:55:e4:db:50:14:f2:5c:
07:eb:94:e7:d9:44:39:2f:89:d3:9e:01:bb:4a:26:
61:e0:3b:46:85:e3:9e:d0:b5:de:ed:5c:3d:01:f2:
02:93:b9:71:f8:cc:92:90:b4:4c:ab:b5:2f:33:4a:
52:38:ba:2f:27:9b:cb:b3:8b:a6:0b:4c:04:b5:e0:
31:5f:e0:8a:18:45:18:43:99:18:a9:9d:be:2d:36:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:D8:97:82:87:F9:AE:6E:82:1D:D0:4D:EB:76:7A:02:00:29:B1
X509v3 Authority Key Identifier:
keyid:CF:3E:43:BE:E2:71:18:24:39:5A:39:C9:14:18:DE:EA:4C:1F:34:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zz5DvuJxGCQ5WjnJFBje6kwfNHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/998252-7dab-4479-8eb3-512ebe340f58/1/zz5DvuJxGCQ5WjnJFBje6kwfNHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4a:28:36:5b:83:d4:c0:ad:6b:a7:c0:1b:d0:0e:de:d8:0f:
f4:1c:f3:5a:20:a0:d6:fb:4e:1c:fd:ef:30:21:6a:c5:0c:36:
78:91:89:e5:59:f2:bf:9b:d2:17:2b:3f:bc:2d:51:b1:21:a4:
f7:e4:5d:da:5d:2c:13:35:a6:74:bc:00:29:17:95:ce:05:34:
6b:dc:18:4d:a2:89:ae:02:96:f3:14:38:73:b4:82:cd:e6:9a:
6f:10:f2:76:6f:15:de:f3:97:f9:a1:93:dc:34:5f:0c:90:49:
43:8f:ba:fe:cc:82:39:cf:4a:e6:11:a3:68:a6:1b:2a:d6:69:
a2:20:03:a9:1c:87:d5:23:09:a9:e2:fc:ff:02:4c:88:bf:51:
77:7c:00:98:50:06:12:60:f0:32:2b:40:9b:a5:40:4e:03:6b:
ad:3d:2e:3c:1b:a3:fa:6b:ec:0f:8b:bf:63:35:c6:de:67:46:
b1:fa:1b:eb:a1:cd:3a:64:38:6c:c2:7f:eb:73:f2:80:b6:82:
ab:35:a1:5d:cc:4a:eb:c1:4a:f6:9a:c4:3e:75:4e:e3:87:8d:
83:75:e0:81:c1:48:00:ef:d9:10:22:20:ff:a8:36:df:30:4c:
c1:8b:f2:e4:ac:ad:70:bf:9b:9b:03:46:f1:ea:b5:79:4a:d5:
18:98:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:00:16 2025 by rpki-client