Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: wJ6mbauOnUcbeNd+jwBJoLeKveJhY7u0fqV1urg5E/E=
Subject key identifier: 2B:08:48:13:B6:25:20:2A:48:94:0A:87:00:7B:68:E9:7E:B9:B5:C1
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 0194BD85904F648ACBD2CA873C513FB9ED6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 0DA9
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (hash: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: mp5fO7Ktx5WoUNw7meCODog/zEE/E62APIotswygS9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:90:4f:64:8a:cb:d2:ca:87:3c:51:3f:b9:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=2b084813b625202a48940a87007b68e97eb9b5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:f2:2e:a1:9d:88:aa:3e:8e:4f:c3:44:67:
45:6e:ae:5d:e1:3c:b0:c9:40:0f:9a:f5:29:e7:85:
e7:96:93:b9:1a:d4:7b:9d:aa:7c:bd:23:35:da:e9:
bd:b7:d3:dd:27:09:9f:03:57:0d:1e:a1:2e:07:cc:
fe:2d:44:96:90:f4:83:5d:1a:7c:78:b0:c8:7a:c0:
b8:1e:f3:5e:5e:bc:b7:f3:12:6a:e1:31:1a:c3:ec:
98:3b:5e:3e:7b:6a:f7:e3:8e:59:42:58:f5:13:44:
b3:7a:70:63:37:ec:ac:ab:23:b7:26:0a:91:6a:18:
07:5e:e9:1e:9b:31:3f:53:4c:7d:ae:fe:c4:c6:f6:
6e:73:9e:f7:a8:b4:9c:6e:13:fe:95:45:2d:85:ff:
fe:dd:d3:ad:6d:2e:07:87:11:6b:a3:cf:1a:fc:75:
80:3d:c2:76:0a:6e:2f:9d:44:4a:16:f5:a6:fd:ab:
56:08:aa:62:1d:30:6d:0e:0b:4e:e8:ff:ba:18:ee:
f2:40:47:05:12:f8:96:3b:46:aa:e0:2b:66:76:77:
d8:51:84:20:92:1f:6b:64:4a:70:59:43:d9:97:c9:
f1:45:16:c3:43:b9:b4:8c:f5:d9:1d:2e:6b:dc:78:
3f:98:a6:8c:3d:22:7b:fc:d8:45:2f:b8:f8:aa:70:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:08:48:13:B6:25:20:2A:48:94:0A:87:00:7B:68:E9:7E:B9:B5:C1
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:94:20:86:31:61:d5:d3:de:3a:92:18:17:30:3d:0b:bb:
43:41:01:8e:67:91:4d:42:09:46:9f:82:45:33:98:a2:b5:8d:
8c:3c:29:da:03:a4:c2:b9:10:58:9e:aa:fa:0f:84:0b:b4:e9:
48:75:77:d1:31:1f:57:63:a9:c0:5b:7c:e0:77:de:0e:71:42:
dd:08:e6:a1:13:6a:65:95:79:50:9c:4e:43:4f:56:d9:1c:d2:
cf:5f:b1:fb:cc:3e:30:69:42:d0:48:dd:f3:db:33:55:9c:da:
8a:e7:7f:9d:f0:d1:2f:9b:18:36:56:5d:9a:65:75:ae:e6:ab:
76:10:e2:4c:28:7d:42:14:b9:ec:e8:b5:84:12:bd:97:ba:17:
ec:10:5c:3a:47:77:8a:4b:0a:12:c9:b8:e0:f3:22:75:96:8b:
64:a9:1d:66:e1:45:6b:d6:d9:a1:b4:43:a1:9c:e5:5c:7b:c5:
d7:57:8c:c9:af:bb:e2:a4:2b:76:49:72:84:89:55:f9:a6:e2:
91:38:13:a0:1d:5c:cf:9f:b4:21:7a:1b:45:ab:37:de:3a:ad:
b1:cf:b8:0d:94:f5:27:8d:0a:2d:80:02:8c:50:51:be:7c:63:
1d:b6:d4:bc:6b:99:c6:ab:bc:a6:0c:5d:be:ce:83:09:bb:d0:
0c:5f:00:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:48 2025 by rpki-client