Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: v3m0fzfBHSlDqUwv8+ehTXdK0WJeeLRb78hveSIboNs=
Subject key identifier: 17:2D:84:E9:7A:DF:FB:2B:5F:6B:03:BB:22:09:2F:C9:9B:94:43:0D
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 0194BC3BCAAF2E59FAE8D68A01C59EB3AC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: VlUFMlgG/IMGvIolSpO8xTNMPRvIYpOzuzgEi0cpVZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ca:af:2e:59:fa:e8:d6:8a:01:c5:9e:b3:ac:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=172d84e97adffb2b5f6b03bb22092fc99b94430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:f6:4d:35:a1:64:35:c4:8b:6b:d2:34:dc:
c2:f2:e1:f4:d4:83:a8:cc:d0:d8:cf:9c:87:68:8d:
57:12:fc:ad:5d:d2:e3:22:f0:d4:ce:24:c6:56:ba:
c2:56:39:1f:ed:33:c2:41:a6:17:82:87:e3:40:25:
e4:1c:e2:c0:ee:8a:6b:ec:65:5d:66:10:0a:cc:2f:
ce:2f:fd:3e:ac:02:95:dc:c0:8b:91:cf:b1:1e:cf:
76:b0:91:8d:69:b3:2d:db:b5:09:6c:60:41:be:04:
24:1c:3b:51:8e:bc:e7:cf:6c:0b:4b:26:24:6a:9d:
45:23:06:80:e4:5f:0e:2d:1e:e3:35:9a:26:04:17:
11:54:67:36:87:6e:c1:05:86:42:81:6b:ca:8d:b1:
29:68:6a:a3:09:5a:a0:81:52:f1:56:b0:36:b6:5b:
2c:44:01:17:29:cd:2d:45:7e:14:2d:27:c7:53:58:
01:68:4f:ee:85:eb:50:45:57:62:dc:cb:8d:e8:8b:
05:a4:5d:29:90:65:5c:cf:19:b3:68:f4:ca:c0:49:
9b:22:d2:a4:ba:81:36:75:3e:bc:81:e8:a5:e3:00:
3a:9d:93:c8:d2:ef:f1:74:4b:df:20:f1:0e:5e:f4:
5f:0b:2d:2f:47:b1:9c:4a:6e:d1:a5:fe:5c:75:2a:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:84:E9:7A:DF:FB:2B:5F:6B:03:BB:22:09:2F:C9:9B:94:43:0D
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:08:a0:04:f9:4c:71:a0:c1:02:b5:a6:fe:c6:d8:d9:65:2e:
c6:86:fc:cb:e1:da:71:a3:25:92:34:50:f7:f2:4b:f3:13:47:
41:be:97:1e:6f:95:d9:2f:c9:45:79:ad:49:5f:a3:ee:3b:3f:
3a:c5:57:f7:55:c1:39:60:e9:15:68:9b:eb:ca:67:e5:67:b8:
d5:f5:2a:ee:62:fe:12:97:20:8d:3d:0e:b4:89:b9:47:4a:b7:
bc:0b:2b:86:c9:71:ce:a3:61:e5:23:86:da:75:00:03:0e:98:
87:2c:30:f6:de:c5:57:2c:60:3e:5d:15:3a:a5:79:f8:4a:87:
58:07:4e:eb:6f:75:3c:6d:0e:6e:ef:b0:90:03:23:52:b6:7e:
4b:a0:ca:70:fc:c3:b4:f1:5b:0b:b4:50:71:39:25:b9:6e:34:
5e:6e:6b:54:7c:3c:f3:7c:08:8b:a1:0c:b5:84:0d:87:a2:e2:
e6:a0:6d:8d:59:02:2a:00:3b:94:47:05:4d:16:12:ef:26:3a:
b6:42:05:29:ae:48:7a:b7:3d:c7:81:ee:2d:2c:40:6c:6a:71:
4e:ad:92:ad:2b:a1:c6:07:ab:54:99:72:61:2f:f3:09:e0:74:
8c:e3:c4:c8:92:61:83:8a:c5:69:f3:3a:a5:6b:92:98:f2:72:
0a:1d:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:14:11 2025 by rpki-client