Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: L0/J1+LbgUnJb3yFn+w0W6bpFkYxnX8+3nFvAzUghpA=
Subject key identifier: 33:E9:6F:ED:BA:CE:E9:14:76:6F:5C:C5:84:F3:3B:D1:E6:70:96:24
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 0194BCE09777A1E853F657782A4B07C668DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: pW0aUdaN6pakAq+jD5OAPx2bfrkkbQ/Ka3xqCjUv6iw=)
2: vICAXNaVi9WpUOInUKGa4x8kVzo.roa (hash: wwadTuvBpX7uW9J+Oei6uXdC+2oxhi7N3s69AlGUoYc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:77:a1:e8:53:f6:57:78:2a:4b:07:c6:68:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=33e96fedbacee914766f5cc584f33bd1e6709624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:e4:29:c2:61:ff:15:1d:ad:0c:06:a6:c5:
db:84:cb:18:f4:d3:1a:c9:53:8c:73:c3:f5:4d:54:
e5:89:0f:ad:5f:70:9b:fe:70:ed:da:3e:60:56:83:
24:23:e6:a4:a9:65:bc:e2:1b:59:aa:2a:c8:74:de:
0b:38:62:e7:78:9f:dd:6d:f6:78:db:b9:8f:54:5f:
9a:fd:ba:2d:d3:73:15:46:8e:29:7d:53:a8:78:10:
cd:e6:a2:4d:3d:36:8e:f1:bb:f5:fc:a5:80:f3:01:
74:b9:13:fe:cf:4e:3b:64:6d:77:fa:9b:72:83:94:
99:3b:ae:cb:9b:10:ac:ee:f9:43:d9:b6:22:7b:31:
15:f7:e0:c0:3b:ab:6a:ae:a4:b1:49:96:8c:63:bb:
80:f3:93:e1:da:e7:69:41:68:b7:bf:47:39:fd:c1:
98:8f:3d:65:5b:9b:4b:13:af:73:d6:d1:51:eb:5d:
e7:27:f9:55:9e:3b:24:b4:f4:61:4e:51:e4:f3:7c:
f2:e5:72:e8:06:1d:9e:19:9c:6a:d8:62:e2:fb:de:
a4:6d:c5:6f:67:c5:b4:e1:72:8b:eb:f7:2a:5f:d1:
b5:f3:ea:df:aa:9a:54:ef:a2:eb:a6:62:d8:08:68:
08:46:d8:c2:98:cf:21:eb:c5:a5:81:f7:44:dd:e8:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:6F:ED:BA:CE:E9:14:76:6F:5C:C5:84:F3:3B:D1:E6:70:96:24
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:71:34:be:7c:d7:7f:65:05:64:f5:e9:a5:52:3e:35:2c:5b:
30:7b:91:63:4c:33:82:bd:51:49:69:d9:91:b2:18:d2:5a:a1:
1d:ab:98:19:ad:dd:bf:a2:be:e7:73:e4:2b:c1:60:f6:90:1c:
9c:6b:1c:b8:22:af:37:8a:43:42:4d:2f:84:4c:6f:27:d0:d9:
16:ee:85:d4:27:bc:77:0f:dc:57:12:b8:16:89:65:6c:f6:6e:
8e:e5:58:59:da:29:39:5f:61:37:96:86:35:90:46:fe:d4:05:
27:01:f3:b4:48:b9:b0:f4:35:ea:bc:0f:d7:84:70:9b:7c:27:
05:2b:51:4b:03:88:06:03:5b:6f:07:b1:26:64:8b:65:cb:91:
72:b1:f1:7f:09:87:51:22:c9:1b:76:4b:85:58:48:3b:38:16:
ee:4d:f6:74:69:06:93:0c:6c:9d:50:36:40:2a:fa:8b:da:52:
b1:bf:50:95:8e:df:14:eb:22:f2:97:1f:e8:74:9e:8b:5e:b6:
92:15:c3:2c:30:2b:a0:06:a9:b4:9a:d5:27:11:fa:4b:cd:6e:
b9:61:e8:e7:01:4f:ad:fb:a1:32:a6:37:06:17:26:a3:a9:8f:
84:13:c9:fc:b8:41:45:e5:89:c0:70:6c:e1:cd:56:3f:56:4e:
69:a2:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:07 2025 by rpki-client