Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: 8qrVOdY9UtpjYr5dbwYEg1rFQGXnsTinJSsvntFbn8k=
Subject key identifier: 0E:5F:9D:0F:61:49:F7:0F:6A:20:A3:A6:2A:D8:9A:E6:7C:90:2F:5B
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 0194BCAA29717436B8EACDC3770E94603FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 074E
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: r3zlckiwDS9hl+3NmN9Picf/Gt1TUqIAkiSWHCqiOAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:71:74:36:b8:ea:cd:c3:77:0e:94:60:3f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=0e5f9d0f6149f70f6a20a3a62ad89ae67c902f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:20:3c:b2:43:63:fd:b5:99:fd:f5:e2:a4:
1f:34:18:d7:4d:d0:be:7a:e7:52:74:99:4d:a2:41:
c4:20:a7:3d:3c:43:b9:f2:00:fe:1e:78:28:19:35:
57:45:50:1b:6a:a9:bb:cd:65:3d:b0:ed:3d:42:1d:
19:57:8e:fc:82:4c:9f:8f:22:4e:8e:3a:dc:01:8e:
62:5e:95:20:9f:5c:9f:a5:b6:b2:cd:fc:92:23:12:
55:fd:55:16:30:17:03:60:6c:5c:67:87:e7:69:ce:
e4:33:1e:e0:85:6a:c5:aa:c5:50:a6:a9:b1:65:22:
5c:27:c8:22:8c:f1:39:e9:71:56:5b:af:01:66:4e:
5e:c6:5c:17:56:25:a6:1e:07:cf:f5:f1:f9:41:d5:
51:61:eb:60:59:34:d3:2d:28:27:95:4b:a6:a3:3c:
b2:37:b2:eb:1f:e6:83:1d:cb:74:a3:a2:4b:ea:70:
c3:15:c8:d5:61:52:8a:d3:10:d9:6b:30:bc:ae:57:
6c:0d:bf:86:38:7b:b0:54:71:dc:7a:21:b8:62:83:
56:6d:fb:5a:b8:1f:be:48:4f:b9:95:b1:21:80:99:
5f:76:18:0a:cd:af:2d:3e:a5:39:54:ee:82:cc:41:
04:32:67:f9:5a:e4:d0:33:f6:64:03:a3:5a:f7:e8:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:9D:0F:61:49:F7:0F:6A:20:A3:A6:2A:D8:9A:E6:7C:90:2F:5B
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:14:e0:f2:60:90:88:64:17:0f:ee:b5:41:cc:1e:2b:0b:2e:
52:8b:51:fa:5e:ac:6f:09:a9:3d:64:28:e1:9c:b5:94:28:3c:
d9:8f:2b:3a:d0:d4:ca:8f:25:c0:7c:8e:0d:82:43:fe:92:1a:
80:b3:93:72:37:b3:38:50:21:54:d1:65:9d:90:d0:f5:23:0a:
6a:88:bd:d6:eb:19:10:8a:ec:76:c2:a6:ad:5b:2d:ab:80:41:
29:ed:28:98:03:55:12:76:15:a8:f1:5e:e9:50:f1:14:16:1a:
58:72:82:00:04:10:79:61:d9:d8:c3:c5:6e:e8:1e:86:75:ba:
4c:91:e6:1a:d5:c8:d8:c3:0c:69:30:f8:0c:46:a7:ce:c8:ab:
7c:8a:d7:d7:f4:2d:fd:99:35:9f:fc:cd:88:10:17:5f:a7:31:
ce:ad:83:ef:f5:e0:fe:b3:d8:f8:51:8b:88:3e:19:96:62:3b:
ff:55:fd:04:66:31:a2:45:9d:5d:a9:19:9d:b2:75:cd:15:a6:
28:9b:da:c0:55:55:5b:b5:f0:3b:81:a2:13:40:af:1f:45:c9:
97:0a:38:de:5e:1a:bc:50:ab:7e:a1:41:ed:27:86:f9:67:43:
56:03:3e:1f:a7:82:4e:80:4e:0f:02:6e:36:a2:68:cf:3e:e1:
1d:2d:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:20 2025 by rpki-client