Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: 7Iu27SVO8ichx11+NsF9gtu5Hvk8kEK2FKMVblXIHDc=
Subject key identifier: CA:EE:AA:5B:BA:18:D9:46:A8:CD:A2:43:87:A8:85:74:20:0F:27:8B
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 0194BCE0EB8849B352D6C866BF51BE17A82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: lB8uW/eCbnisVahZDW3Od3qjwhvAc2pHMLYTKiHoSPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:eb:88:49:b3:52:d6:c8:66:bf:51:be:17:a8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=caeeaa5bba18d946a8cda24387a88574200f278b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:e4:98:f9:38:8d:af:fd:61:42:22:95:39:
4d:85:0e:04:32:2f:a1:57:4a:aa:fb:9f:64:0b:36:
4a:da:1d:ff:a7:45:3c:02:44:68:74:ed:74:34:ea:
93:42:c2:28:c4:2f:e3:0f:72:bf:66:bf:72:f4:38:
62:83:f4:7c:5c:26:b8:c4:f1:2d:d7:e9:86:f8:e7:
f0:83:ae:6d:81:b9:46:dc:47:32:cc:aa:a3:c6:f0:
53:88:54:3f:a1:52:f3:a7:d8:5a:d9:2f:42:91:2a:
e0:cb:1f:b3:33:84:ae:f1:e4:1d:14:d6:16:d1:e9:
21:ee:d1:87:fb:91:7b:37:02:8b:7f:38:52:fb:2d:
45:b6:32:62:9f:d6:d7:eb:17:35:61:e8:3f:0e:fc:
e3:e6:13:6c:60:3b:3a:8a:9a:30:1f:72:1a:9c:fb:
bf:c1:a4:f5:5d:4b:70:02:82:9d:76:0f:74:67:6a:
7c:26:22:9d:9a:31:4f:01:fb:97:29:68:90:dc:19:
31:67:8e:67:73:46:2c:5d:1b:a2:91:5c:00:87:b0:
07:70:a1:48:a8:7c:50:1d:c9:f5:14:5e:6d:3c:ac:
47:d5:8f:2d:25:40:ea:00:dd:ec:ea:e3:ca:99:a5:
a3:6d:71:b7:fb:9f:b2:60:c8:12:be:59:a4:81:c7:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:AA:5B:BA:18:D9:46:A8:CD:A2:43:87:A8:85:74:20:0F:27:8B
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ea:2c:b0:9a:42:3b:ab:29:96:61:31:d2:58:b7:0f:13:e1:
db:1c:41:e3:35:e7:c8:05:ae:6f:b7:2f:75:96:cc:d0:e9:39:
5c:a7:99:45:64:ea:5d:02:38:ec:58:98:21:90:22:bc:7a:b8:
6f:54:2c:29:f9:65:5b:8c:ae:6a:1a:ab:cd:49:9d:0b:4d:09:
1b:7b:4c:a8:2d:5a:9d:f8:d3:2c:6b:8a:e8:eb:ce:7b:1c:d0:
85:85:83:0c:9c:92:36:d8:7d:ad:58:4f:f3:21:76:2e:49:59:
7a:74:ae:08:d3:00:71:4e:f7:d2:8a:9a:61:45:e2:46:82:89:
74:a5:99:72:9c:51:d9:4b:bc:c5:f1:69:e2:63:e0:ac:1c:69:
0a:c9:e8:b2:8d:dc:f1:07:88:64:32:d1:90:2b:2e:d8:d9:52:
a9:4c:4d:26:bb:5f:a1:fe:8e:53:11:df:92:41:f0:a4:60:a4:
7a:f7:68:a2:24:7a:3a:15:a7:f1:c9:b5:17:1e:96:85:0c:f4:
e5:8b:7b:0b:84:ff:14:f0:06:fa:99:85:d6:7c:11:76:98:86:
4e:7b:26:91:d9:3e:f5:de:fe:94:f4:b7:d1:32:ae:58:aa:71:
e0:39:f9:84:e9:ab:26:d7:61:55:a5:15:9a:e6:4a:2b:c5:32:
76:bb:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:34 2025 by rpki-client