Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: dy31SQOnKVFKhMc0Yo9wnvB0QgJOHHfLGVPIvWlvocE=
Subject key identifier: 6F:45:B9:7C:E5:67:57:07:00:A0:FE:A3:5D:43:26:C8:98:4C:44:84
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 0194BD179C534044D15F3B36F5F72C278E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=)
2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: 5VgzPBDjHpdoUSuVcMR9I4YpA5p02UiVe1kRpI7pwbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9c:53:40:44:d1:5f:3b:36:f5:f7:2c:27:8e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=6f45b97ce567570700a0fea35d4326c8984c4484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:a6:3f:48:17:a3:1f:5f:e6:25:5e:ea:47:
e4:dd:cb:57:2d:89:9b:05:0a:23:c8:fa:07:4c:a0:
c9:a6:c8:61:1c:dd:cf:d4:6f:8a:c1:5e:b0:c3:45:
4c:f0:fd:d5:e3:20:49:bc:9a:3d:31:c5:4f:2c:cf:
db:d1:ca:c3:aa:11:b8:8e:e4:31:3c:db:31:95:a7:
c3:cd:ef:1d:b3:15:93:dd:b5:35:1a:22:d1:31:53:
20:5e:89:a1:6b:55:c8:ef:c3:fc:20:eb:3e:31:6b:
68:88:0c:30:6f:d1:82:26:4a:08:1f:7b:6a:1a:55:
8c:d3:22:ec:a0:52:14:79:56:bf:1d:25:76:b5:79:
4e:3d:34:15:36:66:6c:81:47:87:13:a8:90:f2:27:
47:41:b6:c4:15:32:b5:54:5b:3d:b9:2a:5a:d9:9d:
83:a0:e1:bf:89:94:81:11:4d:20:34:e5:8e:3f:34:
35:09:0f:f0:3e:92:6a:41:bb:01:06:60:68:ec:75:
9a:4d:ed:6d:29:d2:66:ab:d4:1d:12:7f:34:86:7a:
2a:f2:72:24:89:33:e9:aa:2f:ae:1a:95:c7:b0:75:
3d:3c:37:32:13:ca:2c:c2:fd:4e:17:33:e2:7f:3a:
87:e3:ee:f2:8c:98:50:e2:ff:f2:af:ec:9b:49:51:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:B9:7C:E5:67:57:07:00:A0:FE:A3:5D:43:26:C8:98:4C:44:84
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4d:3b:3a:3a:6d:e7:38:6b:20:89:8a:c3:2e:09:91:e1:19:
22:0a:26:43:eb:9b:ae:f7:d0:86:7f:54:6c:64:55:72:83:5a:
03:92:76:5b:fd:10:77:ed:c9:b4:af:48:42:9b:54:11:0b:a2:
ee:7b:c2:d9:b1:73:21:16:dd:0d:53:3b:e8:60:97:70:67:96:
88:31:9f:0b:d7:28:47:e4:aa:b9:72:d7:dc:be:a7:07:00:a5:
6b:7c:b8:96:95:f1:a3:f7:f4:63:86:32:a8:af:e2:09:5c:dc:
8c:33:7b:1d:51:78:01:72:92:11:e8:bb:24:7a:9a:d9:93:93:
09:9d:17:44:24:0e:f4:c5:c9:d7:7f:e7:f9:9d:01:fc:b5:42:
0d:85:0c:a6:0b:3c:33:28:b3:8b:74:84:6e:d2:ad:3f:64:68:
57:f9:8a:d0:b5:b5:d1:6f:71:0f:35:74:1e:84:00:f0:9e:7e:
4f:c5:60:9a:a2:7f:d3:e0:a3:04:b8:fd:65:d6:a6:2f:e7:97:
1c:48:d3:34:82:c3:10:7b:73:e8:cb:11:ba:6e:33:cb:d4:e9:
09:d1:1c:6f:c8:71:55:08:06:d5:1d:fa:dd:d3:d8:e6:fb:28:
17:52:ee:2f:58:4c:a2:cb:df:3e:24:53:51:7a:35:ee:5a:68:
3d:7f:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:22 2025 by rpki-client