Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json)
Hash identifier: WGSZrNL4KR5406g6DRUAHgvWV2zYIyUH/mvmbGRFOxw=
Subject key identifier: FF:29:E0:43:12:30:78:E0:71:BC:98:9C:CF:1A:2A:90:DC:8B:64:5F
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 0194BD179A0A334ACE20A3A70E4714450131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (hash: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=)
2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: JhwnKliUTyB8cIypuXnPOWVmgKN5XX7WKTA9DE6zOsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:0a:33:4a:ce:20:a3:a7:0e:47:14:45:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=ff29e043123078e071bc989ccf1a2a90dc8b645f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:44:b5:f9:75:ff:7f:c8:2c:37:5d:99:64:
8f:f7:ac:89:67:df:b2:d7:85:61:40:bc:a5:02:9d:
93:d7:ec:4e:68:f4:c3:15:f4:c8:a9:c0:4d:e0:cd:
38:cb:e1:fa:fd:dd:a5:d1:a7:65:a9:43:4b:e8:f7:
b1:2b:41:fe:8a:9f:a5:45:c0:a7:77:ab:cb:d9:23:
ba:b4:fb:67:fa:30:76:fd:c9:c1:58:97:ad:ee:5b:
41:54:7d:c7:74:06:7e:51:69:61:90:64:64:72:f0:
af:aa:8d:2f:76:b6:02:bc:61:4b:d9:05:e8:7d:0c:
6b:55:53:de:dd:17:26:c3:84:37:0f:74:e3:f9:c1:
6a:ee:68:a6:52:d0:90:bd:28:62:7b:7a:57:6f:05:
84:14:12:f5:17:3a:09:f0:f4:d1:15:6d:55:bd:47:
31:de:9b:ca:c9:74:9a:b5:10:ea:c8:24:90:13:ae:
a7:0c:1f:9b:04:52:4a:81:3d:88:d0:15:15:b4:dd:
58:15:6c:86:4f:41:db:65:31:b0:64:51:c8:69:4c:
bc:bb:8d:71:11:d6:f5:41:50:79:7a:c8:c1:95:81:
56:38:9e:f5:fb:34:6f:ac:66:08:2a:b7:0f:2d:e9:
6a:6d:4b:db:ff:56:b4:56:f3:d7:df:a2:2e:33:11:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:E0:43:12:30:78:E0:71:BC:98:9C:CF:1A:2A:90:DC:8B:64:5F
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6f:89:2e:7e:e1:a3:5c:b2:e7:2e:f2:80:83:31:7e:9f:2e:
d6:c1:1a:00:ca:47:78:74:82:5f:9a:de:8d:53:b5:a0:69:1b:
e6:14:88:d3:ff:bc:0f:4b:43:54:75:be:94:bd:c8:80:8d:80:
df:a7:e2:8c:b7:60:33:06:dc:f3:99:36:6e:47:58:08:40:bf:
ab:be:73:41:7f:f5:11:18:c7:b2:41:7a:d0:5b:4b:84:fe:a5:
39:b6:2e:29:60:b2:19:45:34:e2:ce:2b:4c:a4:f1:b7:5a:8d:
c1:a0:6b:16:61:34:fe:e4:10:86:d8:4d:de:2e:5f:03:5b:41:
c8:1b:0f:43:ed:0e:c3:a7:51:8a:ca:a1:18:b8:e9:f4:28:a0:
e0:90:bd:87:a9:d1:d1:d9:67:54:03:82:00:b4:92:cc:05:49:
06:ea:3a:b2:cc:04:96:eb:1e:c0:c3:55:db:82:c8:0f:5f:26:
ca:c2:46:48:c2:be:37:dc:bb:a8:45:ec:2c:43:f6:7c:9f:52:
b4:e7:10:39:dc:8f:19:63:74:85:88:b1:6e:41:ac:44:dc:d8:
f6:78:ab:8c:32:d7:e3:d4:39:92:38:66:6a:ac:5e:e9:df:56:
52:14:3f:61:6a:80:c4:0e:b1:b8:7f:49:83:d9:be:8c:7a:b3:
10:5e:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:05 2025 by rpki-client