Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier: fVh46UFOQ/8XJelIid84QcjFLVKD3HRSPLUup8fkUks=
Subject key identifier: 5E:0F:2B:AD:91:C9:2C:C0:73:6B:60:02:8D:78:5E:06:DE:BB:A4:36
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 0194BCE0874431F834F1F8ED10F84D8954CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number: 0C1E
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=)
2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=)
3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: /j2DORQl4EXNd01sbWA7Uw7aHqccfPH6NKAId4PP+3I=)
4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=)
5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:87:44:31:f8:34:f1:f8:ed:10:f8:4d:89:54:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=5e0f2bad91c92cc0736b60028d785e06debba436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:84:92:d1:6e:0c:cc:0b:08:32:d7:f8:2f:
e3:0f:8f:f9:d4:97:fc:1b:e7:5b:d6:3a:e6:af:2d:
4f:a4:5e:72:05:a9:54:b6:97:77:c9:e0:80:11:01:
5b:72:cc:de:86:13:db:ac:4c:5c:f0:2f:13:05:f0:
10:23:1a:62:28:88:1e:2e:19:f7:47:b7:0a:14:45:
90:28:64:8d:be:a4:88:94:36:b9:68:eb:04:3f:d0:
7a:28:3b:6e:da:8d:5e:b4:26:0c:1c:c1:41:45:df:
ad:d1:bf:76:75:73:eb:09:16:ab:2d:d7:56:e4:00:
86:63:0b:23:42:f0:3f:8c:a0:18:25:67:20:e6:1e:
c3:af:55:f7:70:ed:9b:e1:6a:15:22:52:ea:97:84:
b7:42:a0:11:7a:e2:ca:03:aa:de:ec:5a:d1:59:b7:
c6:e5:b1:f7:25:7f:26:59:06:eb:2f:2f:2b:4a:a1:
49:3b:68:89:f7:69:0f:03:c1:02:78:b3:b1:f7:07:
0d:2d:89:93:6e:0f:1b:c3:cb:58:5b:97:36:28:ba:
a8:6f:fe:38:63:51:77:54:4f:84:31:c5:62:54:6b:
18:36:77:b3:91:6c:e5:3c:32:5c:81:5c:93:b7:35:
81:82:91:f0:90:78:ed:08:b2:07:8c:9d:97:67:b3:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:2B:AD:91:C9:2C:C0:73:6B:60:02:8D:78:5E:06:DE:BB:A4:36
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a3:bc:07:f7:39:be:db:3d:37:40:da:4c:ae:8a:e7:63:94:
56:55:04:7e:98:b0:39:2a:da:64:e0:fc:77:9d:6e:28:60:ce:
14:59:36:65:a0:da:c8:51:36:fd:9e:6a:a2:c0:f8:a2:d7:97:
ea:ee:9a:ff:b1:61:fc:e2:03:2f:14:09:0e:4d:6c:b3:ea:94:
ce:6d:69:c7:6b:4d:0e:b1:1a:2e:5b:bd:61:d7:f1:80:33:c7:
cc:03:01:f0:53:38:34:2a:61:49:31:9c:ca:54:fc:35:a0:1c:
9f:67:ae:18:c1:40:5b:0e:0d:53:32:9d:05:90:01:51:5b:ec:
a3:a3:fb:2b:b3:7e:84:e4:e6:34:8b:c6:73:54:80:4d:91:ff:
36:4f:a3:f3:d6:c5:cb:b9:25:9c:e4:62:75:99:6f:b2:d5:56:
15:57:34:61:0b:a4:62:38:6a:d4:43:fd:f1:08:ec:32:86:7a:
40:38:d9:75:ae:92:1b:ae:c7:12:7e:fc:80:6a:ea:0b:24:49:
22:3d:95:26:3a:da:59:c6:d3:aa:bf:fb:ad:e5:b3:29:32:fd:
0c:f2:c6:11:66:fb:1a:04:62:d5:de:58:4a:70:73:4f:7f:af:
a4:a9:be:16:4c:52:6b:c8:24:87:72:2f:5f:40:05:e8:3c:cf:
b7:5c:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:25 2025 by rpki-client