Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: QWPEYiHev2hpLhhFCxL8rPwpVgXmbsysaTeyeL7xKc8=
Subject key identifier: 0D:CB:CD:0D:7F:BA:50:C2:8B:DA:3D:A3:74:E2:20:AD:0C:07:F8:DF
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 0194BD17F82802194A6A85137891B43BCAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 0D03
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: 7dSdSIQ5485vi6Kjly1KH2i2KOwi4Yw3LtB9ATDIL+w=)
2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f8:28:02:19:4a:6a:85:13:78:91:b4:3b:ca:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=0dcbcd0d7fba50c28bda3da374e220ad0c07f8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:c4:c4:1a:f4:50:0a:9a:0b:ab:92:36:24:
a3:9b:2b:b4:3f:49:7e:06:90:99:79:e9:01:ec:8d:
b7:7e:2d:d7:22:3b:de:bf:43:0f:5a:26:d5:6a:fb:
60:c3:f1:d2:73:83:3b:28:31:0b:44:1f:dd:17:2f:
cc:85:95:09:df:b7:16:bf:e3:c0:e3:25:0c:65:98:
c2:c4:35:d8:92:b6:6c:21:ad:3a:97:a3:a7:bd:75:
49:0f:20:d9:42:6a:e6:9a:ad:15:7c:fc:4c:89:5d:
54:d8:b2:4a:08:09:05:89:61:75:83:35:74:a5:ef:
20:2b:03:d8:2f:0c:ba:28:5f:cc:2b:03:70:e6:81:
d6:2d:6d:02:f5:7d:a4:04:ef:f3:21:47:69:69:25:
25:d7:4b:07:53:ff:28:c3:bc:61:30:76:44:90:18:
8d:5b:07:1d:7b:cc:4c:20:ae:8e:df:b2:23:8e:28:
48:b0:a2:68:57:8d:fc:0e:a3:c2:85:f9:3a:51:9d:
f2:68:05:a0:38:55:be:52:b1:58:ef:0f:6f:67:11:
b7:76:95:09:8b:2f:49:10:69:20:e6:22:5f:5a:f2:
49:4f:ba:fd:3f:76:ce:3f:29:4d:77:33:e0:89:8e:
f1:a9:3a:84:8e:10:33:58:71:5e:2c:45:77:dc:c0:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CB:CD:0D:7F:BA:50:C2:8B:DA:3D:A3:74:E2:20:AD:0C:07:F8:DF
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9a:0c:5d:fd:c7:d3:65:81:57:1d:06:5f:da:64:cc:fb:42:
e8:b7:51:1c:3f:82:e9:99:48:22:db:80:08:a2:8b:69:af:55:
ef:c7:9f:d4:e6:e1:c7:d3:f3:da:61:f8:d5:76:e9:c7:92:18:
72:41:78:0c:97:6c:fc:20:01:46:f0:ea:ea:c8:59:c3:7a:af:
cb:3c:d8:80:ec:c8:44:a6:f0:4e:fa:5b:7c:65:26:26:a1:f2:
3e:e0:8f:60:07:d5:ad:64:92:be:66:06:29:40:eb:eb:f5:31:
76:8a:cc:ee:7a:1f:58:69:f6:4c:49:9e:6e:73:44:05:56:e2:
d7:42:3e:05:9a:5b:eb:94:17:f0:c8:ff:1a:72:6a:8e:46:99:
e0:d1:59:0b:4e:ce:ca:ea:52:33:74:8b:06:a9:75:1b:dc:b2:
3b:ca:3d:e6:6a:70:49:61:a0:f1:30:73:15:35:4f:2e:91:b8:
7a:fc:e9:4f:d7:3a:d1:84:ad:9e:53:d6:18:47:89:c9:38:42:
04:c5:df:1d:9d:71:95:34:cf:0d:7a:c2:0a:61:4e:17:d8:b1:
c9:7c:a8:81:89:af:22:92:e2:98:14:e7:b1:dd:16:f6:5a:90:
f7:5a:4d:94:e4:d1:f2:95:08:80:e2:80:a3:ed:a6:07:dd:52:
55:ac:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:12 2025 by rpki-client