Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json)
Hash identifier: Ng23Wrifvxp4+FcZ5HB9BIWr1i7dJ9ObfrQwpbFvWWw=
Subject key identifier: 0B:C9:2C:C4:11:FB:AA:EB:DF:A2:00:3D:10:62:59:18:6F:F2:27:60
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 0194BCAA25AC825FB4B5A706CE09F7D453F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
Manifest number: 059B
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 7d2f98bHzqHWx5M7oEXVyJyz8B4.roa (hash: WP0mtIYc1sSiT/bxjFMuO4V87PtcesycNrQ76Yhzw5U=)
2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: Zp/396UxRidSpb9ZLMFK3HiewP0UsBOQcc5zD0hXnt4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:25:ac:82:5f:b4:b5:a7:06:ce:09:f7:d4:53:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=0bc92cc411fbaaebdfa2003d106259186ff22760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:5e:7d:16:d3:8f:98:e8:d7:3c:4b:76:18:
fd:7d:1e:8a:cd:7f:57:e8:5d:1f:36:58:eb:ff:4a:
8f:ff:43:ee:55:1d:d5:c8:35:5c:f4:e6:f5:f2:3e:
6f:9b:0d:cb:14:2c:ef:d8:77:97:db:6d:eb:38:a2:
4b:1a:8f:72:93:6f:21:96:09:8d:56:65:d3:a3:77:
d5:12:30:f7:b4:9b:1e:a9:45:0f:38:41:64:b3:9c:
4b:01:03:c9:47:d3:9a:29:c2:3b:86:0a:6c:04:14:
45:1b:86:28:0e:ad:68:9c:f2:a3:2c:6a:22:38:48:
c9:00:74:22:58:03:da:0b:df:e0:93:65:34:e0:e7:
a7:2d:71:cd:75:de:2c:0b:81:b5:d3:e6:12:ee:28:
9a:2c:ba:4b:c3:9b:eb:b1:c9:24:04:2c:1f:cd:30:
a7:39:c8:4b:b4:68:30:9a:53:be:df:c7:07:11:3b:
2c:dc:ad:bf:ee:32:36:15:24:c8:cb:57:90:17:3b:
61:e3:3c:74:17:b7:67:7c:bc:af:34:43:8b:a0:27:
71:f7:d4:18:aa:0b:bb:6e:50:31:f1:57:04:cc:29:
60:9c:1e:0d:ca:88:d5:5f:d4:7b:5a:8b:75:86:da:
c7:ba:4a:d8:ba:a4:47:24:d4:36:1e:ef:5c:4f:8f:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C9:2C:C4:11:FB:AA:EB:DF:A2:00:3D:10:62:59:18:6F:F2:27:60
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:48:db:81:e3:56:79:bf:e0:52:ff:36:df:28:52:3b:d4:86:
d8:7f:03:0b:48:a6:b5:cd:00:8c:a5:44:f4:87:7f:e3:cf:9a:
13:c7:39:de:35:f6:15:78:6d:4b:21:8c:a1:10:01:97:3e:6c:
30:1a:d4:84:64:9d:18:6b:4f:09:6a:b2:31:da:58:c7:1c:64:
b8:b5:d8:38:d2:2a:d0:4d:1e:16:3f:78:4d:db:dd:e4:f1:91:
fc:3f:ea:df:41:31:d6:47:e4:95:3e:42:22:05:24:08:8c:5c:
e6:f8:a8:00:cb:e9:ff:78:d4:b2:ce:07:ec:e0:12:e6:49:20:
28:e0:a3:0c:97:d5:93:f7:51:10:6b:48:52:b8:de:07:a9:55:
ae:27:e5:7b:5e:f6:62:2a:78:c3:6e:eb:97:56:ce:37:53:e3:
f7:7f:52:bc:af:cd:82:3c:b1:6c:27:42:0d:93:06:f6:50:17:
44:de:24:5d:4e:2d:90:63:e2:72:e1:dd:4d:1b:51:f3:5b:68:
20:8d:cf:aa:94:1a:b2:a1:58:0d:82:c3:45:bf:ea:d8:42:48:
86:71:78:15:09:df:2d:21:18:c0:85:bf:61:d9:77:0f:5e:fb:
29:80:10:ac:e1:16:c2:07:73:c3:78:6a:ab:bb:7d:e9:37:4d:
c0:0b:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:02 2025 by rpki-client