Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: RrxVPFRalqFYsu0PTHy5q5BJ3Hizx17FxLbaICoWkVE=
Subject key identifier: 9F:97:E3:CF:64:31:99:43:1F:7F:8E:A4:F3:5C:E3:86:2B:8F:82:86
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 0194BC052D1CD326CECB7A1492BDE03F4E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 0557
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: nP9YQDRcJMUJBKwsaiqRRkekbW9rvYohvOrz7gnRqVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2d:1c:d3:26:ce:cb:7a:14:92:bd:e0:3f:4e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=9f97e3cf643199431f7f8ea4f35ce3862b8f8286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:04:d2:4a:52:ed:ff:14:8a:56:83:f7:2c:
8c:c3:af:1b:16:e8:0d:5d:f1:37:0a:74:b1:6e:1d:
cf:20:ab:cc:f9:66:6e:b8:c1:31:6d:c8:c6:a4:f3:
c1:5b:2e:78:a6:38:2e:96:37:7b:fe:ab:51:78:97:
34:58:45:46:da:d6:46:84:da:0f:72:1d:8f:a7:2e:
02:cb:e5:22:9b:74:0d:a0:7b:db:a2:e2:22:93:e6:
92:5c:1c:fb:cf:c9:d1:4f:46:af:15:47:c9:f7:12:
25:51:08:b2:e1:17:5f:57:31:f6:ec:df:e7:c2:0e:
af:28:31:be:dc:e3:53:e9:0c:88:b4:22:29:c1:79:
28:ef:f5:78:fe:6e:22:15:80:89:6d:af:a7:12:6a:
45:1e:12:62:03:55:5d:ed:9c:82:db:24:02:24:85:
f4:14:ab:ab:74:4e:32:d9:87:27:ef:7a:c8:d4:c7:
71:34:22:3d:88:f0:70:b1:60:e4:b0:be:60:b3:f0:
8f:96:d5:ad:22:63:6b:73:9e:74:13:ef:a0:77:26:
63:2f:71:ed:de:ef:ee:e1:80:bc:4b:24:e2:2b:a3:
16:2f:ab:13:ba:07:3d:37:d5:76:b6:fc:6f:a1:77:
f8:ef:f5:44:8f:f4:29:40:da:fe:1c:8d:41:36:cb:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:E3:CF:64:31:99:43:1F:7F:8E:A4:F3:5C:E3:86:2B:8F:82:86
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:75:4a:a4:37:10:5e:8e:de:dd:fb:fe:2b:71:80:d3:dd:fd:
63:b1:5e:79:41:74:b6:1d:0f:8f:5a:9e:8f:ed:cb:ef:12:24:
08:ea:60:42:0e:f8:49:e1:7c:4b:39:ea:28:7f:1e:33:c2:c3:
ae:3e:3e:d3:e5:38:aa:90:b5:64:65:c7:d4:ab:6c:97:de:6b:
65:9c:ad:c0:a2:c6:8c:f6:2d:69:f1:2a:a8:47:c9:83:63:5b:
f4:5f:69:6e:b4:31:c9:ba:f7:f7:cb:f1:05:eb:15:7c:62:8b:
34:9b:48:a9:14:40:11:b6:31:25:06:47:88:a9:39:bc:f8:85:
75:9f:68:65:a1:1f:de:62:89:3b:5e:d7:af:54:0f:c5:a2:c8:
4d:ba:c2:af:ca:8e:38:cb:64:52:f1:b9:f5:03:fa:80:9b:b1:
dc:20:36:c2:f1:61:68:ef:c2:a5:ab:2a:ed:95:3a:67:0d:f0:
37:44:f1:c7:91:8d:fd:8b:d1:a6:38:42:c7:c9:e8:74:b2:a5:
61:f3:c3:43:b7:2f:fb:ba:ce:a4:86:18:1c:65:92:00:84:4c:
df:5e:d3:5e:d6:56:d1:5f:27:c0:31:a5:33:89:76:3d:0a:45:
32:0a:18:e7:e6:67:22:53:c3:de:4d:e1:37:86:94:76:9f:87:
e3:62:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:04 2025 by rpki-client