Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: np7lUq4m0luuHiRSFtbijLdNhVU6i1AxYTXLq8UoWtA=
Subject key identifier: 36:25:E5:27:BC:24:4B:82:75:66:24:2F:17:F4:F7:37:B0:44:8C:D8
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 0194BCE099A43B4F47BA0DCC3F34FB58E646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 083E
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: BcdGko0r03EyM3V22SJp6LUI_jg.roa (hash: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=)
2: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: 1z19ydtwhz2qjGwsl+y9U8cLHIeUyK7pOdVeJqWYm6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:99:a4:3b:4f:47:ba:0d:cc:3f:34:fb:58:e6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=3625e527bc244b827566242f17f4f737b0448cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:53:9b:80:48:ee:eb:5c:38:8f:5b:9b:82:
f8:bd:cc:9c:80:23:ed:99:f0:6c:83:a4:89:96:b3:
b6:06:ab:86:cf:67:1d:ac:09:6e:ab:24:a1:3e:ce:
a3:2b:c2:4a:68:e6:2a:7f:b6:ad:3e:6d:95:8f:12:
10:a9:af:1d:dc:89:b4:50:c7:b5:cf:0a:d3:00:a0:
ce:1c:5f:97:57:93:54:21:1a:d0:05:e7:2c:e3:20:
6c:5d:db:75:c8:9f:bd:01:59:de:93:77:0f:f0:cc:
b5:9d:2b:d4:0a:3b:50:19:38:b2:a3:6d:52:fe:90:
e3:f7:03:cb:48:2d:2c:ca:ea:44:32:43:d2:3b:36:
ad:fb:3a:44:c7:50:3f:f6:54:56:c8:37:01:0f:f1:
4f:64:12:d9:41:6b:f4:8b:fe:31:84:09:1b:28:ca:
b7:84:ed:12:5b:cf:f3:44:41:f2:4a:c1:b2:93:f3:
24:28:07:27:71:7a:27:a4:aa:d5:bf:37:f7:12:c1:
38:b4:cc:14:de:05:05:3f:e6:54:59:4e:da:34:18:
26:21:b9:5a:dc:a5:82:6c:57:02:a2:8b:6c:d4:83:
17:92:de:08:1b:6b:8f:de:6d:e5:08:69:01:b8:7b:
ff:2d:02:0b:57:eb:c2:0a:e3:2b:2c:c8:3f:9d:2b:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:25:E5:27:BC:24:4B:82:75:66:24:2F:17:F4:F7:37:B0:44:8C:D8
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0b:87:db:ce:49:4f:11:79:79:85:a7:6e:7f:f0:d7:1b:01:
96:d0:07:6b:70:ba:2c:43:7a:ec:5e:d2:6f:1f:6a:96:e3:84:
54:47:d7:4a:00:0d:a2:22:cb:5d:ca:13:d6:08:40:61:63:2a:
ca:fb:5a:4f:62:ba:66:bb:a7:54:de:97:ab:ac:2a:79:9b:57:
af:dc:a7:0e:5b:6a:f8:5f:02:5a:e6:6b:ec:14:b2:25:e9:37:
cf:54:7a:67:cc:16:c2:2f:ea:ad:c0:9f:1a:44:6f:f4:79:d0:
d5:0e:00:95:bd:8d:02:f8:a2:a0:a2:84:87:1a:e9:51:81:ed:
b4:99:a3:9d:11:a1:27:2d:18:96:74:a4:01:25:2b:11:44:9e:
61:63:ef:d2:05:46:3d:e7:36:5a:ef:2d:2f:a9:6f:d0:e1:5c:
5e:62:c1:e3:e7:da:58:0b:2d:4c:8d:95:be:5f:1f:a4:e3:26:
2a:69:1c:58:4f:81:68:1b:ce:a5:7d:bf:a4:a6:67:62:af:7b:
f3:bd:23:de:51:1b:4a:bc:52:c8:3c:31:d0:db:e6:74:c3:29:
ba:41:8e:0b:36:a4:7a:3a:79:07:b9:bc:40:b2:13:c7:a7:e0:
8a:dd:8c:14:38:3d:74:a0:98:d7:0f:7d:5b:f9:2b:a8:d4:f2:
0a:5b:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:33 2025 by rpki-client