Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: 2FfO3kYLBSntK2UqoMCZmDmMG+nGtFPOUNhq+ed+Mw8=
Subject key identifier: 83:6A:59:C3:0D:3A:76:B3:3C:92:35:BB:44:3B:18:E2:C3:DB:A8:38
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 0194BC04D1AE28A25F5A07CB6488F0DB4625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 125D
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: FpvPB2QgfB+74ntKh7m5YResqVgrJyKlNCNxNRHCajc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d1:ae:28:a2:5f:5a:07:cb:64:88:f0:db:46:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=836a59c30d3a76b33c9235bb443b18e2c3dba838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:86:bc:ee:95:ab:d0:6e:a2:ae:9c:9f:d5:
2d:08:0e:f9:16:0b:b3:ec:4f:00:72:c8:2d:c7:ab:
a5:10:fe:a5:1f:3a:6b:81:a1:99:79:de:a3:d6:74:
60:7b:b7:43:ea:59:c5:3f:27:21:46:f0:6d:26:fb:
8b:ad:82:3d:c7:95:55:51:75:bf:54:60:be:5f:3e:
b7:b4:1a:06:c7:be:70:a9:39:61:98:0c:fb:a8:fa:
39:e0:1d:f3:ab:4e:1d:ca:bd:dc:04:fa:e5:26:b2:
81:c1:1f:09:42:b0:55:c6:3e:bd:5a:84:ad:e4:0f:
a9:84:d6:aa:77:4d:78:9e:16:51:98:d2:11:dc:c0:
fd:2b:0c:d7:78:d8:02:7f:f7:46:eb:10:6b:0d:87:
22:0e:4f:5b:0a:10:c6:f4:6f:ec:04:ca:66:fe:7b:
7d:6d:00:ea:20:08:24:7d:2e:d7:da:6e:d5:3e:90:
91:05:f9:f7:48:85:84:8f:c0:6d:11:62:a8:7b:ff:
0d:99:bf:23:98:07:23:93:81:3a:f6:be:be:39:d0:
77:e6:83:6e:e9:f4:4a:e8:96:9f:4c:80:ec:34:8d:
d8:4e:4c:69:d4:0a:16:b8:fc:d9:e9:f5:81:ea:d4:
61:a0:c2:2a:17:60:d5:1a:6e:c6:3b:25:1e:d1:a5:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:59:C3:0D:3A:76:B3:3C:92:35:BB:44:3B:18:E2:C3:DB:A8:38
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:79:6e:5c:37:9f:31:ce:f8:32:5a:de:2c:04:b2:36:ae:
f4:bc:08:cd:bc:1b:33:c6:e4:fc:a4:6c:2d:ef:88:a9:9e:92:
ba:4d:ba:20:2d:e1:b2:81:11:99:b7:d4:e7:e3:5a:4b:da:6a:
35:ec:86:93:88:05:e3:e0:32:97:3a:b8:f7:c2:3a:bd:2e:4b:
60:f5:52:db:f7:73:48:52:c7:64:9c:77:cc:04:02:69:1c:76:
45:5a:ef:e5:9e:6d:26:18:4e:97:89:af:40:e3:a2:2a:66:f5:
c9:c2:95:29:e3:50:0d:12:65:ef:94:63:49:4d:af:a2:cf:4a:
1f:ad:14:d1:8f:57:38:c9:ee:08:5f:e9:16:dd:16:06:8b:b4:
72:2a:d6:d8:57:f5:00:f2:9f:a6:cd:4c:16:ca:36:fc:4d:31:
3e:47:25:80:b4:ce:3f:20:ee:ed:e6:68:62:30:b4:95:cc:7b:
61:27:b3:89:9d:46:b0:7b:14:15:81:6b:e0:f9:ee:b4:7b:24:
0a:fc:25:33:c0:93:1d:c7:4c:02:d6:88:cb:31:9f:ca:74:c5:
05:ab:25:59:c2:45:1f:b8:60:14:64:7f:ad:9c:47:45:b8:19:
18:28:ff:57:cf:1b:1d:35:21:ae:17:67:19:32:ad:3e:ba:15:
59:e8:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:13 2025 by rpki-client