Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier: PUV+oGASwHCPSlToS2W21HmH9c+KZjZFkDTGHczrHg8=
Subject key identifier: 4F:76:BB:41:22:5D:15:A4:6A:43:F8:48:CB:2F:5F:78:35:DA:A4:10
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial: 0194BC72CAF041B08D6EB7D1A53874F903C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number: 04ED
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: HBzWSB9zBAU+zxFWQ+umKM6hqvV1TXVru9/JJF3vH9w=)
2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ca:f0:41:b0:8d:6e:b7:d1:a5:38:74:f9:03:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=4f76bb41225d15a46a43f848cb2f5f7835daa410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:e0:e9:ae:f1:e9:59:8d:72:3d:67:f6:e1:
2e:f4:9f:ba:58:18:57:3b:d7:66:98:49:4c:d7:fe:
06:8b:5f:ec:cf:7a:67:76:06:03:29:bc:83:74:54:
87:93:dc:a9:96:0e:5d:65:d2:e3:e9:1a:6f:23:dd:
3b:f6:51:a1:bb:fb:65:ea:2f:ad:a3:ec:9f:ac:c6:
21:5f:e8:64:b4:73:65:2b:a9:0b:fe:4d:74:f1:f7:
9d:5b:ed:92:8a:ea:18:46:8a:83:b1:0c:f2:36:35:
4b:2a:3e:7d:79:f3:26:1d:b2:8b:99:ae:c3:6c:f1:
e0:fd:7e:9a:b8:e9:ff:6b:3e:91:cf:0d:5f:34:2b:
de:6c:5e:52:fe:08:58:12:d6:8c:78:1f:2f:5c:8d:
ea:54:59:b2:33:58:43:44:2f:4f:b9:5e:da:5c:2d:
23:8c:82:6e:7a:10:6a:8e:87:c9:10:e5:b6:ad:87:
d2:96:1a:46:d8:c4:56:19:76:61:79:52:fb:be:cf:
a5:93:88:f7:27:fd:c6:27:68:76:8c:bd:0a:e6:b3:
e7:67:6f:1f:47:90:57:f9:1a:1a:c4:34:04:2b:fd:
a7:ef:00:6d:33:b0:f5:1a:1d:96:50:53:8c:19:3d:
3f:21:1d:1b:e8:63:db:3f:62:c5:62:c9:69:dc:ef:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:76:BB:41:22:5D:15:A4:6A:43:F8:48:CB:2F:5F:78:35:DA:A4:10
X509v3 Authority Key Identifier:
keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:dc:bf:a9:ff:4a:77:1f:15:a7:36:f6:14:2c:a2:cf:49:
cc:dd:fe:c6:69:4a:9e:36:1d:8c:6b:9b:f9:00:4e:a6:96:ef:
62:94:d8:60:bc:e5:e4:58:59:f2:14:43:93:22:ae:5f:1f:61:
fb:67:5d:27:11:32:94:d1:3f:b3:a2:8f:f9:ae:08:48:61:cf:
e0:f3:24:eb:fb:8e:49:e8:e7:fb:25:35:79:e0:99:a5:43:17:
e6:d4:ad:ba:a8:2b:49:dc:73:7e:31:0b:d4:4b:ba:21:6c:30:
cd:a6:e4:26:ee:d1:19:a7:33:f3:e6:94:95:75:89:03:20:d5:
fe:cd:2c:5b:1a:9a:d0:8d:1a:8e:2a:e0:e0:c3:a0:dd:96:e5:
43:35:d2:54:12:0b:32:87:fd:46:2e:5b:9a:44:b3:cb:fe:9b:
c9:1f:78:53:34:eb:f4:56:fa:a3:1c:c0:39:0d:85:83:21:28:
56:38:47:d3:44:50:ca:36:7f:12:03:7f:5a:b5:b4:04:33:f4:
4c:ef:fe:22:65:a3:c5:55:0e:36:29:73:1e:bb:8a:ab:99:e7:
22:5b:2b:f5:53:09:e0:15:d9:f3:46:a1:9b:00:77:f1:e6:34:
90:0c:6f:fd:6f:99:52:c1:35:c8:05:aa:ea:ce:ad:48:d5:09:
b8:58:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:23 2025 by rpki-client