Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
File: zE1IcI2lBUlZ5hilguKMFV_vET8.mft (raw, json)
Hash identifier: j0os5FsPzxmA94bgKtsNB2Y2japMGRGijMULPEMlFcA=
Subject key identifier: BC:28:79:20:B7:DD:59:04:79:E1:B2:A7:63:0F:06:70:B5:29:34:AE
Authority key identifier: CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
Certificate issuer: /CN=cc4d48708da5054959e618a582e28c155fef113f
Certificate serial: 0194BD176516823348B57CAC68C645EE07B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: r9Ux985jnVmfKHLZzNH9_T06wzU.roa (hash: SP4ahRSwbqs6nOlIBz3rDf0O3m+DJabQsDxWQ8oLOwM=)
2: zE1IcI2lBUlZ5hilguKMFV_vET8.crl (hash: uKcjKuQ6DIXvhvbGnEbcvXbZHFT5jw8b9FEZJevMfno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:65:16:82:33:48:b5:7c:ac:68:c6:45:ee:07:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4d48708da5054959e618a582e28c155fef113f
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=bc287920b7dd590479e1b2a7630f0670b52934ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:a1:4f:a8:52:ce:22:2b:e4:4c:b6:eb:c4:
5b:7c:84:8a:f7:ff:12:29:ec:51:f1:62:9c:24:cf:
7e:31:6a:6b:ed:cd:3f:4a:38:5f:81:32:36:b7:74:
92:ea:09:ad:fa:e6:d8:0f:fa:98:a9:65:9a:49:40:
eb:06:b7:19:7b:17:08:5f:fa:9c:2d:c1:ee:8e:45:
cd:2a:90:be:4f:d7:1b:02:71:66:3e:c6:3d:50:31:
22:73:35:e3:e0:ae:f4:b3:e8:b8:ec:81:43:85:f6:
39:3f:c3:0a:62:90:e6:10:88:0f:41:48:27:bc:74:
48:46:4b:c9:f2:d6:b8:bd:99:57:85:de:b4:08:f3:
f9:75:81:10:3d:91:b8:0d:21:02:c0:52:6f:f0:2b:
a1:57:db:9c:78:17:94:93:7f:7c:d2:ad:a8:e4:0f:
25:66:4d:61:3b:d1:8a:4a:7a:a2:6b:1e:12:bc:ec:
19:4e:8a:7f:8d:75:73:1a:d6:55:eb:64:90:b6:8d:
65:bd:74:98:7d:18:77:79:55:23:c4:0a:ad:8c:d1:
ec:ba:dd:08:be:c3:8c:c1:c9:8a:67:39:17:56:0e:
1c:9c:27:a4:32:cd:3a:ed:b1:18:53:f0:21:53:f8:
0d:df:9f:54:58:99:fd:61:37:98:ee:8f:dc:29:fa:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:79:20:B7:DD:59:04:79:E1:B2:A7:63:0F:06:70:B5:29:34:AE
X509v3 Authority Key Identifier:
keyid:CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ce:ef:4e:5b:aa:1b:80:ac:7c:f0:a8:8e:f4:bb:8b:6b:5b:
e6:c3:cb:66:1e:a3:50:45:17:a8:cc:7f:70:43:ac:65:33:28:
9d:e4:0a:66:90:37:61:cb:ca:56:c7:0e:5e:73:78:79:17:26:
c1:ab:52:a3:59:e1:6c:1d:00:25:5f:0b:bb:cd:51:12:55:f6:
47:2b:bb:21:30:ad:63:2c:5d:a3:aa:89:2e:78:87:1f:48:a3:
55:00:16:8a:46:01:81:75:1b:2f:1d:9f:fd:e9:e5:eb:3e:e7:
8e:cf:c8:38:5d:65:06:fd:9e:9d:b9:a5:b5:84:04:71:10:ef:
ec:86:ca:0c:08:a7:45:73:4a:1a:0c:0d:bd:a4:24:d5:61:8a:
94:8d:c9:c3:48:78:ae:f6:fb:ec:0f:3f:f8:81:68:fb:19:01:
31:c9:ff:58:f8:ae:fe:e3:94:d2:71:b5:05:64:58:40:6e:fc:
94:9c:77:0e:bc:98:17:b8:bf:88:10:bc:62:f3:58:bc:41:e6:
24:bf:8b:84:9c:b0:55:e1:33:00:2d:e0:07:61:fb:1b:59:4c:
73:3d:4c:99:c6:a8:7c:43:14:87:4a:34:b0:66:f0:ac:79:db:
e5:02:19:ce:0d:17:0e:41:5c:70:88:93:7d:5e:c6:15:5d:e5:
82:59:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:57 2025 by rpki-client