Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: RMkqlknQxmv1AoeK4OeqjIg+0PCCY8h5xemwklf4AQw=
Subject key identifier: F1:E7:E2:77:BE:DC:23:3C:E3:0F:06:86:81:FA:32:3B:29:4C:7E:06
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 0194BBCDF0595B2CD45D523B254265A02DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 0E6A
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: 7l0MioucECgpXImq/qk1EGne2rp2gsPHJ/JMx1kSJYg=)
2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f0:59:5b:2c:d4:5d:52:3b:25:42:65:a0:2d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=f1e7e277bedc233ce30f068681fa323b294c7e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:17:b6:8d:e4:28:1a:92:eb:3a:6a:02:7b:
3d:1a:c3:bf:06:fc:48:0c:3b:74:15:d4:ba:b8:5c:
10:f3:0a:ac:95:07:16:b7:53:c0:1f:84:d8:e2:84:
76:70:d8:76:21:3b:00:99:dd:57:1b:e2:a6:54:b1:
b3:53:b1:e4:2c:20:6e:40:a9:6b:54:05:65:a2:88:
4f:8c:ce:63:59:38:d2:2b:33:66:79:c8:ca:27:7a:
9a:2d:2f:85:71:cb:03:00:47:8a:86:5f:60:52:2a:
d3:c1:40:60:84:4f:0b:d0:33:cc:65:71:b9:30:c3:
28:23:76:70:76:f6:1e:76:08:54:d6:57:15:f7:3c:
11:e8:1a:c4:17:48:b3:34:d5:1e:68:de:59:d8:15:
27:d1:ce:f0:db:d4:3d:f3:09:4c:63:cd:b1:ca:66:
6d:58:24:86:16:59:7b:d9:d3:f8:74:9f:80:05:70:
e5:eb:97:e3:c1:65:48:20:a2:9f:78:b9:20:63:de:
97:32:8b:13:bf:9d:be:98:21:98:50:98:a9:22:82:
26:fa:23:94:05:0e:86:72:b5:9e:0f:cb:36:a8:22:
de:94:40:83:8c:cc:e2:2b:5c:38:11:54:dc:80:fc:
d9:84:6e:5b:b0:b4:75:c4:97:e3:7d:0a:1c:46:08:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E7:E2:77:BE:DC:23:3C:E3:0F:06:86:81:FA:32:3B:29:4C:7E:06
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f9:d8:3b:86:22:37:8f:c0:c0:92:1a:8e:9f:28:8d:3c:0e:
4b:29:5b:fa:a2:fe:81:95:1f:81:28:b4:2b:cb:6e:95:36:07:
4f:7f:09:2c:60:ee:95:fd:7b:d4:99:d6:b8:12:bc:65:c9:36:
c6:ec:ca:e4:e8:6a:29:fa:b7:33:f7:f4:10:c3:bc:42:27:7c:
10:cb:63:5c:b3:4f:9e:5b:10:f6:3f:7f:b4:b4:da:ae:ae:13:
04:4e:7b:67:e4:81:45:0d:9a:5e:3f:b5:2e:24:b9:0e:8f:b4:
cc:0e:04:db:a3:6d:fd:b5:19:4e:8f:35:e7:47:11:f5:87:ce:
25:8f:c9:34:27:bd:14:dd:c8:12:ab:7e:aa:1f:c2:ed:8e:ed:
bc:7e:eb:b1:4e:47:b9:4e:84:5d:91:53:ee:ed:c8:17:6a:c1:
ab:ba:c4:d7:a7:3a:e6:e8:fb:b3:01:77:e4:e3:32:61:77:71:
5e:e5:b3:53:d7:58:9d:e6:d8:84:c4:04:32:e1:c6:ba:2c:7b:
a3:9e:72:6c:8f:df:96:c8:1f:f5:89:0e:d1:bc:31:16:c7:9d:
c1:03:ee:9b:fc:0d:73:15:61:ee:b2:31:0d:26:36:9f:80:6e:
ad:dd:61:56:51:74:8c:ea:28:37:81:1f:6e:28:0e:70:97:6f:
97:c2:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:33 2025 by rpki-client