Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier: vRjYIv0OWiblyh1c8v8e26/TqCZQYwCzkoNLU+5eEZw=
Subject key identifier: CB:98:B3:EB:8B:FA:D4:AD:4D:8E:2C:A7:40:4A:3F:72:52:C1:9C:9F
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 0194BC04EF2124DF3653A2D0D81E5F42C674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number: 133A
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: +G/xPs1onG7dMLCa+E0aqQJZ5KcUcyxNSVaUl6HA6PA=)
2: lHo6E8O3jVZPWE_3CSGUh-yWmns.roa (hash: EcydcckC44FXLMG0RzB+bDpZsk7fNTw0ZBUYetuTeMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ef:21:24:df:36:53:a2:d0:d8:1e:5f:42:c6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=cb98b3eb8bfad4ad4d8e2ca7404a3f7252c19c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:23:d1:cb:28:eb:cf:55:ec:af:cf:f6:db:
14:67:a0:75:64:66:94:e5:98:97:33:c9:b7:2e:78:
c5:a7:f8:28:3c:42:e8:55:15:2b:49:61:ca:d0:c7:
9c:4b:68:c2:d3:65:56:ca:a9:5e:3e:a9:18:e2:52:
83:06:9c:e5:76:84:71:59:30:90:39:ec:01:ce:5e:
11:da:25:2d:88:2f:c1:fb:e5:bc:14:a4:35:bd:47:
5e:f4:27:fe:96:ea:17:db:57:75:eb:46:76:13:b9:
67:6f:80:91:38:e4:ca:24:ce:bb:26:f5:7e:3c:fc:
b6:ec:40:04:31:f6:12:2f:41:a2:42:99:55:f9:d3:
d9:a0:38:44:39:a5:33:e3:8a:40:0a:4c:3b:34:0f:
35:eb:03:5f:ab:ed:27:fe:08:39:54:a4:3b:54:26:
bf:ea:73:59:00:48:8f:bf:a6:3d:11:0d:1b:5d:55:
57:c9:8e:40:bf:3f:57:c5:f3:79:9e:9a:a3:7a:22:
fa:1a:38:c8:bd:2d:73:73:f0:d9:2e:d3:9a:70:60:
10:a5:dc:0c:5a:cc:1d:89:66:11:7c:54:16:7d:41:
72:10:76:3d:75:04:81:bb:12:8b:18:88:48:c1:a5:
dd:ae:5d:6e:4f:0a:04:05:aa:1c:40:8e:62:a2:01:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:B3:EB:8B:FA:D4:AD:4D:8E:2C:A7:40:4A:3F:72:52:C1:9C:9F
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c6:1b:df:9c:be:ac:d1:d4:87:d2:58:dc:50:82:82:d5:4d:
3e:f0:69:00:5c:fe:b7:26:fe:7c:c3:bf:aa:5b:9e:03:c2:91:
ac:45:e9:22:57:01:d4:ce:d4:4d:09:a1:e8:b0:b7:48:61:d7:
bd:94:71:46:3c:e6:86:f2:51:e9:0d:ba:ba:7f:3a:a8:12:e0:
80:7a:04:ed:88:c9:53:63:5c:b2:7e:21:ab:c6:44:af:1c:85:
9e:3d:04:cb:bc:5a:4e:99:d1:7c:86:88:04:44:81:48:d3:6b:
15:74:fc:aa:ba:44:96:f9:5b:89:49:20:f8:8d:50:3f:04:4f:
51:44:97:e1:3e:21:1e:73:54:90:6a:92:68:20:70:c2:7a:ab:
d8:9c:e3:b3:41:93:77:2a:d1:04:ff:73:6f:11:70:84:5b:d9:
74:8d:0c:1a:3d:be:88:1f:49:5e:b3:a4:70:10:23:64:aa:02:
53:ed:8f:4a:81:e6:74:03:36:37:2f:fa:23:2e:e1:07:6d:03:
ed:e2:f3:36:55:9f:b1:3c:91:fc:e0:fc:95:55:6c:b6:04:59:
9f:7d:df:58:9d:33:2e:63:f0:b0:d9:05:bf:b4:b3:14:99:3d:
24:4b:06:ed:24:aa:52:02:73:a8:e8:f5:a8:5e:3a:f9:d5:b7:
c0:a5:e5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:11 2025 by rpki-client