Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: NSopZV1c25JmsvwvaZES9e/S+jXlJcB635VAnFD9ftc=
Subject key identifier: 76:B3:B3:FD:00:71:BE:FF:EF:52:D6:A2:B7:ED:2F:E8:ED:71:ED:9E
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 0194BCA989C50AD32DDCA92063C698EDF0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 0BDF
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa (hash: nQWhe0fyffCN2quQfKSQ56T2rfLrYZUxC64fwkrxixE=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: BoEgZWBC6SiWMY+PeQ5wXmjHwpp07xdPoo0oifPZyxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:89:c5:0a:d3:2d:dc:a9:20:63:c6:98:ed:f0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=76b3b3fd0071beffef52d6a2b7ed2fe8ed71ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:69:c9:7b:12:ee:5b:11:6e:8a:10:74:c9:
f3:83:89:b9:c1:ea:13:a3:b0:5d:2e:18:58:56:26:
dc:47:a6:a0:93:e3:02:42:30:33:38:2f:de:75:19:
0d:fd:18:c6:7b:66:25:43:66:52:dc:00:f4:87:d3:
e4:13:fc:f8:19:7a:43:65:9e:69:35:29:ea:1a:82:
bb:f8:e8:5f:0c:21:f1:2e:70:08:29:9b:8d:a7:8b:
cc:dc:32:ef:78:95:e6:68:6e:cc:65:7c:0c:5d:30:
3f:74:46:22:08:1c:ab:3e:f6:5d:2b:be:43:9a:b7:
e1:44:d4:29:7b:fd:06:75:af:56:92:17:11:1b:17:
da:9a:33:5d:5b:6d:69:da:db:c1:fc:0f:cf:f6:2a:
e8:0e:5f:3f:b5:80:80:5b:43:21:56:45:2b:9e:ae:
7c:c8:12:b6:03:3f:f4:e3:a5:b0:a4:a0:8f:33:a8:
ef:52:8f:8b:ca:1a:d1:3f:73:ca:c0:e9:8f:29:f8:
00:38:9a:50:65:9f:08:b8:56:6f:a2:b2:56:56:d8:
28:9a:7c:fa:fd:a0:8a:e8:9b:36:cb:cb:64:28:c4:
f5:e8:96:5e:72:ca:d4:8d:5d:dd:bb:82:65:62:e2:
89:9f:9e:ee:53:99:90:2f:df:d5:f3:3e:2e:f3:4c:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B3:B3:FD:00:71:BE:FF:EF:52:D6:A2:B7:ED:2F:E8:ED:71:ED:9E
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:26:a3:3f:d3:22:ab:58:73:66:05:b9:21:a9:15:b8:fd:e0:
7e:78:74:2c:bb:90:20:10:e8:01:ea:b6:98:9f:8c:b7:9a:55:
ed:0f:28:92:9f:44:50:0a:16:70:26:8e:df:48:78:24:7c:50:
8e:b8:bc:5f:97:a8:b6:c3:03:e1:36:2b:e1:ad:c4:db:ff:81:
dd:47:59:69:cf:e3:6f:0d:f7:40:69:52:cf:d3:7d:3a:af:e0:
f8:4c:20:41:e2:af:5d:17:30:e6:04:97:1d:95:cb:c0:24:51:
7b:c6:bd:82:21:ab:84:a7:ed:33:dd:7e:04:11:95:36:12:33:
0d:27:05:7d:59:02:78:2b:6d:9e:73:e3:eb:0c:99:86:f2:5e:
1c:3a:ea:4b:c2:b6:a3:52:48:87:a2:c4:19:7f:d2:8a:10:70:
f3:d9:7d:49:cd:28:18:13:60:e7:1d:e3:6f:3e:c6:51:77:25:
47:87:f5:e2:be:f0:ba:43:80:c5:1c:95:6d:ed:ca:47:32:40:
15:5e:08:85:43:26:44:e2:dd:98:94:a0:51:cf:97:ce:a2:11:
76:bc:67:78:a4:26:64:9f:7c:c2:4a:34:77:68:99:1f:93:2f:
30:8b:c3:28:ff:b7:1b:13:79:84:ec:4e:ea:27:c9:2f:3e:10:
e6:9d:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:15 2025 by rpki-client