Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: CfEFfnWDWFq5bqAJ0Tezhf17uN4w+zbjvYEOg+RlX3A=
Subject key identifier: B3:D9:8C:9E:46:11:6F:F2:7F:99:A3:68:31:E2:45:1E:F7:AB:89:83
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 0194BBCE1AAE9A92E805AE066143E211C874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 2lhRfHkMgHjBgOEI871xwfstUps.roa (hash: pS6P1vzgUypkZeUsuXFw4LKxiNYTX5RfnQUo/ctpKhE=)
2: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: dA8fz9fk6hs3NH7fJUzbZx5vaw9uXMZltAzcoI04ETo=)
3: uZvIw4DMtYOiY7JlOgb63vTUcZI.roa (hash: g2eHsXH9Y/MXPOSVAzGV6O9aHOUSDc6gHQknS8yIWx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1a:ae:9a:92:e8:05:ae:06:61:43:e2:11:c8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=b3d98c9e46116ff27f99a36831e2451ef7ab8983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:ec:3a:8c:ea:af:1e:3c:ff:b9:41:59:f0:
45:94:4b:d8:15:f8:6e:20:6d:76:62:00:a2:1c:48:
97:bf:47:eb:97:35:e4:7d:ee:42:03:ee:94:aa:bc:
ba:08:e1:63:5f:d9:da:e2:1e:4b:0f:1c:05:44:9d:
f3:2f:bc:cb:e3:db:34:9d:da:ec:67:c3:6a:e3:c1:
67:a9:72:a9:3d:b5:e8:3a:97:4a:14:a8:f9:9b:59:
56:5e:be:b9:89:42:8c:aa:d0:e0:3b:63:81:cb:1a:
47:47:dc:24:5f:33:17:18:db:69:1b:4b:53:04:d1:
16:f2:8f:60:75:95:23:71:da:df:17:b3:fd:b8:3d:
01:88:97:40:59:dc:0d:bb:4f:b0:b7:f5:df:6a:21:
c7:58:9d:40:b9:f5:35:c5:95:e0:5c:12:2d:c5:a6:
05:17:8a:71:33:22:0d:15:b2:86:13:cc:0f:f7:de:
87:a1:bf:f9:e0:32:43:79:a3:3c:bf:ce:6d:a2:47:
db:5c:33:10:5f:8d:30:cd:9e:fe:e1:41:aa:59:fb:
39:7a:f6:e4:fa:54:5c:bd:e7:3b:38:c3:46:57:16:
98:f1:ef:a0:a1:fa:b1:1d:db:8e:0b:7c:c5:62:85:
fb:0c:bd:92:02:e7:8d:e5:88:b5:e1:4b:52:9f:46:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:8C:9E:46:11:6F:F2:7F:99:A3:68:31:E2:45:1E:F7:AB:89:83
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0e:09:c4:d4:ce:b9:51:86:cd:e2:08:01:43:e3:b1:3c:f3:
c0:63:6c:ac:dd:b8:1e:e3:cb:71:1d:3e:e1:dc:f2:8e:d5:48:
b1:d9:b1:87:67:db:3c:ec:02:97:1c:cc:47:f2:1f:d2:10:f5:
20:1a:90:76:d9:1a:3e:28:cc:39:62:2c:df:6a:50:ed:96:55:
5c:16:9f:89:96:a4:9b:fa:20:14:74:0d:4c:58:65:ba:87:b6:
40:31:c1:8e:3b:aa:ab:ab:d2:76:e6:69:8f:78:0e:89:0e:ed:
51:16:d8:12:bc:f1:5c:ed:36:67:b5:29:8c:60:59:d6:ed:b3:
20:2a:96:a7:5e:7e:e7:b0:98:b6:42:60:9c:c6:a6:34:7b:6f:
bb:08:79:b6:5f:d2:b2:ad:ac:d0:17:f3:05:bb:f0:96:12:38:
e4:63:ea:3b:0c:5d:8c:a6:d5:bb:ee:65:13:80:2a:2a:21:68:
f8:8b:36:76:f8:3c:cd:cd:1f:a5:30:5a:42:19:e0:55:fa:a6:
bf:a8:97:48:83:c3:ee:63:6a:ba:ba:64:66:f0:b0:a7:01:b9:
b7:aa:e4:87:45:4f:4c:54:8e:ea:be:e1:c5:23:5a:60:4e:e8:
63:57:b2:7b:2a:22:38:58:d0:81:b7:06:22:9e:ce:67:61:5a:
b1:27:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:05 2025 by rpki-client