Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: 5L+aFnAhFkNoJlUy7U0bbhd102c0GpQf63p/9J+X+zw=
Subject key identifier: DA:48:A1:D5:F9:04:D1:15:F0:53:B7:48:02:CE:87:ED:E8:5E:7E:70
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 0194BC727DFFDC0751E774DE6BC0F3AE86A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: XG2MQDXW9iSOlQBFenspaRkpb9Gbck6hURG8suHaGCE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7d:ff:dc:07:51:e7:74:de:6b:c0:f3:ae:86:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=da48a1d5f904d115f053b74802ce87ede85e7e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:fe:0b:05:93:d4:1e:fc:79:e7:a8:81:b2:
3d:d8:22:39:01:60:91:2c:36:52:ed:3b:14:b2:20:
a4:d7:6c:63:05:ef:65:85:ab:52:74:bb:a5:6f:42:
51:4b:96:4c:75:30:1e:55:5f:7e:f9:14:23:8e:f7:
77:67:e1:fa:a6:48:9c:b5:7b:7e:f8:f4:6e:b4:04:
dc:a4:12:b2:86:6e:b0:c4:38:aa:62:5a:b8:36:ea:
1e:f7:25:47:bf:6a:47:69:25:8c:66:35:30:11:09:
c2:7b:36:de:a6:a9:32:21:34:c1:ae:a9:b2:6a:27:
6b:85:9e:d5:d5:5f:24:00:25:41:ec:46:bc:74:ef:
80:6b:24:5c:d9:5e:03:ac:6b:65:8f:46:b3:5b:11:
9b:fe:dd:65:d3:ca:87:f6:a6:26:26:a0:a7:90:39:
e2:c1:00:37:13:f5:12:3d:95:91:bf:35:ee:32:fb:
f6:c2:17:a7:3c:7e:2b:09:7f:e4:b4:a1:29:16:29:
5f:1c:7f:7e:45:96:70:2e:be:4e:0b:46:7d:a3:37:
67:c6:ad:85:c2:dd:f1:9c:e8:2b:89:ea:f2:ca:c2:
13:b6:a3:66:19:75:12:d7:20:f4:9a:fc:2c:0e:32:
6d:b6:e9:cf:5a:fd:76:09:51:05:b0:1e:fd:84:f4:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:A1:D5:F9:04:D1:15:F0:53:B7:48:02:CE:87:ED:E8:5E:7E:70
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:be:3a:36:ca:47:f7:17:3e:bf:96:80:43:8f:30:b0:18:e8:
2c:28:aa:12:76:5c:68:07:24:00:6f:fc:67:48:82:87:04:01:
56:64:37:e6:82:41:8d:45:b9:63:b7:d2:22:9a:91:7d:ea:ac:
f1:cd:d9:33:6e:bd:3f:b5:5d:12:db:3f:ec:c0:5f:ed:cc:fb:
38:5b:9f:4c:78:db:e0:46:ce:a9:75:09:26:8c:83:bf:93:7b:
64:d1:e6:d4:10:01:51:61:7a:3d:37:71:a9:d3:11:76:f8:af:
f6:3b:ce:80:d3:aa:d2:47:2a:80:00:4d:cd:0c:ac:c7:da:b5:
95:1b:91:99:bb:54:2b:00:38:bf:45:1f:5c:52:e5:58:09:b7:
6f:63:ef:71:2d:d6:a0:0d:6e:27:0e:9a:79:15:d3:bf:00:89:
e7:1b:c1:e7:0b:84:d2:7f:96:46:83:31:9d:9a:1b:93:6d:39:
60:46:88:08:a2:84:5e:74:20:5b:59:0e:0a:a0:63:6a:2d:a2:
36:c6:d9:d5:1d:4f:6d:5b:68:16:3a:70:70:8f:36:be:85:60:
31:54:d8:c6:79:2f:26:b7:4e:9f:65:a6:48:32:d4:b1:94:c3:
2b:b5:be:1e:3a:b5:59:c9:e1:c9:07:75:21:62:d9:87:01:cc:
b1:f2:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:48 2025 by rpki-client