Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: yH278+wyBC68jQrNRTpLfAJ6tesQg0SKOIJE2U052Ss=
Subject key identifier: C2:CC:DC:88:21:CD:10:BD:AF:BC:C5:1F:C1:62:8E:DE:1F:62:00:AC
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 0194BBCDD057DC631547CF1292823C640369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: QqRsvKHbfSg6PxrwTIXT3o+OIQzH54PcfoahV3Q9f8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d0:57:dc:63:15:47:cf:12:92:82:3c:64:03:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=c2ccdc8821cd10bdafbcc51fc1628ede1f6200ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:7a:38:ce:fe:38:43:1f:45:be:25:75:93:
ea:b8:e7:61:32:b0:ac:e0:dd:90:f8:3d:20:50:72:
35:71:64:4a:0b:21:21:b4:61:c3:e8:d0:62:65:14:
2f:42:1d:60:1b:0b:05:04:b6:40:5f:42:b0:7d:fd:
7d:26:a3:c2:32:9d:b0:53:ad:d6:bb:6b:9f:b9:93:
b8:a6:24:d1:d8:5e:cf:71:49:55:65:5d:15:7e:5a:
bb:b2:8b:fd:a0:e1:e0:28:0e:67:65:6e:9b:89:11:
6d:6b:dc:94:e1:10:a2:fe:36:d6:10:3e:15:c6:e2:
08:27:21:3a:2a:8d:3c:92:71:ca:71:ce:58:e4:c1:
0e:f7:ee:6a:0c:37:d8:69:0b:7a:c2:79:1e:5c:3c:
6d:ca:c3:db:7a:c0:2b:71:60:42:89:ee:8f:3b:3d:
cf:79:03:34:05:c4:e1:9b:29:d9:8f:ad:37:97:44:
e9:1f:23:92:d7:d9:72:47:e6:7b:39:74:fb:41:57:
ab:c7:50:62:9c:26:aa:c3:c5:75:67:ec:fa:aa:5a:
1e:66:48:0e:f9:b4:fa:ef:51:df:bd:77:b8:ea:29:
2a:b6:03:79:41:a7:0a:44:31:42:5b:a6:b1:b0:54:
c3:b1:36:73:3d:3e:70:3c:15:8b:19:d8:ae:a8:78:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:DC:88:21:CD:10:BD:AF:BC:C5:1F:C1:62:8E:DE:1F:62:00:AC
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3d:58:cc:c8:cb:ea:8b:63:09:8d:b2:01:35:0e:02:a1:17:
d2:a4:d8:2c:dd:19:3a:26:e6:d7:6a:74:26:ef:38:17:45:59:
f6:42:7f:d5:1c:0d:b0:65:70:d0:07:d0:96:6e:c9:a7:18:c5:
66:d8:36:77:02:8b:58:68:ae:2f:38:9c:cb:25:87:83:72:57:
56:81:1d:58:bb:25:3b:d9:ce:9a:f8:6e:5d:3d:a3:bc:6e:cc:
d0:04:e9:f8:b4:43:b1:95:c9:f4:29:a2:ec:66:1c:e0:27:1c:
28:70:d7:da:86:ba:e5:39:b0:1a:cf:9c:9f:40:0b:b7:7f:4c:
d7:f9:ce:66:b7:04:e5:c1:c1:56:c8:42:14:03:fa:b6:7e:0c:
e7:d9:c4:0c:7b:61:ed:92:1a:57:ec:e2:c8:59:5e:88:31:98:
a3:d5:a8:d4:f8:59:8a:3a:b6:30:0f:32:ae:8e:13:72:dc:d4:
20:06:04:94:bb:00:5f:35:44:f5:19:61:7a:e9:ca:90:ae:40:
c8:c6:8b:70:de:69:2b:1b:f8:c6:fd:4f:ce:65:96:eb:0b:34:
da:9d:cf:7d:f3:28:b9:88:b9:c3:59:58:c9:ee:66:7c:e1:98:
e9:0a:e0:62:e2:6a:2c:30:fa:bb:73:c8:86:3b:a2:c0:6b:7a:
dc:96:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:47 2025 by rpki-client