Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: FGWi5EDWV12TpZD2ssuP3DBDZDtNNhKq5MlJfvGorUE=
Subject key identifier: 13:C3:5B:1B:D1:CA:94:33:4F:3D:7E:6C:88:5C:1E:8F:FF:77:FB:AC
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 0194BD178113B46A7E204160672B4809D795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: fd2jMxfd44Zt4paqNU8hQ1DH2_I.roa (hash: +RjL71qGSo4icL3MACQS5wJBhWro6MbBClw1pp1KmbQ=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: EVEokJMEwX42PwZ3ChPQMbwnXQS2acIAP2nkXeCrJBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:81:13:b4:6a:7e:20:41:60:67:2b:48:09:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=13c35b1bd1ca94334f3d7e6c885c1e8fff77fbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:45:96:d2:cf:a4:65:a8:57:02:81:97:d3:
df:df:f0:da:d8:ef:c7:2f:66:93:46:b8:c3:04:a0:
17:99:5b:b2:38:3f:4c:23:03:be:a2:95:a4:6e:49:
bc:a3:d3:77:cf:35:80:f5:d7:20:67:45:62:45:8c:
76:8f:0f:f3:d9:18:87:a7:e6:6d:dc:21:c5:29:59:
6e:ae:9e:fa:10:86:3d:80:4d:e8:36:cd:74:e7:ce:
50:1b:32:75:34:2e:7f:d4:8a:77:dd:20:4d:9f:02:
09:7a:b6:3f:9d:cc:1e:3a:df:75:17:25:95:11:e9:
bd:f4:62:2b:07:c4:7b:94:b5:5b:b8:0f:14:36:72:
d6:d0:16:1d:70:7f:68:42:6f:a1:a4:34:e7:dd:dd:
aa:0d:88:b7:6f:07:e4:51:65:5d:fc:a0:e3:b5:2d:
2d:4e:55:4c:b6:16:00:3a:33:6e:e5:40:43:c8:c4:
5e:cf:5c:77:14:d3:f8:97:69:4a:7d:23:af:2c:76:
64:cf:ae:bd:31:56:fc:32:24:28:b1:a7:c1:90:2f:
ec:84:72:89:a1:2e:5d:7b:d7:e0:d7:67:54:14:e2:
45:e7:85:ad:20:b2:6e:22:9d:1d:24:7a:32:4e:26:
0b:32:dd:ed:ed:25:ea:b5:77:1c:41:ba:5f:3f:e1:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:5B:1B:D1:CA:94:33:4F:3D:7E:6C:88:5C:1E:8F:FF:77:FB:AC
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e6:30:34:52:8e:9b:79:79:75:c8:09:44:1e:34:a9:12:47:
31:7b:04:4a:56:de:84:0c:a6:07:58:9c:49:66:4b:bf:20:ea:
0b:dd:06:3f:1e:90:2d:77:d4:c7:af:79:bf:5e:e5:c7:cc:a3:
be:e4:20:28:0a:5a:1a:f4:c3:13:36:23:a2:70:78:74:57:4c:
74:c5:ba:68:32:ed:25:42:26:46:e4:94:ec:21:23:2a:7a:df:
28:ab:c8:1a:44:93:9f:a7:8d:24:a5:af:95:9e:0d:c2:7f:09:
58:6a:78:0e:f5:50:8c:83:0e:d6:a6:ec:b2:d0:34:02:38:35:
23:ec:ee:04:9b:70:85:37:cd:8a:4c:a2:49:0e:a6:34:1e:a1:
77:a8:85:5b:e8:bf:5f:2a:f6:40:4c:6c:d4:6f:93:e2:68:63:
df:ce:44:2e:b1:62:02:d8:49:33:03:6c:b2:2e:d2:94:41:71:
f5:ac:53:4d:a5:0a:4e:0f:4e:bd:29:57:e5:c3:34:05:7c:49:
48:bf:ce:d1:5f:c4:1f:09:40:d8:a4:e8:3f:80:ad:f6:f3:79:
75:2e:d2:16:64:8a:0d:dd:0a:84:85:2c:44:0d:1b:54:59:11:
1a:02:36:85:4f:5f:72:ed:f0:8e:d2:ec:fe:0c:da:0a:3d:83:
7d:f0:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:48 2025 by rpki-client