Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: 75VCrd2NhHamyvRmS3nad6rJWXRbOvg+n1DgpjgJpzM=
Subject key identifier: BC:E1:C0:C5:8E:37:AE:64:B3:1B:85:0A:25:B4:8D:00:5D:D0:34:41
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 0194BC0513E8602DEF7E0D1821BC822C02B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: snrQDIpxlO9aIXhiXo48D3Kz5FS984otF4hfRdMnPtg=)
2: eAt9IZ5Or6_84ZpcOgPvrhj1MJ4.roa (hash: 8mDJ4vba1XUdtAM7cN3synGzI+MOb3y37SdyPC9kyko=)
3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:13:e8:60:2d:ef:7e:0d:18:21:bc:82:2c:02:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=bce1c0c58e37ae64b31b850a25b48d005dd03441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:58:fb:e8:76:4b:3b:d5:c0:27:a7:6a:5c:
c2:de:31:c0:13:18:aa:cd:bd:be:aa:40:3d:38:d9:
14:0e:a8:1d:13:14:22:13:4d:6a:5c:ee:9f:c7:83:
e6:b2:09:83:33:e4:28:97:f4:a2:08:75:4c:09:5d:
80:8a:b5:f2:eb:1f:95:64:b2:56:eb:0c:22:2a:88:
e7:8b:15:7f:5e:42:07:35:a1:82:5c:1d:37:f8:4f:
f0:06:c5:d3:e4:49:20:16:47:4f:69:b5:c7:f7:03:
d5:7a:85:a7:2c:61:27:79:49:bf:7a:97:15:47:fe:
a5:af:e5:fa:84:12:54:e1:45:26:d4:9d:73:a2:48:
ca:88:d4:42:dd:9c:eb:42:c0:3f:94:98:13:a3:31:
8a:2d:16:2a:29:9a:ca:e4:77:41:c9:c3:e8:df:2b:
54:3e:06:be:c4:45:39:a0:15:f5:3c:72:52:52:fa:
07:59:b9:f1:74:52:e8:51:a0:c2:cf:ed:b4:6f:46:
62:8b:e7:46:8c:7c:e7:aa:5e:ce:e1:b9:92:b8:51:
cd:85:3b:26:f6:c1:bc:32:60:ea:a6:d0:7f:42:22:
10:bc:2a:6c:92:0c:7e:14:cf:45:55:8b:dd:53:57:
a8:7f:94:6f:bd:1f:86:e8:5c:5d:a3:31:54:6e:41:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:C0:C5:8E:37:AE:64:B3:1B:85:0A:25:B4:8D:00:5D:D0:34:41
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2c:4f:82:bd:a1:ae:4e:2e:96:7e:5a:0e:15:76:10:9c:1d:
25:b9:2e:79:42:9b:3b:03:60:6c:e6:d6:19:57:57:ad:e2:aa:
10:c9:0f:15:4d:b5:6e:60:c7:4e:42:d9:ac:52:2e:8f:14:26:
2d:1b:2d:f6:17:13:6c:e9:62:6b:c6:07:73:ac:f1:a5:99:bb:
bf:a1:a1:0b:6a:9b:df:de:a2:dc:a1:26:59:b3:87:72:63:4a:
e6:ef:52:60:cb:a4:d0:8c:2f:cd:9e:bf:24:e9:3f:af:06:aa:
10:5f:e9:b7:6a:09:e9:81:af:0f:7e:01:7e:05:35:54:30:c9:
00:e5:ff:51:a8:62:19:65:9e:02:4c:d5:0b:a0:04:e3:a2:c6:
a2:45:0f:05:d5:f0:6e:e5:4f:f4:44:eb:53:49:54:90:a8:79:
95:c1:c1:7c:89:c6:6b:3b:65:bb:80:1d:40:4c:6d:2f:96:06:
3e:a2:b9:34:3e:2b:b8:82:d9:2d:7d:ef:5e:43:93:fe:7e:83:
bd:1e:a1:4d:58:29:83:e0:9b:ee:d7:4d:76:9c:b2:43:3d:73:
cd:ee:92:65:97:85:95:bb:c3:25:ca:3d:19:50:60:0b:79:9f:
ec:c5:b1:63:43:00:fe:47:97:42:dc:e2:39:14:c5:89:7d:c3:
03:74:59:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:22 2025 by rpki-client