Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: b7l9xL5MGjfG63/dZ28Kz9w1cZyZfVjXqYxF0dJ69so=
Subject key identifier: 70:33:19:83:3B:C2:9A:46:44:50:F3:24:06:E0:5E:F3:BA:DB:EB:31
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 0194BD855363CD48E78AB0B8C0D4120E8ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 059B
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa (hash: tfgZKXi2rZuQqy6q4ZM+ZUGFDVqdyYkcUnUVHT5tgpI=)
2: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: HPOIZsoAH/R+IC7fN+9CBez2P8FzbLS5h4VhyNVRLl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:53:63:cd:48:e7:8a:b0:b8:c0:d4:12:0e:8a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=703319833bc29a464450f32406e05ef3badbeb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:7a:fa:48:8b:75:1a:1b:52:da:8a:61:0b:
de:7e:ed:a9:71:c9:b8:e4:f8:88:15:e1:f3:bd:d9:
f9:90:a0:5c:05:90:27:d7:79:b2:52:e3:73:0e:71:
e0:18:a2:9e:38:26:5d:1a:4e:d3:b1:b8:c1:d1:ed:
e4:81:d1:dc:89:dd:5d:d2:21:3b:a5:9a:4b:a4:54:
76:e0:3c:59:d6:18:76:13:7f:d4:10:46:c1:be:b1:
87:e4:5d:3c:8e:31:08:1e:fc:ed:8f:3b:bb:31:39:
99:c6:2b:8b:fb:f2:75:7a:45:e1:d6:be:bd:9c:d6:
15:e0:d3:98:9c:1d:3c:b8:17:6c:82:bb:3b:47:91:
04:47:80:00:63:35:c7:b9:fc:79:16:38:00:cd:6c:
14:0b:78:07:74:ef:8c:e5:d0:d3:7f:ed:50:35:75:
80:68:57:13:f0:b6:d2:47:bd:fb:0f:12:e4:a2:cb:
3b:b0:eb:41:33:9e:7b:c9:a7:d1:6a:cd:c1:a5:11:
28:06:74:fa:67:11:32:82:36:b0:c0:57:3a:67:1b:
5c:8a:91:9b:26:d9:13:81:99:d4:fc:4e:f5:2c:fd:
69:29:0f:7b:90:0e:44:3e:c5:0e:d8:ec:e3:37:49:
32:bb:88:54:5d:1c:21:21:fb:98:b3:5d:18:ae:98:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:33:19:83:3B:C2:9A:46:44:50:F3:24:06:E0:5E:F3:BA:DB:EB:31
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3b:59:cf:26:a9:c6:88:82:f8:45:d6:40:e1:6e:7d:ad:4b:
1e:a4:72:88:38:12:83:38:8b:f6:4a:9e:74:06:63:59:29:12:
c3:7b:4b:41:3c:fc:32:cf:e6:08:5f:38:79:2d:94:d0:8f:6c:
51:17:60:63:05:c2:d4:12:d6:05:0f:4c:d5:69:54:2f:1a:43:
87:2e:80:fb:99:ba:8e:9a:8c:91:98:ac:e2:02:84:9a:3b:8e:
13:70:26:80:52:d0:05:f9:b1:06:26:d1:f1:31:59:a3:95:2f:
80:73:4b:54:5d:46:9c:27:1e:06:fc:a4:91:2d:9b:96:c2:01:
32:9f:27:19:b3:65:84:bd:41:d8:81:77:87:89:c5:f7:8c:4c:
c9:66:55:12:01:63:c3:60:43:7e:bb:08:93:49:09:1e:49:39:
04:7a:ef:3c:c1:e9:32:b3:7d:8f:2c:81:c7:91:c7:24:11:df:
5b:d1:40:20:79:6c:03:29:e6:7d:68:8e:18:58:64:1d:49:d5:
fe:d4:49:7d:a8:3c:10:49:47:92:e5:7d:09:a5:de:2f:13:91:
59:bf:6f:40:95:6a:f0:73:09:3f:d3:c6:a4:43:26:ff:78:7f:
ef:d2:46:44:bb:5b:58:14:47:34:2b:5a:d5:05:5e:32:f1:1c:
1c:0c:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:15 2025 by rpki-client