Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: v9Hpy7GQCLVnCNrswIoO4/JlMqdL5l7HpofM17j0U6w=
Subject key identifier: 75:F0:DB:8E:3A:43:7C:B5:34:3F:4A:C6:0B:C0:5E:23:5C:04:B7:70
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 0194BD17704E75E765D330B568030D2630CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0ABA
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: b78Gp74Zzm5yHlUvBDNZSmTPRMLrc3ZKd0BP6qK6Xz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:70:4e:75:e7:65:d3:30:b5:68:03:0d:26:30:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=75f0db8e3a437cb5343f4ac60bc05e235c04b770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:50:ff:b1:0a:83:bb:a5:2e:60:53:f5:e6:
4e:7b:6c:2d:82:07:2c:83:e3:0f:83:ad:1f:00:ad:
0e:f3:0a:26:c7:5b:f3:39:62:be:14:60:f2:f5:a7:
79:16:01:fb:84:63:4b:df:35:64:a9:64:08:12:07:
1b:f5:e5:e1:ec:a5:e9:25:7d:80:c9:ee:e3:91:9c:
92:87:ab:77:f2:3c:08:17:07:cc:ea:aa:67:85:30:
d6:f7:91:8b:03:bf:a1:2b:0a:da:50:44:65:4d:48:
09:24:23:4e:1e:03:22:57:fc:45:b2:09:62:15:aa:
96:15:b3:20:d0:8f:cc:98:18:69:79:3b:cf:6d:8b:
19:f2:93:16:90:24:b4:51:9e:39:99:27:86:1e:75:
da:0c:b5:0f:90:f3:c5:93:cf:c2:7f:89:bd:e5:de:
3e:b0:a1:54:42:b8:44:6a:0b:85:9f:f0:bd:18:c3:
92:dc:60:46:c5:22:f0:24:4d:d5:21:e4:ec:4e:a6:
98:dd:fb:09:e3:16:fe:eb:e3:c2:8e:c5:e8:5e:54:
56:60:86:7b:00:ce:4a:57:e5:61:d2:d9:13:80:6d:
1c:9b:ce:b3:90:58:ba:ce:84:e6:52:0d:d3:b0:8b:
b0:8d:e8:10:7d:ad:c1:f9:e1:3c:76:1b:e2:23:4f:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:DB:8E:3A:43:7C:B5:34:3F:4A:C6:0B:C0:5E:23:5C:04:B7:70
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:29:0e:e9:d2:45:82:89:42:8e:9e:ff:a8:25:76:11:76:e4:
22:79:8b:f3:c2:26:5e:8d:32:0b:5e:c3:b2:34:e7:38:dd:7d:
94:74:91:dc:d4:f5:f4:d5:07:d4:90:9c:4f:e8:ea:26:a6:5c:
c1:0f:68:60:6e:8f:1b:d5:d2:d5:fe:3b:0b:6b:64:34:f6:08:
8b:f3:b3:0e:c9:b8:41:85:51:51:b5:48:66:cc:5a:64:ce:7f:
56:d4:e2:a6:e8:bb:9a:dd:23:20:9c:19:ca:87:6b:41:66:f1:
c6:e1:41:21:f6:b8:2c:e9:34:3e:86:6a:3b:fd:da:63:37:06:
91:5c:78:9d:f9:ad:1d:d2:da:33:1e:73:b7:b1:74:bb:1d:7b:
b0:71:38:69:51:4d:cd:57:fc:5c:c3:2a:60:8d:0a:41:81:75:
03:0f:38:9c:52:f7:35:65:56:03:b7:e4:49:fe:48:43:fe:c4:
6b:b9:74:85:38:c1:0a:16:6c:23:39:e7:1d:17:38:d7:2b:e3:
60:b1:7a:a0:e6:89:45:65:2e:28:e7:4e:8f:0b:f6:75:af:fe:
48:89:ab:27:35:58:7a:16:d5:ec:06:ae:c9:fe:10:51:35:fb:
12:7c:bf:2b:e5:03:c7:b7:96:88:4a:26:c2:cf:9e:f6:ce:12:
e8:b2:c5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:43:57 2025 by rpki-client