Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: g7s6RXUR2FbtyFTB2s55agWnaxpXsUnZsKGB/0HAoRY=
Subject key identifier: 1F:08:47:42:A5:2D:6F:2B:E5:C7:A5:9D:CA:A3:D2:DE:6C:1D:31:51
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 0194BD178ABB49472526B1A94A8DCDA29276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 0D6C
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: IaXnlnHxVgoEX1UTLs1DE8GtJn0.roa (hash: vQAYnVro3YqKas8+EITAndDR2jmhTfit27limCUGo58=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: liqqhssURmnzrkzda1dK7gE7ZHuMTY7YGssiypwV55U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8a:bb:49:47:25:26:b1:a9:4a:8d:cd:a2:92:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=1f084742a52d6f2be5c7a59dcaa3d2de6c1d3151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:cf:f5:70:7b:02:08:69:72:b6:9a:90:77:
5a:ff:c4:c3:51:df:a2:fb:6a:8e:46:db:72:1d:16:
20:5f:aa:9f:06:fe:7a:06:fc:ef:6e:32:b3:0f:fa:
d1:30:6a:6d:8c:06:c9:df:7d:96:9e:6a:df:e7:24:
08:34:ae:f7:60:a4:b0:c6:12:02:d8:44:a9:a2:db:
d0:48:20:28:a9:a9:0c:2e:16:8f:5e:96:ec:68:83:
96:fe:2c:95:ca:0e:83:24:b4:db:fc:30:89:ef:62:
74:ee:ac:52:ad:10:20:c2:40:d8:f7:48:bd:81:47:
dd:ea:c9:76:db:cd:b8:44:9c:a2:a9:d7:45:84:75:
c4:be:4b:10:c3:c3:51:83:a5:7d:ca:e2:91:e7:2d:
2d:e4:3e:c3:ee:83:06:84:66:49:5e:67:5d:da:ae:
6f:7a:4c:db:9e:93:22:d3:47:bd:f1:31:24:85:17:
cb:aa:51:95:6e:50:7f:00:f5:71:1a:ed:4c:84:27:
f9:99:b9:44:9b:d0:7b:3e:3f:ae:6d:a5:c8:3b:3a:
72:cb:6e:7e:c2:43:64:0e:dc:cc:e1:54:b9:95:40:
5d:42:a0:b0:26:47:ed:5f:75:55:46:df:30:1c:8c:
25:31:fe:62:6e:f0:ff:34:0a:82:96:eb:60:00:2d:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:08:47:42:A5:2D:6F:2B:E5:C7:A5:9D:CA:A3:D2:DE:6C:1D:31:51
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3e:b5:3a:f7:d3:c1:68:79:d4:f4:ab:9b:a9:6d:97:18:f9:
aa:7b:a2:5c:80:88:a4:33:65:32:1f:11:ca:e1:36:77:7e:72:
01:5e:16:01:46:70:f9:36:ba:06:e8:ef:5c:78:bb:23:60:aa:
19:f0:45:30:06:82:06:3d:0f:70:b8:1c:01:5a:f1:88:e6:5f:
fe:cf:60:0f:dc:e7:6a:6f:c7:27:e5:63:94:41:c3:1c:44:38:
7b:f1:8d:30:30:19:4c:15:cb:a6:f2:9c:da:00:b7:07:72:fd:
c8:d5:a4:69:cc:ed:59:3b:ab:6d:1b:27:e4:a4:dd:0b:db:00:
6b:78:97:10:f4:15:4e:05:b5:75:a9:fe:98:9a:6c:d7:e0:f9:
37:6b:5e:0a:39:b8:3d:c0:53:6f:60:b6:53:c7:de:13:10:37:
03:bb:41:a8:a2:99:97:f8:16:c9:d8:90:df:2e:36:cb:2c:7b:
b8:e6:ea:83:55:6b:0a:f6:e0:98:30:73:d0:08:f2:17:5c:ad:
63:60:75:9b:1f:f4:c0:d5:f2:54:b0:3e:72:17:c8:f7:70:51:
b9:6f:21:8a:99:3d:a8:77:40:79:9a:10:67:78:76:6a:dc:ee:
c1:da:ce:56:1d:8f:67:b8:ab:4d:ba:c5:7b:f2:c6:30:ca:f2:
c1:cd:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:54 2025 by rpki-client