Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: tonnz4qQBjdFBSJhnc05zhhn8mREexPSJsoaXAeVI9I=
Subject key identifier: 59:52:16:32:D6:99:D5:25:99:55:3D:43:C2:74:E6:18:E0:1E:F1:71
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 0194BBCDEBEFDBEFAFA626974F58723DCBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: oaFZGeM1drK22R71ryQHOj+M15E2P7wnE3SLnFGKJdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:eb:ef:db:ef:af:a6:26:97:4f:58:72:3d:cb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=59521632d699d52599553d43c274e618e01ef171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:a2:c4:79:f7:7a:a8:02:68:e0:e2:37:5f:
a0:c4:34:a4:2d:8c:34:f9:ee:13:6c:97:c4:cb:28:
03:f5:64:df:94:f3:03:e3:e8:d9:b7:9e:de:e0:3d:
ff:90:d6:f5:af:6e:3f:17:37:8b:4d:28:9d:86:34:
41:0e:81:7f:be:b6:04:1b:1e:06:6b:86:b1:43:b6:
7c:19:f9:44:0d:5e:cc:cf:31:8a:9c:7c:b2:dc:5e:
7d:7c:d2:90:6d:26:ba:b1:f8:ef:eb:54:ca:6f:9c:
e9:2c:9e:46:23:67:cb:cd:1e:1f:3a:43:26:ce:2f:
67:a7:a8:b7:03:0f:c9:d7:84:08:24:33:35:81:d8:
19:75:80:8e:50:c8:06:78:3b:66:23:a3:f7:5e:59:
21:85:7b:5e:99:ce:0b:0e:45:ea:d5:56:68:4a:19:
f9:c7:22:4d:72:18:70:67:0d:b7:48:8a:05:45:48:
18:d5:a4:43:48:89:d7:a7:2c:8d:53:0c:5e:d7:af:
74:a8:86:ec:5f:89:5d:a5:ea:9e:af:9d:c4:16:36:
ec:36:48:48:46:11:5c:2b:b5:c8:5d:fb:e5:6e:b2:
ec:82:9f:4d:a7:4d:b5:4d:50:07:a5:ec:73:fb:47:
3a:63:bd:ad:d5:13:b2:f4:77:d2:f7:f4:e4:76:39:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:52:16:32:D6:99:D5:25:99:55:3D:43:C2:74:E6:18:E0:1E:F1:71
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:58:05:a7:a2:02:20:e0:28:15:29:87:b9:1a:ff:59:9f:df:
64:0f:5f:01:ce:d7:0f:a7:dd:85:f1:29:0f:a7:28:0a:f7:9e:
f2:02:bd:84:f4:71:f8:ac:26:26:2f:29:cc:97:9a:43:d2:62:
ae:e2:82:06:fe:9b:a9:72:61:1f:a0:10:ac:b3:2b:d3:e1:5f:
b2:21:4b:6a:5d:b3:38:e9:8f:fd:87:d9:14:18:15:e6:50:40:
a9:93:e5:73:04:88:d5:d1:74:cc:9d:ab:88:c5:ff:e8:26:5c:
a0:51:26:6b:a6:60:9e:b3:0a:0a:d7:f3:ee:54:fb:01:20:01:
72:55:f3:16:23:bc:0f:df:ac:09:72:e0:f0:75:c9:b0:67:2b:
54:a5:21:2c:9e:f2:c1:aa:e1:e4:8c:30:59:b8:3f:b1:8f:10:
38:48:af:64:45:6c:58:76:54:a4:37:b8:6f:6e:43:9d:e0:b7:
12:83:fe:fb:2e:9c:02:8c:47:0c:9e:e1:2a:e4:99:62:64:6a:
d7:a7:25:e3:23:cd:da:66:ac:06:af:0d:c9:5f:b4:cf:09:88:
e6:ec:0f:cc:41:c8:28:18:5a:46:cf:c7:4b:b1:29:1c:57:19:
3d:7b:2f:1b:d3:cf:67:6f:30:d2:4a:27:0c:e7:30:56:fd:d6:
f4:98:ac:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:12 2025 by rpki-client