Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File: Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier: 4ajiunSfPk4UN9ZBguLwfTpcxmmiAowFF17+7UkoaJw=
Subject key identifier: 2C:09:D9:65:3F:EF:66:CF:9D:49:B8:77:81:DD:ED:D8:E6:85:96:E4
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer: /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial: 0194BCE0C398B5FB013B5791DD4DD119E2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: pA6YFrucGARJS4YhXSmkKvbjdD5LC/zNzaLMsaL8+98=)
2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c3:98:b5:fb:01:3b:57:91:dd:4d:d1:19:e2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=2c09d9653fef66cf9d49b87781ddedd8e68596e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:09:26:de:2e:95:bf:a1:6c:9a:4d:5e:87:
ad:46:e1:49:55:b1:0a:e4:08:c6:2d:06:c5:f4:6c:
6d:a1:99:8b:30:32:5f:77:b8:92:b0:c1:33:3d:61:
73:64:8a:06:0d:db:8c:a1:3b:f0:ea:f7:23:cd:bf:
df:cd:74:af:be:77:48:8d:8d:77:89:5b:2f:4d:95:
36:05:99:f6:ad:56:81:83:10:d6:37:f3:32:05:22:
fc:af:d2:e7:20:c0:50:23:e4:c9:37:4d:4d:8b:23:
22:d7:15:7b:12:a1:76:36:21:2e:68:04:1b:13:62:
7e:7e:01:f4:a7:dd:32:12:be:e9:be:3d:fc:e0:66:
a2:6b:25:74:b7:9f:e0:54:09:b9:4f:80:8a:6e:55:
94:fb:82:8f:ff:a4:e2:46:4d:d5:1b:67:b1:d0:a3:
45:c5:b7:d7:95:fe:16:b2:04:e0:ba:b9:de:c8:4a:
40:39:82:e3:5d:7a:5c:68:c7:18:a4:db:47:13:c4:
af:67:e2:52:67:04:3a:9b:f0:65:62:4e:cc:a3:67:
cc:67:2f:35:7f:ac:0e:e6:a1:24:64:5a:f1:46:ab:
6d:eb:18:4b:0f:29:d1:a8:62:fd:77:e2:db:94:52:
61:ae:32:bd:76:58:a4:5d:99:65:1f:85:f2:af:eb:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:D9:65:3F:EF:66:CF:9D:49:B8:77:81:DD:ED:D8:E6:85:96:E4
X509v3 Authority Key Identifier:
keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b3:82:dd:e2:62:09:fa:a4:ca:bc:71:58:80:f8:69:ca:1a:
94:48:ff:75:0c:1c:a6:18:24:2d:8f:f9:c6:52:88:b2:dd:43:
46:f3:9d:a4:f3:15:61:13:9c:09:66:f8:98:52:7a:ec:19:35:
3b:a1:76:1c:93:04:7d:8b:3d:9a:46:3a:e8:03:7e:b5:82:42:
78:eb:68:0c:77:c9:55:49:93:d2:ff:74:e0:51:07:57:19:50:
29:d2:3b:5b:1c:3e:c1:24:46:52:63:39:35:cc:47:0d:d3:cf:
64:5b:56:1e:04:b3:a7:59:5a:57:b8:64:a8:c9:3c:63:15:94:
90:94:a7:6e:eb:9c:f2:44:0c:c5:06:25:bf:1c:fc:28:ab:05:
39:01:e4:57:eb:46:d0:3e:5b:98:ea:ca:a0:bf:db:fa:c8:06:
59:1e:f9:5c:8e:72:d1:79:a2:91:00:9f:e7:d3:8b:ff:57:e7:
8d:0a:51:32:a6:3a:2f:e8:47:0d:82:57:36:13:9c:52:f5:07:
58:18:31:75:17:b7:bc:2c:c3:3b:54:54:47:5a:6f:48:9f:ab:
d4:0b:53:99:b5:84:d9:74:7c:c2:6e:06:28:02:c5:b7:64:c8:
49:1e:64:0f:83:ec:ad:ed:ea:3e:8d:34:99:a2:68:22:e7:fe:
53:55:97:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:00 2025 by rpki-client