Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
File: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft (raw, json)
Hash identifier: y7kq3QXshWbOqk4PwVUZ8Bv7v4BtfI1tferE+5pGpWA=
Subject key identifier: 38:2A:CD:2A:54:51:91:B3:9F:B7:CD:4A:38:71:41:F6:A7:40:D1:92
Authority key identifier: CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
Certificate issuer: /CN=cf40e25606651a075484c709fa766d80dad52d9c
Certificate serial: 0194BC04C0038F9A7ADDCB03EEF6047D64A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
Manifest number: 0236
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: hGH_yKtqtaewmmke-m1I7cISSH0.roa (hash: T3QXU6gMQq0RcA3qUlvm1jUKiUtDYtXE4Lz78+TSbU8=)
2: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl (hash: APPlQiBlbBinrKodsUAFCTBWT3UsDtMTg5Jkud5gxpE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c0:03:8f:9a:7a:dd:cb:03:ee:f6:04:7d:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40e25606651a075484c709fa766d80dad52d9c
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=382acd2a545191b39fb7cd4a387141f6a740d192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:22:2e:bd:0c:f1:7b:1d:b3:0c:4f:41:84:
57:91:7c:89:bc:16:2b:8c:db:6f:8a:a1:dd:10:cd:
a6:37:8b:df:0a:09:a1:63:40:ec:8c:44:c9:20:a0:
9b:7b:80:fe:0b:65:5e:b2:d1:32:7c:04:16:2a:9f:
89:a8:3b:28:c8:d4:e6:59:ae:a5:ee:a8:3b:23:09:
6e:7d:ca:8a:69:19:c2:46:34:3c:8c:70:06:be:cf:
01:a9:e3:51:b8:95:f3:da:eb:65:a2:7a:e1:f8:0f:
01:ff:fa:93:7a:3d:7d:e5:af:ac:57:22:9e:72:6b:
d6:bf:89:76:3d:17:af:36:00:07:28:1d:7a:d6:9c:
8f:56:b1:ab:42:41:fa:ae:11:e7:7d:6c:f9:d4:ae:
07:d0:a7:1e:cb:7a:6f:1d:47:65:bd:5d:85:5f:56:
91:61:60:b2:f8:c6:b5:b3:ad:6f:7e:92:78:86:18:
23:82:c6:2d:00:da:61:3c:d0:aa:31:ba:0a:49:40:
ae:7f:a2:5d:78:cb:e0:68:27:6a:4d:2e:a4:62:f1:
83:87:1c:8a:c0:1a:2f:0e:1b:1b:52:db:b8:31:74:
81:01:a0:b7:86:fa:41:52:8a:49:3e:b1:af:97:32:
f5:e0:7c:00:dc:8c:04:29:b1:5a:29:06:f8:e3:94:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:CD:2A:54:51:91:B3:9F:B7:CD:4A:38:71:41:F6:A7:40:D1:92
X509v3 Authority Key Identifier:
keyid:CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e7:37:cb:bb:2d:52:7d:4b:6d:76:b9:85:98:48:cd:c0:23:
d2:83:7b:4f:e1:30:a4:59:f5:39:1c:5c:cf:a1:62:07:59:da:
11:1f:cc:94:41:45:41:dc:e0:e4:5c:bf:ba:8a:be:a1:52:06:
fb:65:d8:10:20:3f:96:9e:3d:c4:d4:1c:61:97:30:59:72:3a:
82:8d:f6:cd:a7:8a:da:e1:d0:4a:b7:98:45:bc:4b:1e:4c:b6:
e8:89:fd:0a:ba:e8:42:c6:05:b2:34:a2:23:2c:dc:4d:c2:6e:
ac:7f:e7:2e:8b:4e:9c:fe:30:85:bd:7c:98:ac:a1:c3:e9:c7:
15:b9:60:c3:08:8f:a3:ac:dd:0c:bd:02:c2:ed:f9:9d:ad:1a:
9e:95:60:ac:ff:ed:b2:29:68:bc:5b:8b:04:d7:a7:3a:6c:65:
ad:29:4a:87:59:1c:aa:c9:af:9e:75:c2:5b:6b:ab:c3:a4:5f:
71:30:e0:79:e8:53:8b:a1:39:f7:47:5a:17:54:03:6d:1f:4c:
b6:67:3f:ef:77:17:47:31:32:d5:d1:73:33:ce:76:f0:e7:64:
eb:27:04:1a:27:22:aa:20:67:02:f7:aa:a9:ca:48:dd:5f:f3:
ad:ed:71:f7:ea:ab:50:4d:30:76:9c:a4:41:3e:14:89:aa:ee:
92:8d:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:01 2025 by rpki-client