Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
File: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json)
Hash identifier: bb0IAYFLQYKMhruD2ZY5b8zkPc0rp3zoRul892VyyZ8=
Subject key identifier: 2C:D5:32:DB:EB:DC:2D:D4:8A:7A:D9:88:3F:F0:BE:1D:17:2F:F9:E1
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Certificate issuer: /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial: 0194BBCE0B858C34E7463EA85A9C4E379523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
Manifest number: 0F7B
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: utXPchNiQquxEvpRje3DNPziZ8bqBYLBrm+4A4FP2r8=)
2: EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa (hash: x2Dmi+4smxCxvQZjFz/Vf1NND+S31iKqxyrBOvRmF00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0b:85:8c:34:e7:46:3e:a8:5a:9c:4e:37:95:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=2cd532dbebdc2dd48a7ad9883ff0be1d172ff9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:cd:de:57:24:2f:e2:d0:80:ac:b8:67:4c:
aa:af:34:22:ff:99:d8:b0:1d:f1:5f:74:43:35:de:
2a:c2:0a:b0:a4:7c:04:bc:53:08:9f:b1:91:a9:a5:
20:7b:73:cc:cd:3f:27:1a:db:5a:6c:8b:f9:10:51:
56:4b:71:49:9d:61:c8:46:8f:97:9b:4e:40:6d:f5:
6f:06:d5:ed:87:29:7d:50:7a:0e:8b:36:03:f1:7a:
1d:c5:38:51:c3:ee:08:48:e4:08:7a:13:dc:29:54:
56:bc:b3:55:7c:ca:a1:31:00:9b:13:13:10:09:b5:
03:65:11:db:ea:7c:08:28:23:fb:fd:95:73:38:30:
79:56:e0:67:e1:1a:2b:05:61:fd:91:d2:27:85:3c:
48:bd:99:24:f3:64:65:35:d9:bd:1d:92:56:65:ac:
9e:98:27:11:9c:43:1f:de:50:80:99:eb:6f:ab:41:
28:a3:65:22:bb:d3:94:b9:55:35:eb:1b:4c:45:45:
a3:16:b2:b0:9f:99:da:2d:ec:24:5f:56:81:8a:f8:
76:b5:81:b2:f0:ae:c2:bb:ad:0e:1c:68:de:4f:9a:
fd:67:6c:d1:79:c1:40:af:0f:8f:95:ec:f7:b9:56:
ef:0d:c1:b1:bb:2c:84:19:3b:66:00:df:2f:1a:33:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D5:32:DB:EB:DC:2D:D4:8A:7A:D9:88:3F:F0:BE:1D:17:2F:F9:E1
X509v3 Authority Key Identifier:
keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:b4:c3:d2:2b:92:59:e6:8c:47:07:3e:c3:e2:b6:d6:26:
40:d4:5f:f6:b6:52:fa:2a:35:ac:d6:f5:66:72:9a:1d:6e:7f:
7b:a8:cf:c0:3c:2f:47:93:19:04:64:aa:76:de:5b:88:d2:ce:
59:4c:f5:dc:58:ca:5c:6d:62:24:a8:c3:bf:e3:9d:ac:33:f7:
8b:32:67:ff:32:ee:46:09:79:30:2f:29:de:bd:f2:24:7b:9d:
c5:9b:8f:9b:bc:5b:d1:7e:86:ff:d2:01:ae:46:3b:e3:03:c8:
ff:98:bc:49:0b:0d:6f:75:14:49:53:bf:b2:6c:6d:c4:db:a8:
ff:8f:8a:52:04:0a:ec:42:ae:ab:f1:72:bf:1a:13:08:59:6d:
3e:0f:5b:da:a1:24:b4:0e:24:29:e1:23:c2:d3:d9:c0:10:2e:
95:ab:89:b8:1c:15:ef:4f:9f:bd:9e:b4:b6:3c:14:13:d6:43:
2f:54:78:46:89:2f:19:34:9c:8b:c9:63:2a:b1:2f:74:bb:c0:
d4:b9:5b:27:5f:2f:fd:16:20:35:91:bc:df:4b:a1:7d:6b:da:
d9:2b:a4:1e:77:ff:8c:c4:a5:b8:c3:e6:77:7c:06:a2:bb:58:
57:71:96:5d:53:d8:bc:70:71:48:0f:ee:54:ab:4b:c0:ea:ae:
1b:ad:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:36 2025 by rpki-client