Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: JnQ9I0FGy1Mmblf+yuZtBL/c7RGAZpWXm7ffB1ECtns=
Subject key identifier: 09:5E:3F:EC:CB:2E:38:B8:6F:83:C2:AE:9D:59:3D:43:AA:B8:47:4E
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 0194BCA9AF96A7EE29E4CD5E1850C6A21193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: TVTLmXoMtHdcNYXjZf1F7ymqZwOG6WeHmhZFjL2gIpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:af:96:a7:ee:29:e4:cd:5e:18:50:c6:a2:11:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=095e3feccb2e38b86f83c2ae9d593d43aab8474e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:24:4f:ee:1f:66:b5:52:a1:09:3b:4f:4e:
a1:30:3b:ad:4b:96:f7:6a:23:f6:d9:61:d0:bd:4b:
57:a1:2e:02:9d:e9:38:cd:4b:40:47:0d:af:29:c9:
5f:0a:7f:bf:d6:27:38:24:a4:52:22:d8:5b:85:65:
72:4b:28:5d:9d:ff:56:8c:f4:44:07:8c:ce:44:d6:
3e:16:d0:d9:04:28:3a:a7:ab:62:a7:e0:4b:d5:c7:
55:ab:71:ec:f2:f1:02:82:6b:e4:a4:2d:35:7b:a5:
e0:07:50:3b:97:0a:46:20:90:18:da:90:1f:8b:38:
78:96:cd:76:b9:b0:7d:2e:dc:12:08:b1:c6:86:d0:
42:ab:51:30:71:15:e6:b4:35:c9:fe:22:75:40:fa:
fa:10:f0:47:5b:96:d2:4d:8e:62:fb:aa:ad:1d:94:
69:a2:83:f2:ea:dc:fe:9f:5f:49:d7:2e:a9:73:2b:
a1:6e:8a:83:15:d4:1c:88:34:d2:52:af:a3:a1:50:
87:dc:2f:eb:dd:96:d9:61:f3:ee:ab:15:29:bd:94:
be:43:d6:c6:4c:9b:fc:99:95:1b:55:46:71:83:a0:
bc:cd:8a:9a:ee:e0:ab:ba:70:72:b6:0e:a0:3a:fe:
77:29:1d:42:2e:1a:8c:f9:22:69:51:fb:84:02:ce:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5E:3F:EC:CB:2E:38:B8:6F:83:C2:AE:9D:59:3D:43:AA:B8:47:4E
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ff:d7:27:33:27:d7:26:e4:b0:0d:39:37:f1:23:7b:6b:04:
ac:3b:34:f4:64:ae:cb:a4:2e:46:bc:25:0c:e2:2f:0f:ea:26:
93:6d:59:20:91:0f:80:89:fa:e1:32:bd:64:e7:66:63:bd:00:
6a:6c:e5:20:80:84:80:2c:94:9e:04:0b:50:9f:a2:c7:a7:67:
1f:c6:a4:96:b7:f8:da:6e:05:dc:4a:07:b8:ad:4f:0d:93:b0:
6f:75:d4:7b:d8:2d:4e:a7:0c:87:f3:79:4f:b6:66:d6:45:2d:
d7:60:6b:d3:aa:95:b3:ce:88:32:1e:7b:d6:15:c2:a9:2c:d4:
3b:b9:55:12:8c:dd:81:56:01:cb:e3:c1:f9:23:37:46:6c:ce:
bd:98:66:ed:d5:25:e1:00:ec:f7:af:78:fb:ca:bd:f9:0e:6a:
46:05:80:67:d9:6c:2d:54:71:4e:cb:c8:40:be:16:76:c6:68:
b6:03:b0:e2:31:c8:83:43:c6:3c:19:1a:81:ef:69:92:06:ce:
e2:17:c0:57:40:bd:61:ff:db:5f:5b:e3:1f:f5:d1:14:1d:24:
2c:cc:09:6d:fc:62:3e:d7:61:db:ff:91:ad:87:b4:ca:1d:a6:
9f:d0:48:73:95:57:a0:5f:55:75:c0:5f:d1:71:89:3c:c9:7a:
8b:de:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:25 2025 by rpki-client