Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier: IYXOe0KfhEuI2Qap+0btBlXG6CdBLctOX2alSRun3KI=
Subject key identifier: 91:98:5C:70:3D:DC:C5:84:9A:92:83:58:05:6F:78:3A:79:31:DD:DD
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial: 0194BCE07F1C855363C68793B5F088985BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: IsXoTUNK2WOazntuQJDl16NAOgG9i9aq2XEyklB09vI=)
2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7f:1c:85:53:63:c6:87:93:b5:f0:88:98:5b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=91985c703ddcc5849a928358056f783a7931dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:2f:2e:bf:fb:56:d3:d8:6d:55:ca:ae:fa:
96:bd:61:13:3e:b3:8b:6a:2a:67:ac:4b:72:20:0e:
55:5d:26:be:3f:06:65:68:3a:d8:bf:93:99:0e:b2:
5d:54:30:69:36:21:64:1f:e5:00:29:cc:8e:44:30:
4a:b3:01:b3:09:cb:7e:c2:65:1c:0b:97:30:b6:cb:
91:42:2a:3c:2e:e6:37:f4:5e:b6:e4:e9:8a:dd:2a:
83:5e:74:7f:3c:29:ca:cc:e6:eb:30:94:07:4e:99:
90:75:4e:ef:a1:6c:a5:ca:51:33:14:ac:a0:ba:ff:
51:05:1e:aa:cb:0d:15:ab:a3:c2:2e:8d:7d:6d:df:
5a:64:1f:4d:a8:20:f6:c3:cf:7e:42:27:3d:2f:6a:
34:97:59:5b:56:54:3b:e3:18:27:2e:85:1f:30:dc:
54:59:e7:4f:bf:38:dc:41:d7:aa:25:5e:79:2f:8d:
95:1a:2d:0d:c5:60:4a:a1:6b:18:3a:05:80:6a:a5:
4d:9b:d9:4a:2d:da:7b:65:15:c0:e3:dc:78:a1:75:
c9:fa:c0:aa:53:07:75:cf:97:3a:f3:3b:e1:62:06:
85:00:64:9b:de:85:7a:b6:0b:21:ae:e1:67:8a:51:
e6:95:e3:90:79:e2:2f:ba:02:71:86:e3:fd:85:ac:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:5C:70:3D:DC:C5:84:9A:92:83:58:05:6F:78:3A:79:31:DD:DD
X509v3 Authority Key Identifier:
keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dc:39:b2:bd:39:93:f1:57:41:16:77:ec:14:8b:c8:6f:d0:
45:fb:c3:a5:49:ec:f4:0a:1d:f3:2d:c4:80:9b:68:f9:f8:76:
ad:67:4f:a0:4d:60:00:7e:dd:3e:01:45:03:d0:b6:8e:df:e5:
33:6f:c2:f7:5c:60:fd:5a:4e:72:5d:af:02:dd:db:e9:88:3e:
3a:c6:5f:11:e8:6d:6f:34:79:a8:9a:ba:e8:94:cb:be:d3:81:
2c:fe:71:4f:77:3f:8c:89:5f:e5:9d:d8:23:6d:6c:f7:0b:4d:
81:30:11:ef:e4:19:5a:20:d4:7b:0a:3c:76:82:1f:ab:ea:bb:
79:b6:20:69:d4:d7:7a:66:b8:0e:15:3b:67:9a:49:35:b4:cb:
f9:f7:6c:e0:a6:d5:be:75:d3:c7:98:5d:3d:de:01:45:44:58:
82:75:14:f1:70:e5:d2:e5:21:a7:8a:86:17:ca:53:e6:40:7b:
ed:88:aa:0d:03:61:99:3a:68:5a:92:8f:76:aa:fa:58:75:e4:
28:06:06:94:78:88:ff:60:46:f6:34:98:90:88:7d:bc:a2:d5:
c7:90:c4:41:52:cf:6a:f9:c8:b2:03:59:4c:29:16:7b:d7:01:
3b:a8:bc:3d:43:44:ec:97:cc:35:7d:a9:b3:c8:98:4e:ac:8e:
6c:b8:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:09:07 2025 by rpki-client