Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: w/2CFTqP/Nsn7Fn5S524UZ4vesDv5QHyr2nwl+wzqtk=
Subject key identifier: A4:CC:FE:68:41:49:D0:21:65:42:86:EA:8C:12:DD:B4:8D:74:C0:8A
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 0194BBCDDF72D7418E15663596BE45CB4635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: CHDFiTsuBaySDnY5xbDCDwmACiZ8A5mEB458IB5xBSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:df:72:d7:41:8e:15:66:35:96:be:45:cb:46:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=a4ccfe684149d021654286ea8c12ddb48d74c08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:67:6b:89:d8:a5:1e:6e:39:74:b0:c8:a4:
b8:32:94:26:8e:fc:71:3f:9b:5f:9a:47:76:29:38:
2f:eb:5a:ba:09:67:81:dd:be:7f:7d:d3:5b:a2:73:
7f:3d:75:29:1e:af:19:8d:f8:8d:52:f5:94:79:35:
c8:db:3d:f3:3f:96:75:fc:cb:30:c5:39:f1:2f:2a:
87:80:ed:7b:df:e0:7d:96:22:b9:90:7b:36:9c:97:
bc:3d:1d:8b:00:01:49:5d:73:09:a8:af:e3:c6:b0:
20:59:75:6b:aa:04:60:95:ac:b1:e4:ad:36:7b:74:
6f:01:c5:4a:af:27:62:13:80:88:8e:39:13:0e:f7:
5b:9c:1d:ce:cc:51:8b:c7:35:fb:f8:f3:d4:ad:ca:
01:e0:9a:44:4b:d5:36:67:9f:18:bc:98:a7:53:d9:
52:19:38:9a:71:01:5b:49:a3:60:30:bb:df:6d:e3:
25:89:17:7d:d1:fd:70:06:70:c3:c7:9b:35:ef:ff:
8e:21:1a:54:64:18:cd:e4:72:89:d1:07:b3:7a:40:
7a:2d:02:01:e2:41:02:4a:16:3a:ec:79:ac:fb:fb:
c3:30:4c:e5:25:31:d6:d7:9d:fd:c3:49:6f:bb:4f:
b1:0d:26:45:11:ae:ee:f4:a8:fc:8c:ea:24:a4:ae:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CC:FE:68:41:49:D0:21:65:42:86:EA:8C:12:DD:B4:8D:74:C0:8A
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0d:95:22:df:fe:67:e0:ae:a0:b2:e8:b0:23:b3:5b:ae:96:
36:65:48:71:79:31:90:02:8a:01:87:e6:aa:63:2c:34:f1:64:
fb:80:5f:6e:80:18:32:60:24:c8:a3:54:d8:4e:86:dc:f9:e4:
92:0f:a0:af:4c:0f:1a:bc:3c:66:db:3b:fd:04:24:c5:94:2f:
97:e4:97:75:4b:00:0b:76:ee:bb:89:9a:dc:18:16:68:4b:8b:
11:39:29:23:c6:55:7a:83:a0:3f:10:05:20:52:9a:73:95:2c:
79:7b:9d:95:da:d5:c7:67:36:ac:98:a4:37:96:eb:4e:67:ed:
40:46:cc:24:aa:ea:d9:1f:f9:f4:32:4d:34:95:23:07:a4:74:
5e:8e:bb:e0:4a:db:23:ee:77:75:7e:27:7f:da:c5:a9:bc:47:
89:40:94:1c:bb:83:ba:a7:10:ab:87:a0:8f:86:eb:15:05:85:
64:7f:8c:95:71:37:a5:7b:05:e4:4f:cf:ae:97:ab:69:ae:ff:
33:8a:8c:fa:44:eb:a4:92:85:6f:86:5a:4d:6e:20:58:99:a3:
be:ff:98:aa:8a:b9:ef:14:85:17:65:83:25:37:9b:40:fc:38:
04:d7:05:75:76:47:85:01:d2:62:12:be:09:e1:c1:83:22:1e:
46:0e:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:47 2025 by rpki-client