Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: RDGxk4KAKFPQn9k7Nv/Xw/yxnSTsBOO3u/SaiSlTQJU=
Subject key identifier: 4F:19:3C:BA:A0:98:5D:AC:F8:DE:8B:AB:0F:F8:2F:17:53:10:B2:BF
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 0194BC72FEE6516DCCDAF2EF3CEE16115073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 0FBE
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: Fpusx3nImBA0IUxzGHSKyPdUse8.roa (hash: ifn1BmchQ12bsVckZdjUUeYe+hJNMZFvCwq2esrjCZk=)
2: LeDxRPF8P9RMofc58MUPZ2-f5ns.roa (hash: dauJrCeMxMYMS/fiSfnxubxShmwm8ddNcbzhDtx6PjM=)
3: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: sLUHo58wmQ6m4obKddHhy+kG5nFvIJHRVcrsywEk4zo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:e6:51:6d:cc:da:f2:ef:3c:ee:16:11:50:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=4f193cbaa0985dacf8de8bab0ff82f175310b2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:12:a9:9d:78:4b:ea:d3:35:6b:17:b1:d5:
8c:69:22:9a:a6:38:e6:68:c1:6d:51:28:3c:7a:b8:
50:58:26:5e:ee:f6:1f:a1:0b:1a:2d:1b:28:69:90:
b4:af:c3:29:3e:eb:a6:21:7a:88:5a:a0:c6:39:bd:
db:2f:2b:10:2a:8d:39:2c:1c:b3:4a:56:b0:97:82:
0b:74:62:cb:f4:8f:69:2c:bf:da:7a:e7:74:0b:db:
f7:5f:dc:77:57:d0:30:30:79:85:4c:23:ef:69:8f:
33:ab:fe:1d:ed:57:3f:20:ad:c1:78:a3:83:7a:02:
80:4b:f5:89:34:a5:e1:48:c7:1b:c8:30:d8:fa:dc:
ac:9f:ee:77:93:59:fe:9e:de:5d:c6:95:78:0a:9e:
0e:d2:a0:d9:01:cb:fb:26:c6:1f:a9:ff:f1:b6:38:
1c:26:28:b3:28:ca:30:90:a2:83:72:94:36:33:81:
ae:bd:c9:c6:73:d0:90:36:7e:0b:5e:6e:ff:9c:56:
1f:3c:84:8f:f5:dc:ef:f9:ac:f1:e9:ca:3f:11:fd:
1a:46:7b:eb:dd:bc:32:fc:27:65:8d:98:ae:ca:50:
e8:9f:71:56:c1:54:2d:39:24:30:4c:34:96:45:0d:
ef:90:54:7a:35:aa:84:99:55:fe:96:f7:3f:a5:83:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:19:3C:BA:A0:98:5D:AC:F8:DE:8B:AB:0F:F8:2F:17:53:10:B2:BF
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:10:f1:df:a8:d9:ba:f1:80:72:86:1d:f7:d4:40:35:33:85:
d3:7c:0a:58:08:4b:a9:28:a6:d0:31:8f:8f:b3:82:b7:e0:13:
4c:ce:78:72:00:93:7b:74:a0:ab:3c:9a:14:9d:07:20:92:7c:
b5:e3:58:b4:84:b3:fa:ac:11:c6:a0:6c:01:57:31:db:f6:a5:
08:f7:f6:bd:00:9b:78:50:a5:78:3c:82:12:4c:93:68:46:0f:
36:01:bb:e6:1e:f0:ef:28:ee:52:cd:44:95:1d:d5:ca:f8:ba:
c2:78:88:30:64:c0:56:08:fd:2f:05:ae:93:1d:2d:b3:bb:03:
0e:99:a2:44:98:73:0e:88:48:04:05:c9:32:d0:fe:58:13:27:
bc:c4:7e:9c:bc:57:c1:fc:f8:6f:72:4a:bb:72:e8:1d:bd:66:
12:fd:d8:c9:37:2e:a3:5b:bd:ae:6d:12:98:d7:53:0a:b6:2f:
11:54:28:38:c1:f9:01:a6:3a:e0:74:d6:6f:56:76:56:55:90:
f9:bb:db:2f:2e:f0:1c:6f:30:68:7c:ea:68:09:9a:7a:15:04:
ae:88:ca:c0:7b:b5:ba:22:70:f8:ee:e6:de:cd:74:82:ae:3f:
53:6e:0b:b4:07:3a:15:c6:e2:e3:fa:03:4c:a5:72:ef:3a:72:
0d:5f:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:19 2025 by rpki-client