Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: c1ETRWiGRXC9ujq/wS4tD6F/zWLZy1UZ31z17pLu8a4=
Subject key identifier: E2:52:1C:42:93:A1:FE:7F:5D:BB:5A:68:70:F8:3D:FA:E9:4F:9D:31
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 0194BD1785D8D026E550D1C62EB60C67EFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 073E
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: wf8uKQ0hdj4i8geKBv9hJ3QzsW2KiLlH1gA3Bseesmw=)
2: hJbdYVF-sB2ARWcr3wLM-Bolskc.roa (hash: p8HLFjhLNYXJBjvp0Ydq3UNKZlQk3vcyaOZBKxCq5jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:85:d8:d0:26:e5:50:d1:c6:2e:b6:0c:67:ef:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=e2521c4293a1fe7f5dbb5a6870f83dfae94f9d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:b2:aa:29:0b:c4:4f:7c:2a:8b:b4:44:d5:
94:d0:82:f7:d1:7b:79:bf:27:fb:d7:26:4d:12:27:
4e:f4:ad:fb:bc:d5:13:f8:f3:54:2f:9b:ef:c5:7b:
f2:ac:e5:db:23:da:57:60:f2:f9:d2:3b:5e:16:21:
ed:2b:48:06:ee:58:75:a3:0c:c2:0f:90:53:f4:00:
54:0d:b2:16:f8:b1:6d:5f:7b:58:1d:5a:a3:39:90:
43:25:c3:de:cc:0b:ff:7e:b0:04:e4:62:39:42:4c:
ca:75:d5:97:5d:59:b0:57:e0:97:ad:34:76:5f:ca:
ee:fc:55:96:73:25:5e:40:51:33:3f:ad:79:2a:43:
33:7c:bb:cd:96:8b:26:4b:df:33:b4:e0:b7:d1:7f:
45:17:e6:5f:a3:bc:08:30:8e:49:6a:fb:a1:50:8d:
5a:63:d1:e4:32:76:c6:7d:24:e9:a0:c9:0e:c9:1d:
69:f0:90:5a:5b:8b:b7:f9:bb:c5:5c:ba:4d:63:0f:
0a:d4:2e:af:3f:37:df:73:90:81:69:91:6b:72:1f:
6f:48:4e:66:6b:fc:01:3e:3a:33:d5:e6:68:fc:0c:
16:62:87:8c:63:5d:2f:41:7a:69:20:79:f4:c8:ed:
6f:87:95:7f:95:be:d8:4f:4b:c3:84:77:01:8e:39:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:1C:42:93:A1:FE:7F:5D:BB:5A:68:70:F8:3D:FA:E9:4F:9D:31
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:24:31:f5:01:3b:75:4d:03:b2:1a:be:23:2e:1a:f1:f3:ef:
57:c1:45:f4:47:5a:2e:a9:89:25:ca:71:4f:cd:78:dd:62:08:
54:17:d2:99:31:23:29:24:0a:c4:fd:59:54:5d:20:a0:c3:a6:
c5:4c:be:a9:77:82:3d:bd:7f:ae:ca:c4:b6:f6:d2:18:16:a1:
81:85:97:af:6e:e3:b9:14:f6:25:06:9d:fa:85:0a:4e:7b:b2:
68:e7:6e:e7:92:44:81:a7:f5:bc:f8:77:c2:53:72:97:fb:1c:
0c:1d:91:48:24:6c:dd:c2:40:6d:22:93:6b:aa:9a:3b:98:0a:
d1:bc:6f:6a:d9:64:1e:78:f8:de:fc:03:63:3c:84:84:ef:67:
1c:8d:a5:34:ab:9f:81:26:ea:5f:6a:0b:a2:ce:25:c2:89:23:
1a:73:3f:d9:4f:35:aa:23:18:e6:3f:6b:62:68:e7:52:9c:a4:
1f:46:9f:35:c1:e8:f5:ff:02:9d:97:4c:81:85:1b:16:0f:38:
a1:44:f8:f2:f8:9e:79:30:b1:07:47:2c:b8:85:8e:eb:d9:66:
82:59:7f:59:17:f8:08:94:00:0c:36:c5:f0:e2:a0:7d:ea:a2:
dd:af:5b:4a:1f:80:51:27:82:dc:46:ea:45:ef:06:80:9b:8d:
f8:3d:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:13 2025 by rpki-client