Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: MMd57fTCq9XnofV5qTd2lwO3DbKssW2A5qpk/YGQY+g=
Subject key identifier: 65:2B:BF:62:F6:D2:5B:EB:35:33:0D:A7:CA:1A:12:24:7B:C5:33:79
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 0194BC04E859D4B330FC8A40D82C1DF534F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0939
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: eemVcXalrlsGc/tAQPu9imqGv2GognANhhyjlN39JU0=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e8:59:d4:b3:30:fc:8a:40:d8:2c:1d:f5:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=652bbf62f6d25beb35330da7ca1a12247bc53379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:c5:82:a0:7d:5e:c4:83:33:c3:e3:db:32:
b0:11:96:ec:b4:d8:94:df:ee:65:a6:5e:50:49:ed:
f8:bc:cf:d3:16:ac:ce:55:7b:26:f5:63:f7:d5:a6:
ce:cb:70:38:2f:95:f2:63:62:6d:27:0d:1d:b9:39:
b9:fd:45:ea:34:64:7f:87:4e:3b:ab:5b:61:79:77:
03:0e:b7:bd:6f:fa:54:ba:97:ad:22:2d:11:b2:75:
41:d0:f3:40:8f:0f:7b:79:6d:e7:22:8c:e4:28:fb:
f3:b7:89:a6:0a:de:f6:fa:80:b3:a9:0a:94:0d:a0:
b1:a9:5a:39:0a:78:cf:bd:ca:d8:3c:50:29:01:a5:
6a:aa:0c:a5:eb:45:82:04:7d:ad:c6:05:6e:a6:58:
1c:4f:39:57:71:f9:45:39:61:fd:cb:7a:c4:f5:9d:
4c:b7:8f:45:95:f6:47:80:23:78:dc:d9:5a:a1:2f:
eb:6f:6a:dd:42:a6:5c:3e:8b:c3:2b:1b:a2:c6:f5:
b4:07:0b:5b:ea:d7:76:51:62:a7:63:ba:cb:f3:86:
70:45:4d:02:48:c9:2e:23:71:5e:35:6b:de:46:7a:
3e:08:0e:8f:8d:50:46:96:ce:91:70:0a:18:a7:6c:
c8:d2:df:9f:04:05:c7:b6:86:9f:db:96:da:ad:ed:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2B:BF:62:F6:D2:5B:EB:35:33:0D:A7:CA:1A:12:24:7B:C5:33:79
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4a:f3:45:d2:78:4e:1c:32:06:4e:7a:e3:8f:a6:47:3f:b8:
17:d8:96:b0:c3:9e:57:ea:58:84:46:99:fb:7e:21:0c:03:fc:
fd:65:47:c5:dc:51:12:f5:64:d1:a8:28:3d:6a:a1:fe:85:c5:
74:c2:d7:9b:dc:2d:05:b2:86:a5:18:6a:30:4f:ba:81:54:1f:
b3:1b:19:1d:13:bd:3e:3c:42:2d:a7:bf:02:82:90:a4:12:b6:
6e:8f:57:26:a7:1f:81:fa:92:61:f3:87:8d:d1:52:66:2d:0e:
5f:dc:dd:90:48:6c:29:50:d5:74:2f:e6:d2:f0:65:34:30:21:
85:cb:c8:34:95:75:e1:d0:b6:01:21:91:cf:9b:ce:cb:7e:2b:
ee:bd:bc:ad:3e:68:9c:42:d4:bf:b1:19:9d:4f:ce:27:c1:73:
c8:05:cf:fb:ab:6f:3e:84:5c:8a:d0:46:9e:5e:ca:80:06:01:
46:af:e7:27:bd:53:21:53:b6:11:73:b5:06:27:ef:01:85:68:
c5:f0:bb:6f:60:63:3c:e6:79:6e:0c:eb:24:a0:c4:c4:d2:b1:
91:cb:9c:85:5e:a3:69:05:9d:fd:73:39:cc:01:7c:3b:60:15:
75:0d:3b:49:9a:92:5a:01:4a:0a:44:80:61:7b:9a:16:3e:d4:
bc:69:77:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:35 2025 by rpki-client