Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: l4Jg9dCFf6RvV5QD/KLYuW0GUosClVKRgMjJ4FPTNmY=
Subject key identifier: 0E:17:B8:63:FE:C0:15:47:AD:26:76:7B:A9:91:FD:A7:05:AC:98:AE
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 0194BD1756953A2158F415F7FB48EC3F423F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=)
2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: a/pt2Sfa2r74pjukAjaFHDXpyqApg0TkfifoEjqZ0Q0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:56:95:3a:21:58:f4:15:f7:fb:48:ec:3f:42:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=0e17b863fec01547ad26767ba991fda705ac98ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6f:12:19:2b:88:62:20:17:bf:1f:67:52:76:
33:c5:13:0f:fb:52:4f:37:5c:24:68:92:d5:c9:85:
42:15:1e:19:1e:3a:b0:c7:88:be:2c:2a:85:94:25:
e7:7a:81:28:e5:97:21:31:63:84:c4:da:bc:1a:2b:
0f:36:d5:fb:0e:b3:bd:f6:7e:da:5b:df:19:27:68:
02:93:82:93:7d:53:69:ed:01:2e:a3:e1:36:20:d8:
bb:e4:58:17:0a:e8:c9:40:05:f6:28:f7:3b:74:52:
c8:c0:19:e8:94:c1:69:2d:e0:a3:ef:9d:62:19:57:
b5:0f:46:31:c6:6d:89:e9:dd:a0:45:63:68:fc:55:
9a:d6:db:a7:f3:bf:26:6f:73:fb:33:40:13:a8:a5:
41:fb:ca:74:18:dc:ce:fe:a1:01:43:18:51:2e:b0:
18:e7:69:1f:51:d9:03:44:bb:44:fc:39:70:b6:94:
b5:af:0d:c5:b1:c6:71:28:0e:be:86:c6:94:42:5e:
23:3a:d8:d5:19:ff:e0:5b:ab:1a:5a:fa:bd:1e:f9:
ce:c5:9a:e4:f1:a5:f5:54:76:9b:28:33:e5:df:e5:
30:27:cf:bd:2b:44:5f:42:58:ec:37:98:08:bc:8e:
2e:6a:f3:c6:b1:44:29:b3:68:fc:c6:6e:b9:db:f5:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:17:B8:63:FE:C0:15:47:AD:26:76:7B:A9:91:FD:A7:05:AC:98:AE
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8a:31:ff:9c:ab:61:94:42:f9:26:59:d5:b9:dc:00:ac:f9:
8c:9f:2e:10:ff:b0:0f:30:27:ca:78:c3:d1:bb:34:90:e7:55:
c8:bd:dd:2f:a7:31:c6:e6:0d:38:f9:96:01:46:6a:6e:90:2d:
46:df:38:59:79:86:0e:fb:88:d1:62:36:67:b2:d2:a2:38:17:
4c:08:b5:e6:6e:ea:63:9f:03:5e:f9:54:57:23:d8:df:aa:12:
ce:26:d6:56:0d:fe:cb:8d:f4:7f:7c:a0:26:77:76:d2:22:0b:
ab:1a:71:87:34:4b:d5:ac:bd:4f:96:1c:69:34:ab:17:f6:97:
88:2b:92:0e:58:b2:15:51:da:c0:16:df:41:51:79:5a:15:f6:
a3:01:0f:02:cf:d2:70:fb:6b:5f:95:2e:81:a2:e5:35:29:99:
75:ab:94:92:41:fb:bc:2d:d9:d9:22:2d:9a:ea:f0:be:b3:47:
49:39:5c:37:0f:3e:03:2f:8d:a2:46:5d:89:54:21:cd:2d:92:
b0:2e:7f:a2:ee:c4:44:0c:c9:48:ed:1c:71:60:66:ee:b9:e2:
1d:c3:79:34:2e:45:b3:5e:fb:c6:73:99:53:3b:6f:c8:a6:6c:
2b:1e:25:5d:d2:e3:b3:bf:27:4b:c0:19:77:2e:6c:fa:09:8f:
3a:87:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:24 2025 by rpki-client