Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: bjsQs2HtS/EWKAUWdjbwJYV0CquLrSbCXC35NdbcCO0=
Subject key identifier: 92:F1:BB:22:68:F7:96:0B:BF:77:BF:1E:19:31:98:43:D5:A1:2A:B3
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 0194BC0516B6647380B25D03F129D9F0CC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: V0NEIzwtT7qtLcB+6q9G4zjL1hOg+kjQK2rOp7gW5ok=)
2: yg4sGgC5KBzP9wrpfNuvhuojK2M.roa (hash: e1y06aA1s62UqKwjDXe9gE31sK3hItmKrNoYCjTILV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:16:b6:64:73:80:b2:5d:03:f1:29:d9:f0:cc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=92f1bb2268f7960bbf77bf1e19319843d5a12ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:74:b8:3f:38:5b:fe:6a:b1:3e:0c:71:ec:
5c:1a:df:37:3e:04:10:df:98:de:1e:d8:3d:0d:09:
b8:16:de:db:bd:16:07:b9:6b:04:6e:c3:0f:17:c9:
55:06:8a:96:b4:f3:ce:80:9c:2e:60:8a:cb:f2:5d:
18:b0:88:c2:c1:7d:79:b3:d4:9e:7d:68:2e:5c:f0:
27:4f:89:44:f8:a9:0d:fa:df:a2:97:5f:f6:8a:5c:
53:35:33:29:60:b5:96:28:b6:e1:d0:a5:82:bf:c3:
9b:bf:b9:a3:70:7f:85:b4:97:4b:a3:76:68:00:bb:
eb:c8:aa:1e:3f:61:87:05:84:d8:97:3e:56:f9:a1:
87:87:46:06:e9:4e:e0:c4:94:30:10:65:a0:cf:2e:
1e:7c:c6:41:93:a5:ae:6d:d8:be:f1:b4:0c:88:5f:
ae:71:b7:5a:f3:77:1e:c5:10:d2:bc:e7:c2:c2:5b:
92:a7:8d:6e:6e:88:46:b4:b1:60:92:7c:48:d6:07:
b5:f1:7f:36:15:b9:e7:0d:4c:a3:15:6d:bd:64:d9:
01:22:80:0f:73:1b:ce:97:e8:6f:e6:a1:4b:c1:4a:
41:8d:71:ea:a2:ff:d7:e4:0e:6c:03:c5:ad:d9:b2:
ed:81:ce:1b:6b:88:3e:9b:dc:4c:8f:1c:56:c5:a4:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F1:BB:22:68:F7:96:0B:BF:77:BF:1E:19:31:98:43:D5:A1:2A:B3
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:09:ff:4e:d8:0f:f3:b8:66:4b:84:9f:a0:cb:59:cd:7c:e1:
57:8b:d0:da:5f:8b:57:f6:c4:6d:06:e8:52:25:9c:70:f4:40:
9f:e9:b4:be:de:1b:5a:dc:25:da:e5:9d:14:46:2c:7c:e8:f1:
00:f0:70:38:de:ac:ee:69:3c:35:38:78:b2:d8:02:3b:b7:19:
c9:9e:e9:80:cf:63:55:0e:bb:cb:8f:d7:4f:e9:96:2c:1f:5b:
db:ac:ae:e0:0b:26:27:b1:b1:2f:0e:e5:bb:a1:4a:02:b1:0a:
e5:0b:b5:26:8e:f5:f2:09:e4:a9:5b:7f:17:a3:13:7e:12:07:
28:08:c5:c4:ac:c2:fc:23:e4:e8:37:ea:6c:ba:11:af:02:e0:
cf:7f:58:a7:67:e4:35:6f:64:54:23:88:e6:0a:a5:d4:f7:a8:
03:4d:78:4b:11:c7:6c:ae:6d:0d:89:fa:20:09:fc:1e:d2:2c:
4a:96:59:fb:76:50:b6:fc:5b:57:df:97:08:34:18:f5:ed:04:
7d:2d:5e:81:13:ce:c4:5e:67:6a:69:5f:56:67:04:10:2a:ed:
a5:92:c3:82:56:32:d1:1f:9a:fb:35:79:25:de:5d:33:90:08:
e7:34:97:d2:af:77:c0:67:2a:7b:de:ea:bd:c7:65:6d:e9:54:
7a:83:6c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:45 2025 by rpki-client