Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: O+jMl5GJ0MJXjQegGgVUeK/xItYJI3o+mAJAVIihWyk=
Subject key identifier: C0:86:22:3C:B6:AB:EA:27:FB:17:2E:11:FC:07:90:E5:00:EF:D2:B6
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 0194BBCDB395A6DE86CCC73D48F5EDB92F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0AEC
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: RmIw7yJG18egw5FqBDp0M5j/1DNO35xnPrqBka0RfCc=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b3:95:a6:de:86:cc:c7:3d:48:f5:ed:b9:2f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=c086223cb6abea27fb172e11fc0790e500efd2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:72:44:83:74:78:c8:1e:48:5a:6c:28:ad:
6f:08:66:0e:6a:0d:59:d4:4f:55:2e:44:ab:cb:db:
23:a1:99:30:ed:7c:62:72:9d:fd:c3:6e:50:7a:58:
9b:e9:81:93:66:c1:7e:b2:66:bb:ee:aa:96:ac:fe:
57:5f:40:d9:f1:a6:f2:c6:60:9a:12:be:72:f7:9c:
e5:ab:7b:c4:a7:44:fd:74:c8:6a:c3:15:dd:58:5c:
4c:39:55:f4:5f:5c:ce:cc:1d:3c:90:a6:7a:e8:ed:
a5:d7:a9:6e:29:fb:7e:15:96:b8:a4:fc:d6:09:ed:
05:fa:c4:f6:ae:3d:72:9e:98:e3:7f:dc:1a:a4:74:
e4:af:54:7f:d7:62:05:9d:05:a0:cb:4c:d1:71:a3:
c6:d3:18:bd:ec:83:95:0f:1c:6d:ae:ef:99:dc:06:
8e:ae:06:0e:71:6d:13:e3:87:ae:d8:be:a4:d1:f1:
bf:09:3b:a6:7b:ac:53:9b:92:5e:0a:00:b9:db:d8:
f2:98:3d:e3:c8:bb:91:18:ff:cb:b8:e9:5b:04:6b:
92:0b:14:38:64:49:41:d9:8e:15:30:32:df:43:fc:
c2:5f:0f:9e:16:3b:c7:13:8e:49:ec:59:3a:4c:c1:
5a:8f:f6:58:ee:28:50:01:3b:4e:e7:23:83:33:37:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:86:22:3C:B6:AB:EA:27:FB:17:2E:11:FC:07:90:E5:00:EF:D2:B6
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:37:db:41:22:6f:dd:ce:98:03:c5:a5:d9:af:9e:37:39:c0:
bb:33:57:4e:88:14:79:29:3a:f5:7f:cf:1e:20:4d:90:78:98:
d1:1f:13:0e:1c:da:05:05:50:39:26:33:ac:8a:ab:58:46:69:
4e:a3:e9:0d:b6:2c:a8:38:f4:f5:d1:54:8e:99:60:91:07:10:
3c:52:61:99:2e:e2:46:61:67:82:99:70:ab:13:63:c8:4f:45:
ea:5d:b5:7f:55:0a:03:39:2e:c3:2c:32:8d:3b:1d:09:8c:1e:
e2:0e:ea:85:6b:3d:17:1e:10:d6:c4:66:e7:27:c8:44:73:5f:
fb:73:29:fd:9a:86:e3:1a:91:71:6a:6a:71:ed:53:f3:12:50:
6d:bd:e1:d0:3b:91:0a:81:71:06:9d:69:ad:ef:ed:de:b1:cc:
cd:43:1c:95:b7:cf:1f:fb:8f:4b:d8:2c:09:23:e1:1f:ef:a1:
d2:6f:f7:d5:55:d0:45:f1:e8:f0:e4:40:0d:c1:a0:25:fa:f4:
4e:a3:18:64:6b:62:4b:0d:6c:d2:83:63:2e:a5:3e:6e:a8:d4:
21:02:92:eb:dc:c5:b1:2a:38:2d:3c:e8:55:a9:b4:ce:f3:2b:
ba:a1:2c:15:45:a1:2a:30:2f:22:81:b5:a6:db:60:92:e8:48:
98:81:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:38 2025 by rpki-client