Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: o0zf8ENR1s58hbkSET6D6rquCwpvRQ2ZcwNz+HPv4H4=
Subject key identifier: 94:A9:E6:64:C6:3E:33:74:65:43:00:0E:AC:C3:51:EF:1F:DC:33:F3
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 0194BD175BE529F96FFA2B1EE32A57E9B07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: PoiOYgHHrHHka3sauLfAhORY5iQtVmrIjKaBwNH74NY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5b:e5:29:f9:6f:fa:2b:1e:e3:2a:57:e9:b0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=94a9e664c63e33746543000eacc351ef1fdc33f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:d0:35:a6:65:1c:71:3a:d5:49:01:15:f7:
6d:4c:3e:c6:8c:b8:55:83:bc:08:1e:fc:62:ed:ee:
3a:89:c5:90:a8:e3:f9:11:11:9e:73:1c:93:8f:ac:
ce:67:6e:7e:ab:cd:85:b4:20:f9:1b:98:16:de:f9:
cc:a9:86:a7:1d:2c:d2:93:87:31:1b:21:35:60:c7:
10:16:62:c3:cf:e1:81:a6:07:6e:c4:7b:c6:16:73:
d2:97:78:2d:00:2a:10:43:aa:29:d0:81:01:b8:84:
35:b3:25:95:eb:3f:5d:ec:dc:de:d3:77:6d:a6:ce:
26:06:15:cb:d7:ac:ed:dd:0e:51:60:9c:5c:8e:12:
86:d5:ff:8f:84:ac:39:dd:1f:9a:13:35:a4:88:ba:
54:f6:ea:84:eb:3d:23:16:d8:25:6c:e2:cc:f5:ae:
02:31:eb:cf:1b:6e:bc:9c:f6:41:b4:03:d0:42:62:
0f:5b:64:de:38:8c:36:db:75:f4:06:2a:dc:ff:bc:
74:db:e3:e1:12:15:9b:65:2a:0d:91:c8:a5:83:b0:
ff:bc:b4:1b:2f:1a:5d:58:69:18:b7:62:1e:dd:c1:
12:cb:45:f0:a2:b3:60:df:99:d0:24:b7:97:09:06:
08:79:a0:44:35:76:8c:cb:ba:44:22:89:64:9d:9f:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A9:E6:64:C6:3E:33:74:65:43:00:0E:AC:C3:51:EF:1F:DC:33:F3
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7a:fd:7f:53:fb:0d:e8:4a:2a:77:90:c9:4d:3d:cc:18:74:
d8:b8:c4:02:a1:d9:86:76:9f:20:a1:4c:6f:dd:25:54:90:2d:
b9:41:e9:67:e4:0a:87:03:61:19:f0:f2:a4:48:ce:bb:31:5b:
19:83:e4:de:16:5d:87:64:c1:32:2b:35:ad:13:58:a2:d4:06:
26:9b:c1:4b:f5:0e:0a:de:de:a5:2a:24:91:bc:02:cb:ee:d8:
6e:dd:bc:dd:b5:9c:7a:32:2e:2b:e7:c8:6d:ff:b4:2d:b3:a1:
1e:3e:bb:c1:91:cb:4e:69:e3:62:ef:5a:24:41:69:58:4a:9d:
b8:99:69:0e:3b:a6:d1:2d:72:92:ad:03:71:2c:67:41:d9:57:
92:92:99:fc:8d:61:0d:3b:f1:1e:8f:7d:37:96:49:8e:82:ba:
85:11:0a:db:f4:7a:f7:e4:1e:80:fe:da:c9:d1:19:36:58:f6:
39:ee:28:b6:ab:3e:71:7d:1f:84:9b:91:ae:30:e2:3a:b1:7f:
b3:d0:53:fa:7f:50:3d:7b:22:58:d4:56:49:0d:44:4e:e9:fa:
cb:25:aa:c9:f2:e5:89:54:8a:8d:59:b2:7d:09:9b:74:c7:4a:
71:78:f6:2b:6c:f8:45:79:74:f6:07:b1:f1:19:b1:67:5f:c8:
e5:60:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:25 2025 by rpki-client