Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File: zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier: kdVcPo8bu4Yxd/PP1hHY4yyt8gnrs0bAPi/mCAOkfxw=
Subject key identifier: 62:27:0F:BB:A7:15:55:BC:17:CE:D5:D6:13:40:25:FE:A7:CF:2D:10
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer: /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial: 0194BD856578BD55E61BE55170EDCA36E068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: Y9gCH4thucbTjT0xARnAurkdlt0.roa (hash: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=)
2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: FiqeU12w7wmD5zUJL5Mtx5RKCQWkaoK6+GrxKHjIq94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:65:78:bd:55:e6:1b:e5:51:70:ed:ca:36:e0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=62270fbba71555bc17ced5d6134025fea7cf2d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:3b:35:07:e3:3b:96:96:57:3f:b6:76:c1:
84:a0:65:46:f1:2e:dc:7d:02:d5:2a:38:81:90:06:
92:f7:ca:10:17:1d:2f:41:94:d2:d4:c2:8c:c1:67:
02:af:d6:f7:15:c7:24:10:5f:6d:48:b0:13:4b:d5:
25:df:23:65:33:10:cb:db:73:ba:f2:f6:83:60:d0:
4b:c7:65:45:7e:5c:42:84:af:06:c0:ed:85:f8:c0:
40:d8:95:24:dc:cd:78:fa:61:ad:9b:48:39:aa:91:
66:ca:d9:a9:ea:30:b0:b2:22:f7:e9:9b:28:9f:2e:
80:45:c4:17:65:f6:e5:5a:e5:e0:6b:55:a5:71:cf:
11:71:d0:ee:fe:b2:27:dd:eb:b9:4a:46:0d:8e:ab:
8c:5f:cc:d2:91:5f:a8:2f:43:8e:95:c3:76:20:6f:
5a:c6:2a:df:7f:c6:14:11:3a:2f:60:b9:61:3f:8d:
26:86:0c:21:65:d9:33:f0:e6:97:24:7e:b6:15:25:
d5:ea:f6:e6:35:96:88:b6:3f:9e:53:a4:bd:8d:a9:
3e:0c:2e:14:44:e0:70:a9:0d:35:8c:d5:33:00:60:
f4:73:9d:96:d5:65:e1:3d:4e:a2:dd:0e:43:9e:bf:
fb:36:be:bb:0b:9e:79:57:08:bc:f5:3b:b6:df:0d:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:27:0F:BB:A7:15:55:BC:17:CE:D5:D6:13:40:25:FE:A7:CF:2D:10
X509v3 Authority Key Identifier:
keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:20:78:9d:82:f4:67:4c:c2:7a:2c:37:6b:ab:f0:de:24:2e:
69:1b:8e:de:92:a7:20:f2:a4:27:fa:00:9c:28:fc:c5:bb:31:
cf:41:12:25:ad:d5:a8:64:3f:b4:ce:76:28:5f:bb:d2:9e:a6:
57:fb:9b:7c:3b:65:7b:38:ac:d8:ac:a4:5b:67:ff:bb:79:ba:
c5:f9:72:dd:03:dc:a4:fd:0d:77:ff:49:f2:d1:f5:22:f0:77:
d8:de:f8:d2:fc:5a:1a:5d:31:6a:b0:63:55:5b:44:a4:88:2d:
f7:55:03:59:52:5e:70:da:95:2d:67:0b:a3:96:0e:48:76:89:
af:24:02:ee:2d:38:bf:6c:8c:01:81:b5:04:6f:11:f0:04:77:
04:1d:c7:14:6d:05:59:be:a6:e2:2d:15:a9:d4:13:b1:51:9f:
79:cf:6a:1d:25:5c:c9:ea:65:04:8f:b8:73:b1:bd:15:f6:23:
73:60:29:49:58:d5:28:3b:dd:51:8b:c0:c4:ea:c0:2f:6f:9e:
2e:d0:58:c5:09:51:10:e3:ff:98:38:1e:64:0d:3a:ee:1f:11:
7a:99:88:6c:c6:f6:cd:64:d6:f9:fa:b7:ea:d5:ac:41:a9:ea:
c5:a1:73:ed:90:bb:00:b0:ef:1e:49:ee:9e:79:29:7c:b0:c1:
01:50:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:59 2025 by rpki-client