Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: mUmqo7z5M2YEr+CXuUlWr+BR6+oAj12JQCQg+VDY3EI=
Subject key identifier: E8:AD:89:7E:2A:FA:07:8E:C4:F9:07:1A:54:C5:74:78:CB:4D:14:8F
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 0194BC72AFC8F404CDD7A3F6CE2FF57B3D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: B+H12NyEvNobI6loJlR7VDQgT9llaFPJfny7SZCPDs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:af:c8:f4:04:cd:d7:a3:f6:ce:2f:f5:7b:3d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=e8ad897e2afa078ec4f9071a54c57478cb4d148f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:23:8c:b4:df:82:f7:4d:66:dc:88:05:62:
37:0e:eb:b8:37:b9:32:e8:3c:1b:14:ea:96:d8:92:
41:97:a1:50:c2:4e:b5:8d:a7:2a:58:14:eb:4e:21:
7c:58:31:0f:eb:52:ab:55:14:a3:78:12:15:6c:01:
30:28:fb:74:52:d8:0d:78:9f:22:12:92:a3:7d:1c:
0b:f8:20:ab:05:90:9a:fc:14:63:11:1f:ec:07:c9:
7a:56:dc:30:f1:27:cf:b9:3f:c4:58:91:9f:40:36:
25:4e:6c:96:7e:24:12:27:29:d8:6f:80:fb:6b:0c:
2e:72:ef:e8:80:78:94:e4:d4:54:b3:eb:1f:0b:b8:
63:bd:3c:ee:e5:e8:4c:2c:15:6d:45:83:ed:67:da:
65:f2:59:e8:f3:ad:dd:1d:35:46:60:72:b3:07:6c:
ec:05:02:6e:70:79:11:0e:03:00:01:5b:d7:f8:8c:
94:71:28:4a:e5:55:7f:01:22:7c:48:58:56:81:ee:
d4:6b:a6:93:6e:32:1f:0b:31:c4:52:92:46:b4:0f:
01:35:e0:39:f4:82:bf:1e:49:b6:1f:65:6c:94:5c:
fa:15:8b:64:34:07:84:8a:90:f3:7d:45:17:1a:31:
38:c1:8c:67:75:62:f2:0f:85:6f:47:87:0a:93:dd:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:89:7E:2A:FA:07:8E:C4:F9:07:1A:54:C5:74:78:CB:4D:14:8F
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d1:5e:f2:94:83:eb:49:b4:f3:6d:8c:56:4c:d5:80:ea:f7:
45:29:eb:0b:2d:4a:96:97:58:34:06:63:05:c6:ce:f4:71:90:
15:af:90:bc:82:34:69:fe:64:ec:fc:a7:66:ab:0b:a5:b5:40:
b9:1a:31:33:31:f5:cd:a9:c6:45:ff:89:cf:35:17:1f:0f:97:
66:8a:5b:2f:00:16:86:14:7e:48:2f:91:c9:1f:73:f7:ff:c3:
3a:34:87:cd:95:0a:7b:53:6e:99:c3:b5:35:32:a8:41:00:ce:
02:3b:32:d3:97:1a:75:42:8a:27:1b:61:12:09:be:be:2e:5a:
44:3f:0c:c1:e9:c5:38:80:ed:a8:db:2a:5d:2b:ba:5c:3d:d4:
38:a3:37:7a:3c:7f:89:7b:4c:67:35:88:a1:6c:90:b9:ae:fd:
17:f3:c4:8c:3a:0e:a6:f1:88:01:97:8a:1e:c3:9e:c7:28:12:
37:fe:e0:f7:b2:ac:a5:21:cd:dd:32:45:45:e2:e9:96:2c:2a:
5d:a1:eb:f7:d7:30:14:b4:61:a5:ea:63:38:9c:c7:af:d0:08:
df:c5:52:8a:d8:0c:7b:4d:f4:83:dc:20:7f:dd:fd:b1:83:71:
84:40:79:29:4f:e4:e7:47:37:fd:e7:61:36:68:7e:cd:b3:ce:
5a:43:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:22 2025 by rpki-client