Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: 9TMGBaMIqV7A3Zdl4tA4+WEUotTJyaNlWQMI7wku734=
Subject key identifier: 08:53:59:43:46:67:7E:53:40:2D:C4:16:2E:F0:65:84:3C:11:CA:11
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 0194BC3BF88D27E02780386BF1627380F084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: iPeGd30qEvRAiFlKGti2t93er3DA87o0x0Yw1BLU6PQ=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f8:8d:27:e0:27:80:38:6b:f1:62:73:80:f0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=0853594346677e53402dc4162ef065843c11ca11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:a1:c6:1a:00:30:cc:0f:42:02:3b:16:f6:
d7:20:bf:e7:c6:0e:de:ec:39:11:21:53:c1:91:a8:
64:80:4b:16:27:c7:39:b2:dd:9a:ad:1e:6a:a7:63:
8a:08:bb:d2:5a:b9:31:10:6d:87:fe:54:30:a4:d3:
e1:6d:a1:da:ce:16:34:87:e9:c0:5c:c6:27:e3:62:
f4:a7:8c:09:b2:a6:8d:03:e6:7e:26:b2:37:55:67:
4d:7b:c3:83:7f:48:e7:0b:96:1f:05:f6:1e:5e:f8:
16:cd:3e:74:74:8d:6d:fb:b4:29:8f:09:f3:17:05:
a5:eb:e0:a7:4c:64:80:d9:f5:01:7e:2a:9c:58:04:
ba:56:cd:b2:52:3d:c9:5d:0c:ed:c0:7e:e1:6f:5a:
97:c2:4c:11:7d:53:93:8a:9f:de:cb:37:6d:ad:95:
a9:48:8d:27:fc:5b:3d:13:3d:d7:cc:4a:e3:6e:c2:
f2:98:2e:7f:01:6d:cb:7b:93:c2:a1:40:d4:66:bf:
be:9f:ae:4b:7c:f9:5e:21:93:61:13:e9:6f:05:36:
87:ab:ba:fe:a0:e4:4e:5b:63:d7:a1:68:78:e4:34:
a2:8a:fc:77:47:3a:e0:8b:a2:cd:97:20:ec:06:a6:
a2:39:f1:a9:f0:ce:09:00:d3:85:33:f4:e7:f1:6b:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:53:59:43:46:67:7E:53:40:2D:C4:16:2E:F0:65:84:3C:11:CA:11
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d4:83:1b:3b:85:7c:d3:b4:4f:1c:3e:b9:ba:16:e5:e3:a8:
f8:90:86:9e:e2:c0:73:85:04:f1:fb:44:ae:eb:ce:36:6c:b8:
4e:c2:b4:0f:32:ef:2b:ec:49:ca:dd:bf:2a:ba:1f:d6:9e:6f:
02:8e:c9:28:6e:a6:ad:6f:1c:dc:82:8c:be:96:ed:e1:da:cd:
55:fc:7c:1b:1a:81:78:e9:8b:13:83:0b:43:92:3b:e1:ac:04:
7c:d9:b7:52:cb:85:66:ca:c5:18:62:d1:0d:d7:52:44:6e:43:
4e:8f:5d:c0:65:81:31:bd:39:00:ed:f1:ff:ab:6b:4d:56:2f:
da:f7:6a:1b:05:a3:11:6e:87:47:53:0f:68:4f:8d:6b:49:47:
67:3b:c1:7e:50:66:55:e3:75:98:81:e6:f0:01:9e:eb:50:d4:
13:6f:3e:23:ad:93:91:ae:da:a5:d0:74:a9:a8:bc:78:78:c8:
25:62:f7:69:92:3e:d6:e3:a8:72:f0:4c:19:da:9d:f1:6c:90:
b3:e3:b8:a9:b6:70:eb:3c:f2:20:f5:33:dc:7c:5b:25:0e:7e:
79:2d:41:41:cb:bb:95:8e:28:ce:fc:80:27:d6:97:9b:de:c5:
28:e5:10:0f:ab:90:bc:aa:a4:44:88:7a:5e:67:80:bd:5f:cf:
ca:6a:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:56 2025 by rpki-client