Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier: /5mepb6hwhWniHJ5a2383yc7kUtTXtzL+Y7cgG8sPt4=
Subject key identifier: D5:91:9C:83:A8:55:15:CC:C8:03:0B:CC:F2:F8:8D:FB:59:B1:39:C6
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 0194BC3BD507A143C95DC02C3BD789B93515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: 18OLbTquI7IHEN/6HGS8RMp4f6vaWP/pLIZCxQXKF5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d5:07:a1:43:c9:5d:c0:2c:3b:d7:89:b9:35:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=d5919c83a85515ccc8030bccf2f88dfb59b139c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:91:62:80:68:69:1a:83:42:4b:6f:b1:24:b9:
7d:27:68:e0:d4:38:64:d5:6a:91:77:f0:ca:ca:08:
bb:b8:b4:06:68:e6:c4:5e:8c:8c:ac:83:1e:58:67:
ba:45:77:55:cd:89:f3:0f:b8:cf:5d:3d:ea:fb:c8:
89:12:8f:9a:ea:02:70:f7:37:66:5c:50:84:27:af:
9e:c7:5c:d1:47:2a:f2:fc:79:80:5f:29:cd:57:35:
26:fd:e0:84:a6:3f:04:b8:c4:b2:4f:7d:c4:c9:15:
fd:2a:cb:25:e8:68:ed:e4:d8:4e:d9:0b:b1:71:b9:
3d:d4:37:82:5a:f4:df:4e:13:1e:05:65:b7:e9:90:
0d:5f:70:04:f3:44:af:f4:0b:15:e7:45:14:06:c3:
fb:69:c5:ff:bf:85:ec:ad:af:cf:9c:51:3d:53:ea:
f2:54:58:79:5b:3c:50:59:ce:87:bf:66:24:b2:56:
68:54:a2:80:d0:b5:fe:98:ed:6e:75:22:da:97:6c:
8b:46:49:f9:57:3b:64:53:ad:8b:a1:ea:c9:49:19:
d8:dd:17:8a:4f:2f:6b:87:54:03:46:f9:67:85:63:
6e:59:fd:df:d1:99:7b:47:ee:73:ae:71:f3:a9:11:
a9:c7:78:72:1d:9b:0c:c7:c0:bc:e2:f2:ee:62:82:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:91:9C:83:A8:55:15:CC:C8:03:0B:CC:F2:F8:8D:FB:59:B1:39:C6
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f7:a2:56:8a:fe:09:59:a0:77:4a:b8:fd:93:43:2b:c5:77:
77:55:fc:c7:63:45:21:1b:1e:82:b8:e1:d6:4e:6e:f7:7f:de:
b5:d4:11:0c:d8:35:85:bb:ac:6e:ee:d9:ae:a2:7f:b9:05:00:
b3:d9:49:8c:04:17:e8:69:ef:32:f4:66:7a:3c:0a:54:7f:fb:
ab:ac:ef:f8:89:35:9c:bf:13:60:58:58:62:e9:0f:50:3c:59:
ca:89:77:2b:27:0a:f5:86:d7:4b:05:34:b9:f1:6a:1c:fb:49:
26:4a:7c:71:f6:d4:89:7e:9f:91:f2:69:79:43:14:86:a7:38:
d7:61:2f:d6:12:2b:82:92:87:26:3e:be:c3:fe:41:a4:89:5d:
29:f4:8e:73:18:29:96:9b:42:3c:36:f8:75:99:3b:8c:49:e6:
1e:fc:65:92:bc:12:23:67:62:81:c6:75:98:d4:39:59:d9:8c:
e1:4f:7c:eb:59:45:d5:29:41:06:c0:f1:ed:d7:12:d9:fe:b8:
7f:9d:f4:cf:e9:9d:0c:7d:1d:15:71:3d:ba:8d:ff:0e:2a:07:
00:75:9c:27:26:5c:d3:34:07:3b:6f:35:f7:78:13:a6:2b:c7:
ea:c2:a7:77:b0:19:36:1f:e2:cd:24:59:3f:52:4f:65:cf:f3:
11:1b:b7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:13 2025 by rpki-client