Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
File: Z6TsOPL_adJQX39i6Uw715i1hVI.mft (raw, json)
Hash identifier: Vv789k66Xc8RgTf1K5T6QTAHFewrK7BnC67xPofRlUY=
Subject key identifier: F2:AF:40:C9:1A:AD:B4:4B:90:7F:E5:C5:13:3C:99:A8:E3:BA:F0:2D
Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
Certificate issuer: /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Certificate serial: 0194BCE077187680094B53A3281C51E47499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
Manifest number: 1251
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: Z6TsOPL_adJQX39i6Uw715i1hVI.crl (hash: Jbq7RjMvO/eBghoSjsQHLQsocjUbcINMHgKNE9GxNBM=)
2: yojAQ3oth9lVhqX5wg8l8cBEUmI.roa (hash: o7RnG1CkyxwhqBFMnhN8mnO/r8Gaf2uetg2QG+K1/Js=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:77:18:76:80:09:4b:53:a3:28:1c:51:e4:74:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=f2af40c91aadb44b907fe5c5133c99a8e3baf02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:99:a2:65:57:a8:24:e5:97:74:e7:68:8d:
b0:70:2a:ca:00:53:0b:77:1f:b1:fb:67:66:9c:42:
32:1b:ab:c1:7a:39:1e:26:55:b0:1a:dc:6d:68:cf:
ed:db:23:27:ea:d4:59:b3:91:b0:c5:42:e9:e2:66:
b0:da:66:92:77:ae:db:c0:41:1d:22:e4:b7:75:26:
4f:ed:8a:0c:57:69:f0:f0:1e:48:aa:75:0a:9b:1a:
fa:db:6b:e1:77:8f:95:cc:1f:7d:c4:4e:b1:63:ce:
e5:8d:18:bb:45:42:cb:8e:44:3b:59:96:27:13:a2:
54:6a:11:b5:25:47:3d:13:91:43:0d:c6:78:da:f0:
ab:15:c1:f8:b1:32:b4:8b:dd:5e:21:1a:5e:2a:9e:
13:18:40:85:44:d3:af:82:0d:b1:d3:f2:b8:44:da:
1b:c9:52:2f:c6:c6:1f:b9:47:7f:af:31:fc:3a:a8:
45:71:c6:29:b8:2d:7b:3d:be:db:26:fc:88:d1:87:
c0:40:8a:2c:33:bc:a9:bc:a5:30:67:95:cd:ba:96:
97:c6:82:1b:c4:34:41:3d:f7:72:08:ce:c5:ad:75:
b4:c5:a2:6f:3e:42:29:fa:d6:cb:28:b8:51:9d:02:
b9:ba:0f:f7:cb:f1:a7:46:0f:b9:39:8d:68:7e:d5:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:40:C9:1A:AD:B4:4B:90:7F:E5:C5:13:3C:99:A8:E3:BA:F0:2D
X509v3 Authority Key Identifier:
keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:da:e5:e9:ea:e6:28:ff:2b:1f:24:a9:85:40:db:ef:f7:13:
a1:4f:61:11:2b:86:85:94:d1:71:7d:26:5f:b5:e7:dc:f2:09:
47:6e:8c:0f:2a:5e:7d:3c:b2:ad:8b:b3:ea:67:b7:38:03:f1:
df:de:27:63:c7:7c:1a:eb:ab:be:38:b8:2c:b8:e6:1b:b5:7c:
89:3b:b6:ee:0d:f2:ff:78:b2:b4:ff:e6:0f:db:05:43:97:d1:
f5:57:03:ca:1e:67:4f:70:1b:b9:25:ca:9f:05:91:57:cd:46:
5d:c3:01:ca:ef:f2:5c:c7:17:fd:ba:b2:46:9e:24:c5:69:5d:
b6:c7:5e:ee:8a:7a:75:ed:44:0a:ac:1e:53:b3:41:c8:24:17:
46:95:a2:b8:5d:3a:74:49:c7:04:e8:58:4d:4f:5b:f4:f9:26:
6c:ce:75:44:9e:c8:b6:64:db:ed:85:92:39:4d:c4:1d:b4:4c:
71:88:15:2b:65:bc:5d:cb:3e:e2:d2:62:63:6b:a0:0e:88:13:
12:ef:78:64:a1:f0:f2:d6:5c:4f:58:48:23:8c:66:1d:4e:72:
a6:69:d7:3b:71:aa:93:53:53:ff:57:20:84:8c:f4:ef:aa:59:
1c:3d:56:d3:a8:06:46:9e:d3:38:12:f1:5c:fe:c3:f1:91:b4:
db:2d:ef:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:10:16 2025 by rpki-client