Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: YM9hMv/FdpSDExyHIWH/v49HpYJLviG3gwPVKjUGj50=
Subject key identifier: 6C:8B:6E:41:8F:D5:7A:BE:A4:8E:48:CA:AD:B7:07:23:DE:90:EB:C6
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 0194BC72B3FC3B5AC8CB759C816828BB79C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 0462
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: NANUT/9Q4x8Uv2MqEir4spPL0suZByaj4PDRUGY9i94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b3:fc:3b:5a:c8:cb:75:9c:81:68:28:bb:79:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=6c8b6e418fd57abea48e48caadb70723de90ebc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:51:71:02:19:02:aa:c5:29:c4:a9:64:b9:61:
32:e7:0d:5a:d8:06:dc:a2:b7:e3:c2:7c:00:04:ab:
54:a0:7a:c2:8a:f5:cb:84:ca:11:ac:82:e7:8b:14:
46:76:4d:ef:48:f1:01:8e:f5:23:e7:55:40:9b:df:
45:4e:46:54:62:3f:f6:71:3a:07:38:e5:96:67:60:
84:56:cc:02:30:64:ae:89:24:29:96:f6:b7:74:bf:
0a:73:00:cb:7f:1c:c2:3f:aa:39:75:0c:26:b9:ab:
fb:ab:1b:96:89:4f:a2:5f:38:fd:98:05:f6:d2:2d:
0b:44:f6:78:49:69:77:95:b4:7a:22:a2:f7:3a:5c:
97:ea:a5:66:f9:a5:50:d9:c6:a9:d9:a5:50:46:67:
18:04:39:2c:b7:16:f6:06:d7:23:b0:41:83:52:be:
05:30:b8:0c:a2:ae:bb:81:5b:86:c1:86:aa:27:1c:
8c:c0:10:0a:a1:b9:b2:86:4a:95:94:4f:2a:68:18:
48:ce:66:28:49:b5:37:55:f3:91:50:69:79:db:85:
fb:9c:8c:89:38:18:17:ee:a4:44:03:de:56:af:c2:
d3:ed:7a:8a:27:94:79:f5:27:23:e5:02:64:b4:68:
84:c3:11:29:8d:9a:82:bd:27:86:85:a0:a4:a7:e8:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8B:6E:41:8F:D5:7A:BE:A4:8E:48:CA:AD:B7:07:23:DE:90:EB:C6
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:87:32:97:bf:fb:14:d4:15:35:61:20:03:7d:55:3f:0b:09:
d9:21:25:aa:19:7e:b3:c6:a4:6f:4b:d6:7c:85:2a:a6:b5:bb:
ee:41:72:ee:55:f7:73:da:ae:c1:0c:4f:17:ae:28:cb:86:6c:
a8:50:1c:67:f8:11:26:2e:91:71:15:e5:45:ba:b3:47:94:11:
90:55:56:20:2b:33:1d:c5:fe:b5:ec:e0:65:6c:5b:53:94:c8:
d2:ed:bd:15:24:17:7b:ec:e7:51:73:65:7b:2e:a4:10:e7:ac:
13:e9:57:d2:b8:a2:32:9f:24:6a:94:f5:01:ef:db:6c:b3:56:
e8:a5:42:5a:c0:70:bb:e4:91:54:d0:b0:23:83:49:94:8a:04:
45:ab:6a:92:a1:e3:00:c0:c3:b0:c1:e6:2c:b0:5a:c5:eb:7f:
0f:61:1f:a7:2a:ad:8f:cd:62:35:7a:eb:47:bb:d3:b5:aa:ca:
5c:b4:29:a4:c0:78:ae:69:b0:0c:6d:d8:12:e8:77:55:9d:7f:
7b:24:ee:26:2c:4d:cf:3b:e4:80:6f:7c:e5:d9:52:a5:0a:43:
13:15:33:5b:12:9c:ca:54:4a:6c:9d:84:36:40:60:2e:52:71:
23:be:03:3a:76:71:f5:44:4b:84:17:6b:93:4c:ae:14:bb:75:
f4:3f:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:37 2025 by rpki-client