Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier: JUyOOp9t0Kxh3RotfyUcdbxDonP/t3wpNo0emFmjluo=
Subject key identifier: 5A:F2:28:33:4E:98:F3:AF:08:F1:D4:90:52:CE:73:EE:D5:E0:BE:9A
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial: 0194BCA9DB0BE5E4CA684630B51EBF7F3436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: LT0qB-gBAbq5frFGXTq1GqnXCfI.roa (hash: K2tXP/3iE8TclQjWefb7tiAmYpuF8VMrt60W/dO45lU=)
2: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: oijNu2Urab5jCbHRec/Bl+uDiEYBZfOxTQxI7/PX+ls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:db:0b:e5:e4:ca:68:46:30:b5:1e:bf:7f:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=5af228334e98f3af08f1d49052ce73eed5e0be9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:3e:8e:da:f1:d0:6a:19:84:bc:b8:79:6a:
a5:5a:bd:45:b3:38:dd:e6:40:96:13:34:a7:6f:14:
47:04:c6:84:13:40:4d:43:c9:bc:75:6d:ba:35:12:
35:5f:85:bc:4a:a8:96:5c:ca:24:33:d8:8c:65:f4:
5a:ab:3a:84:27:54:c6:c0:3d:b5:51:24:d0:fd:9b:
b1:89:58:6b:de:b3:b4:fc:a1:8b:c5:3e:b7:bc:73:
34:ab:a2:75:f4:70:24:35:0f:c1:62:3e:4c:5f:06:
df:39:2d:f5:9d:8d:6b:18:32:79:d4:81:ae:d2:7a:
51:aa:26:00:b5:b3:07:8a:dc:c6:93:3f:3f:e7:ab:
7e:bc:bc:77:d7:53:19:ca:d8:78:b7:90:a6:0d:07:
36:25:f0:b5:f0:fd:45:f8:93:d3:57:9c:d5:30:39:
be:5c:ad:ea:f7:1f:48:15:dd:45:41:3b:3d:ef:8c:
a7:b3:69:46:a2:11:6b:d0:b0:2e:53:08:5b:ec:60:
22:e8:11:a6:a6:de:a9:0f:56:50:82:a0:4f:ab:ab:
64:77:de:60:d3:9a:06:39:3e:bd:34:ab:56:95:85:
00:e7:50:7a:ec:b5:cf:0c:ea:3e:e5:56:6f:87:47:
cb:ba:6c:48:b0:ce:a8:c5:f4:57:69:47:1c:72:69:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:28:33:4E:98:F3:AF:08:F1:D4:90:52:CE:73:EE:D5:E0:BE:9A
X509v3 Authority Key Identifier:
keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c4:ef:9a:d6:61:58:f1:11:4e:75:da:83:31:42:7d:13:09:
e6:8b:8f:d2:da:45:7f:bd:c6:52:98:2a:ad:e1:c0:71:7b:b2:
3f:4c:87:38:c5:27:b9:f2:e0:cc:77:05:b6:4d:c7:56:b8:96:
70:b7:1c:74:d9:86:98:79:11:ef:63:ac:74:cf:42:0b:63:35:
a3:ff:2d:65:b0:17:20:e9:93:95:78:c6:00:8a:d1:61:13:45:
54:d0:3c:c1:03:51:04:76:db:5d:cb:14:e2:0b:b4:0a:f2:f0:
7e:86:30:2e:d5:96:e6:08:59:ab:d6:bf:37:e6:20:20:81:6b:
06:3e:1b:0f:79:ac:b9:d1:59:ef:bd:25:dc:c9:15:e1:72:76:
27:5f:27:60:19:f8:10:6a:6b:33:a2:b4:93:27:c6:97:ed:f5:
9c:79:7e:78:fc:5a:df:8f:95:11:09:aa:1a:11:c2:b5:a2:98:
b1:51:65:45:4d:0c:d2:52:5a:ee:c0:be:b2:9f:00:79:fe:ff:
cf:a7:4c:66:45:55:4e:a8:cb:de:c5:12:6d:da:bb:c3:5a:87:
1b:93:f1:39:76:1a:76:d9:5f:ab:c7:c5:05:03:19:5e:e8:04:
2f:c3:6c:d6:b4:77:83:90:c1:9c:ba:b8:cd:c2:ac:5a:69:d9:
4c:58:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:50 2025 by rpki-client