Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: 1Fyn1p5Jb9wi4Dtu4e9LjfqH7ab0SILzSEjeWVgIMh0=
Subject key identifier: FE:8B:86:56:E8:31:26:41:D0:CF:18:0D:96:D7:E4:8D:CD:22:A9:77
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 0194BCE09D563809ECBB37917631C1ADC2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 091F
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: bL9XDxQqDi4zzbqIbwV9pxg-nag.roa (hash: vqETjbVoGoH82qeAvCJ8Sz1hJwZnPnltJtLCCK0jXFQ=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: CRGHCWac2MI7eC7PPagDflI69zcQDnuYSOwvM/d3uWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9d:56:38:09:ec:bb:37:91:76:31:c1:ad:c2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=fe8b8656e8312641d0cf180d96d7e48dcd22a977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:bb:ae:d8:2b:09:a6:a3:64:66:a7:49:a6:
5a:22:2f:36:1d:6b:af:55:20:ca:90:b8:e6:64:09:
94:e6:da:17:19:a8:e1:bd:89:90:de:96:4c:3a:cd:
9d:6c:ec:e0:65:71:d5:c1:b1:cb:ad:c6:7f:99:6a:
83:aa:a7:56:44:9f:38:44:04:30:2c:d7:33:b9:c6:
ff:89:b6:33:02:02:3a:ad:0f:a7:47:20:d2:ac:1a:
81:4a:33:a3:bf:bf:35:41:37:8f:46:bd:04:4b:e5:
d4:c4:13:d5:ad:51:ee:c9:9d:49:9e:00:cb:63:b2:
fc:40:cd:10:48:db:42:8b:36:ec:9d:fb:d6:41:19:
0c:59:54:23:28:ec:92:d7:ac:4b:3f:e4:52:cf:7e:
2d:1a:57:7b:83:61:27:b1:ea:d0:97:4b:56:ea:84:
03:d1:d8:7b:62:29:d7:da:4a:a7:84:4a:32:8b:d7:
19:fa:d9:69:a2:22:9e:9b:1d:5e:e4:92:d2:e4:6d:
44:91:7c:5c:72:59:ae:ce:d7:a5:07:e3:3c:9b:df:
be:ea:bd:bd:cd:0a:86:23:47:24:f0:c3:57:e7:ce:
68:c0:08:c5:b6:c9:b3:7c:bf:c8:0a:d8:95:74:30:
42:f4:2e:34:0d:0a:76:58:00:d6:6a:f6:20:95:cc:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8B:86:56:E8:31:26:41:D0:CF:18:0D:96:D7:E4:8D:CD:22:A9:77
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b1:bb:e5:9a:fc:52:b6:9e:4d:f2:80:76:34:97:b2:20:b7:
ac:bb:5f:6f:06:2a:45:e7:ba:44:6a:41:f0:6f:a1:50:e3:06:
13:6b:e0:b5:c9:a6:12:f6:ee:22:f3:56:ea:25:9e:4a:9a:ff:
6b:9e:d9:c2:1e:11:e9:2a:56:33:c4:0b:7e:82:45:98:da:b8:
14:91:ee:83:32:5f:35:6b:98:27:12:bf:9d:89:d3:61:a3:6e:
9b:24:23:04:57:5b:61:35:14:d2:c8:c5:38:7f:a2:d5:a1:e5:
e4:32:75:aa:1b:6e:d3:93:56:36:2a:cc:fc:b0:0a:c0:13:0c:
5d:84:27:fc:7a:f5:52:da:0a:69:28:d0:00:a8:87:57:82:b6:
4c:77:50:f4:7b:2b:21:46:eb:d6:5d:59:2c:1b:15:f5:51:28:
af:9d:f0:62:c4:35:d7:b5:ec:0b:55:e6:0b:0a:9e:7e:0a:27:
69:58:9e:1a:22:e6:e3:78:6d:e1:3d:a4:cb:d2:5b:85:fc:f2:
35:51:cc:7a:77:68:9c:1e:b4:f3:ae:fd:a7:c0:02:1d:31:0b:
43:18:de:48:3e:45:20:24:c2:1e:8a:d5:59:d1:fd:62:3a:62:
e5:b6:13:1b:a6:32:b9:40:f0:35:d1:cb:3d:82:a9:45:ca:da:
47:ce:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:34 2025 by rpki-client