Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: 1KOVTvGG7wvHWzaeVfXhkHYYmD6oWtt+3zdb9JJHFAM=
Subject key identifier: D4:02:85:AA:1B:7D:AE:E4:90:D2:4C:49:43:0C:35:A2:E6:02:EB:FD
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 0194BC3CA04A9308504D9424251AC36E8DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: GUuzHts+724JqMSYpxI5MReJbSXgJOVSWn/DB6FgOl0=)
2: Tpjw3Nc3KI-z5sFPTugglehoVro.roa (hash: hQVvNBqIbdUFIzp+3WsVNIaxhLKQfbJlxs6hdH4n1Uk=)
3: diSC8nPgEABB-CJx_ksMgSsNles.roa (hash: P6nuoJWWHEaEC3HR83/5oy/90/lUhtiTHhAwuDUVMMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a0:4a:93:08:50:4d:94:24:25:1a:c3:6e:8d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=d40285aa1b7daee490d24c49430c35a2e602ebfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:ad:d7:9e:29:87:32:aa:83:c7:83:0e:36:
0e:1a:17:4f:5d:6c:57:19:a8:f8:28:8c:d5:29:31:
68:ff:1a:29:87:98:7f:28:03:99:c4:2e:13:4c:dd:
5f:d8:7b:0b:97:6b:ba:98:d3:5a:b4:de:de:cd:2d:
90:db:56:ac:aa:29:bb:86:31:05:99:1a:01:87:ec:
d0:11:c8:04:97:04:e1:c7:67:dc:19:69:dc:43:c7:
c5:b6:4f:76:5e:59:7b:7b:08:31:d9:ad:da:38:60:
69:58:04:ba:79:49:79:b2:6d:16:13:f0:8c:65:98:
8f:d0:01:35:a8:34:75:e6:55:30:97:6a:be:e9:64:
97:72:98:fc:ab:9d:d1:90:61:e8:0e:d9:6f:84:08:
57:67:24:44:7e:50:d7:36:33:b0:52:2a:7d:e2:15:
7e:5d:04:43:56:85:81:9f:f0:2f:9b:0f:37:b6:3a:
51:28:c1:54:63:0d:cd:66:e7:92:8a:0d:19:fd:cd:
ea:13:f1:1c:cb:aa:c1:a4:65:0f:01:17:4c:c8:4f:
a6:2d:d7:d2:98:c9:44:1c:85:54:c6:84:95:1e:04:
f4:c3:1b:75:f1:02:23:db:fa:2d:2b:af:7b:98:ee:
d0:3d:c0:6e:66:d7:8a:4c:33:35:ec:fe:32:7f:03:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:85:AA:1B:7D:AE:E4:90:D2:4C:49:43:0C:35:A2:E6:02:EB:FD
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b9:f4:29:b0:ca:b0:3a:6d:ac:76:92:e0:d8:1d:81:ca:3b:
2b:1f:04:da:50:37:e1:21:f3:f3:dd:32:42:9f:0c:3b:ac:f5:
6d:35:3b:b1:b4:42:ab:89:e1:32:ca:90:c9:e7:4d:22:11:bc:
e4:45:2a:b9:db:97:b5:ac:f0:1b:1d:68:fc:f6:cd:b2:46:71:
a4:01:e0:30:4e:43:bb:03:7c:a1:fe:a5:6f:5f:b6:4f:c9:9d:
b1:b4:bf:96:c4:72:d6:50:12:04:0d:5a:b1:6e:be:41:a7:0f:
c1:c4:25:e5:5d:ee:29:01:e5:69:ae:6a:ad:eb:f8:40:43:7f:
d3:94:45:71:26:47:c3:fb:1d:31:01:85:98:7c:7d:9b:13:93:
39:f9:cc:81:ed:58:76:20:a5:79:59:bc:d4:72:6f:4c:0c:e2:
69:ad:ed:2f:8a:b8:49:f5:2b:97:5e:e7:6c:11:b1:16:d7:30:
65:c3:68:45:17:70:af:82:e3:48:16:50:d9:54:bc:d0:87:96:
75:1e:b1:86:f2:ea:6d:df:2c:f3:12:b8:f5:63:09:b3:df:c1:
94:77:b8:9a:b0:40:1e:5d:69:4b:ff:7e:b9:b5:1e:fe:ea:e4:
15:75:45:72:4f:21:f2:4b:50:a4:5f:5a:c1:2c:a2:ac:09:17:
ab:fa:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:22 2025 by rpki-client