Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
File: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft (raw, json)
Hash identifier: 24WwvLQ6lryGQT/QcGlhkFqzs4B3DUiKtM0XlM2sS/8=
Subject key identifier: 29:40:1A:1E:A0:06:1B:03:F7:BD:4A:8D:BC:F8:92:40:23:C2:51:0D
Authority key identifier: B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
Certificate issuer: /CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Certificate serial: 0194BC730D9DC0DA8F8910B249E0F0649A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
Manifest number: 087C
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl (hash: qjExauJHwzLhF8ijxaqHpMd1LsggLiwXNzaaiSpbD80=)
2: tyPwFquST_QYpMOQ15p0kPwIfBE.roa (hash: pgj4wMLIuT+JDsLGd7CH6ihopHeyqUjAH/pXaSBmiXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:9d:c0:da:8f:89:10:b2:49:e0:f0:64:9a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f646de414072fc1ab76b1b2c9e08b9bd21a843
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=29401a1ea0061b03f7bd4a8dbcf8924023c2510d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:2b:54:74:d5:2e:d9:26:ab:91:32:7f:aa:
e6:ca:ca:0c:6a:1c:a7:b2:95:08:1f:26:79:cb:1a:
16:6e:0c:26:02:74:69:66:eb:57:12:f9:f0:62:50:
b9:3d:db:1f:4e:a2:49:78:19:bc:42:88:79:c0:21:
a9:8e:b1:e2:d2:6f:69:06:51:82:b2:7a:84:fe:6c:
72:91:5a:49:b8:92:41:54:da:33:a6:24:48:37:6d:
3f:d7:7c:58:8b:38:76:d7:40:c5:2f:06:db:39:22:
16:83:a0:49:13:3a:df:a9:31:8f:59:4a:58:18:8f:
82:ce:df:d9:1b:37:ec:fa:6f:4f:57:84:a1:13:07:
87:a9:5c:58:38:f4:d9:6f:6d:0d:b5:56:d8:a0:a1:
86:a1:42:7e:28:ac:d2:d6:d9:eb:ef:63:97:20:4f:
fa:61:cc:90:e1:63:a5:53:84:ff:3e:8d:e1:3c:a8:
50:60:64:61:ba:75:35:44:17:78:c6:10:99:e4:ed:
8e:b2:cd:8e:b5:36:69:73:39:3d:7b:3d:e2:72:40:
29:25:b1:c7:05:88:3c:fa:9e:12:3e:a9:70:c6:a0:
89:a8:27:7a:18:4f:68:c7:92:1e:10:e7:47:e5:ea:
b6:73:a8:cf:81:c5:88:a6:8d:48:61:84:12:0b:37:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:40:1A:1E:A0:06:1B:03:F7:BD:4A:8D:BC:F8:92:40:23:C2:51:0D
X509v3 Authority Key Identifier:
keyid:B7:F6:46:DE:41:40:72:FC:1A:B7:6B:1B:2C:9E:08:B9:BD:21:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e2f9ff-c460-40a2-a357-77ef87a73e13/1/t_ZG3kFAcvwat2sbLJ4Iub0hqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:de:d0:5f:f6:6d:58:a1:d7:9d:f1:4f:a6:fe:aa:52:66:94:
77:82:13:52:d2:ab:6f:51:45:9a:d1:1a:a5:60:1e:50:d6:d6:
3e:57:8c:f1:b3:04:38:7f:01:9e:c3:5f:f9:66:83:05:85:b4:
b6:a8:e7:c5:f0:d3:1b:e9:f8:5a:77:bc:79:4f:be:a2:e9:ca:
82:6f:d6:2e:09:33:d8:95:be:b7:f9:0a:20:ce:c9:1d:82:79:
c6:11:d7:a7:00:ed:7d:a5:a7:fb:59:f1:ed:96:b6:f3:5b:11:
e3:60:47:dc:1c:42:a1:11:01:8a:5e:3d:45:0a:ce:2b:01:72:
2d:29:8b:2f:c0:59:62:51:7e:f2:94:2a:53:a4:97:03:11:40:
f2:67:dc:71:a7:8d:00:29:4f:16:f1:e2:bc:c4:10:40:81:e4:
09:22:bd:cb:83:41:a8:36:01:3f:e3:19:24:b5:fc:f8:ce:66:
1d:42:11:de:6e:7c:f6:db:19:a9:8a:d4:d5:f4:a3:40:7e:30:
5c:e1:f7:2a:b0:d0:79:38:97:3c:f8:23:97:05:4b:8a:4e:d1:
14:f9:b3:cc:e1:14:02:bd:e8:8f:cb:84:b6:76:9f:b6:dd:56:
e9:79:95:66:31:83:79:92:af:2d:14:61:f5:cb:6a:5a:cb:fe:
a5:8c:4a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:49 2025 by rpki-client