
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: zOP7FauteghX8lR667V+oKr3EHseoRMTfVBWQKOKN74=
Subject key identifier: 6D:A3:0A:3B:39:D5:F3:7E:99:CD:D6:03:2D:CF:CF:9B:2A:75:97:0F
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 0194BC3C1A9A152118ADBE9BEA730A19256A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 10D1
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: b4hSrulYDmlcZLfrf6CjQEWdrSII+hpMyIC4mU6IsNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:9a:15:21:18:ad:be:9b:ea:73:0a:19:25:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=6da30a3b39d5f37e99cdd6032dcfcf9b2a75970f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:5f:02:1b:f2:9e:f7:c2:06:7b:99:eb:90:
07:ab:3a:05:70:d6:54:6c:e0:5d:f5:31:95:dd:88:
bf:9d:7c:13:61:72:49:34:ca:69:e9:d8:34:ff:ce:
c8:76:32:bf:3d:1a:ac:0a:7a:60:e4:2b:f3:58:ad:
21:59:7d:83:89:b8:da:77:f2:6b:20:9c:e3:63:83:
3e:67:74:b0:cf:1a:cc:b5:ad:ac:1d:d2:de:06:cd:
92:35:09:bb:06:bf:a0:40:3f:dc:81:00:af:f2:c9:
d8:a5:13:4c:88:c3:54:3e:5a:bf:ce:03:2f:03:1a:
92:e0:30:48:84:08:5e:cf:b2:32:87:1d:73:6c:b5:
80:31:10:10:e8:e1:31:10:b1:0b:ab:4a:5e:eb:8f:
49:d8:88:59:46:a9:df:00:d0:bb:fe:8d:e1:65:54:
73:25:a3:1c:ce:f4:28:e0:6a:0d:a6:4d:d0:86:0d:
3d:1e:28:20:a3:05:ad:94:6e:53:f6:c6:7d:0d:08:
43:c9:68:ea:ab:3d:03:67:d0:c0:76:1b:3a:3a:cf:
a9:92:17:1f:b8:f4:28:67:cd:68:1d:b3:b0:b4:77:
b2:a2:dd:98:9c:98:c6:cc:7f:10:35:b4:6a:ff:fc:
6f:45:7a:80:cb:85:84:4c:c1:2a:e3:56:20:35:fd:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A3:0A:3B:39:D5:F3:7E:99:CD:D6:03:2D:CF:CF:9B:2A:75:97:0F
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f5:fb:7b:8f:a2:e6:fb:64:55:41:3f:c2:e6:17:eb:3e:41:
9e:aa:eb:69:c9:82:44:91:44:15:66:32:e6:77:70:e5:d5:74:
fd:c1:e7:d9:46:f1:93:51:41:46:a8:6f:7d:af:56:45:a6:5f:
ec:91:8f:1a:86:86:aa:fe:04:93:7d:26:50:fb:b5:10:84:cc:
d3:4b:46:24:de:40:48:b2:77:f4:57:96:91:28:ec:1d:f1:05:
b6:a8:41:52:4c:40:f9:53:de:26:7a:d3:c4:ef:11:2f:93:75:
76:49:2b:6d:14:83:e1:d1:46:a8:29:9a:ac:33:d8:bb:4b:b0:
08:d8:32:90:69:67:04:59:18:e9:69:4f:fc:70:5f:1f:74:99:
62:c8:ab:6d:6b:c8:86:ae:56:62:73:11:bd:0c:8a:27:80:cc:
b7:19:35:5b:a1:cc:92:6c:41:9a:33:a8:35:5b:af:01:c4:ba:
d6:27:a3:33:8d:94:23:1b:81:cb:70:a1:67:07:8c:52:ae:cc:
e6:80:8c:0a:bd:14:b6:a4:13:16:b1:4e:4e:6e:61:f1:06:cb:
41:20:ca:8b:43:d3:1c:60:32:d2:a3:88:df:14:84:e4:1c:46:
80:3b:c7:48:37:dd:e7:17:3b:e9:a0:d3:18:9d:ed:ee:2c:2e:
7a:68:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:03:00 2025 by rpki-client