Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json)
Hash identifier: 0M+c2fzFDhLJ5eQv29V3CMPJwOsbTRyvb9VWaCVpRag=
Subject key identifier: C1:2A:66:3A:F5:85:DE:42:57:DF:9F:90:13:2B:1F:B4:AA:C3:C8:D2
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial: 0194BC04D25C89CFCD58226BD9A773E13D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
Manifest number: 09C6
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 0_tGmdVdpjc2L8zUWyzyW9iPObU.roa (hash: bn84kxibGx4/EOPh2OY0dkRz9RK07gMRfVN7WrprjOg=)
2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: F9Pt87x3qqh/hPGk7M9ngkYUasOFHFsNlRcoQQGwweo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d2:5c:89:cf:cd:58:22:6b:d9:a7:73:e1:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=c12a663af585de4257df9f90132b1fb4aac3c8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:61:01:17:2f:45:4b:02:0f:03:10:55:73:
ba:fd:d7:97:a8:8c:6c:8a:d8:77:81:37:74:41:b2:
ff:01:fe:df:a2:b0:7f:6f:f4:14:e0:07:c2:d2:ee:
51:d6:56:e1:cf:28:8c:7b:5a:e4:d3:2e:bc:d0:7b:
c3:ab:73:7e:8f:51:e6:93:4a:3e:88:b6:a7:54:ba:
cc:34:8b:2b:28:9b:f6:89:13:f5:af:99:45:17:1e:
ab:be:e6:ca:ca:3b:6a:f9:02:c3:4c:63:48:8c:fa:
bc:05:36:39:3e:77:b3:79:22:2f:c8:12:90:52:70:
7c:ce:d4:5d:62:d6:a1:57:97:86:08:fd:ce:88:08:
83:a9:af:54:58:cb:7a:8d:cc:15:9e:8c:9a:67:00:
8d:6d:9d:72:bf:61:ac:8a:f3:27:2e:ff:a7:e5:39:
d7:09:38:f5:32:0f:f4:77:9b:4b:2c:35:e4:4b:77:
57:32:19:41:9a:18:c0:8e:0a:87:c2:ff:86:09:01:
8c:17:73:c7:16:e6:8b:57:6a:22:e3:eb:30:c3:2e:
a2:17:b5:79:bd:02:72:64:17:7e:1a:21:23:d8:33:
a0:02:94:51:af:77:9b:c6:c3:eb:6d:56:19:4f:c4:
a2:39:70:c3:df:81:64:43:48:6d:fc:69:50:16:b6:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:66:3A:F5:85:DE:42:57:DF:9F:90:13:2B:1F:B4:AA:C3:C8:D2
X509v3 Authority Key Identifier:
keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ec:70:2f:d9:4c:81:cc:b6:ea:55:24:83:3f:f8:a4:dc:d4:
48:31:88:96:7c:70:f4:70:b5:0f:e4:bd:65:d8:e9:14:77:2a:
c3:21:e3:68:15:f9:3c:f4:82:be:48:d3:a0:52:0a:3f:7a:6c:
79:6b:6f:02:5b:f1:a4:6e:5d:cd:45:53:53:3b:e9:84:a3:20:
e1:f6:0b:e1:53:b5:34:c4:0c:da:8f:83:14:3b:d4:44:55:47:
5b:6a:a9:45:12:83:a2:5e:12:6a:00:88:42:73:45:26:eb:a5:
1f:1b:20:c3:21:c6:c7:c4:44:53:c2:02:99:87:d6:00:77:98:
16:82:05:44:45:89:0e:fa:b2:44:08:e6:98:9d:97:57:8d:8d:
c8:02:9d:1d:72:cd:03:f3:53:65:61:c3:d9:ab:9c:61:fd:29:
db:37:e5:e6:f3:e2:ef:5e:d6:10:cb:3d:ee:f2:ff:ea:e4:b9:
24:56:ae:02:dc:5b:0e:e2:8a:8c:d8:0b:2e:80:69:f0:b5:01:
3b:0b:e7:7a:21:5c:3b:a1:1d:15:94:a2:46:e1:42:7b:1e:77:
ba:fb:47:a1:02:86:ac:6c:2c:09:f7:c8:7f:74:52:f6:57:6d:
86:89:d7:8d:ae:ff:2d:21:a5:50:eb:f2:82:aa:a7:9b:1d:3b:
27:6a:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:11 2025 by rpki-client