Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File: Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier: zHhapburCYrOymkjbAqWP5eVrUT3qGS7kuKMFCw6ISg=
Subject key identifier: 0D:EB:4E:7A:EA:10:92:1E:41:46:87:D8:C5:98:56:BE:AB:1E:1F:AE
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer: /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial: 0194BCAA2638F870615703DEBF8E6448621F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: VTMTtjqH-zixo9hQexyKWnuO0p4.roa (hash: QpOOm2VlJ9G/CZEjnwWuM3L+t5sPw22wtkcRl/OMgAk=)
2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: j3T2XsyeJbQYWiLXIg2TzjZXKVCQqJLzf2HfhM6wG60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:26:38:f8:70:61:57:03:de:bf:8e:64:48:62:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=0deb4e7aea10921e414687d8c59856beab1e1fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:42:88:46:5d:4b:96:5b:78:88:fa:40:8b:
b7:ab:40:20:b4:63:0d:db:8e:b9:46:ed:2c:13:65:
82:6a:ca:86:ca:4b:e6:fc:ed:dc:c2:b2:75:2d:28:
70:57:81:da:c5:a1:32:f5:a8:a1:2e:30:ab:5e:25:
5a:85:ee:cc:ec:44:4a:b2:d9:72:17:b0:cf:52:5b:
67:9d:c4:78:14:5c:1d:a9:fb:c1:6f:e1:13:23:52:
35:bd:93:9c:84:b2:4c:6c:6c:f3:11:0a:8c:18:81:
65:66:90:ec:1e:70:4f:46:e2:a8:bd:05:53:0a:f1:
e5:75:b2:68:95:13:b9:78:fa:a5:58:2a:e4:9d:8f:
8e:dc:58:f2:cd:ae:a2:be:fc:8f:27:06:d8:c1:f4:
5a:09:1f:2d:f8:7e:85:61:55:69:97:db:96:fc:ad:
62:0d:7c:e4:8e:79:53:06:96:ad:3d:25:3c:3d:e8:
84:6d:f8:9b:e7:57:29:7b:3e:d9:14:54:1d:c8:78:
e8:f4:25:2d:87:94:ec:48:0c:f8:98:a8:8f:8b:e4:
3c:00:28:ec:05:7e:9e:e8:52:db:b9:43:35:06:45:
eb:ca:75:4b:55:b0:05:11:48:3b:88:f8:a0:bd:eb:
16:c1:40:a1:6c:d2:1c:33:63:1c:14:4e:0b:df:14:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:4E:7A:EA:10:92:1E:41:46:87:D8:C5:98:56:BE:AB:1E:1F:AE
X509v3 Authority Key Identifier:
keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8c:e3:f8:75:ad:dc:a2:ff:81:08:c3:80:9b:2e:9b:14:b2:
e8:77:0a:31:be:6d:a7:42:21:43:90:ad:64:4f:3d:53:9a:1c:
f1:46:12:21:d0:c2:16:b2:b2:2b:60:cb:11:4f:62:1c:3f:a8:
92:78:66:4f:58:2f:de:13:89:73:71:01:cb:a9:74:59:82:ac:
71:de:c8:ef:67:09:32:5e:89:a3:e5:9b:dc:85:61:48:2f:16:
4e:ae:88:01:b7:c1:34:ff:98:23:9d:70:3b:09:94:c3:ad:d1:
01:33:2c:99:83:82:6b:af:2b:1f:09:86:c1:20:01:04:64:29:
1a:5b:ed:95:27:b9:c8:a1:1e:81:82:ad:88:50:34:a8:9a:ed:
32:26:58:27:68:ad:e3:c4:0b:b4:5b:b5:b6:55:77:22:ba:a7:
8c:40:12:fa:43:6d:af:ee:43:72:75:c1:e3:f8:9d:bd:3e:4a:
3c:be:15:d7:4d:ee:4f:f2:76:51:3d:1d:e7:93:4a:a0:59:a3:
51:ab:ee:29:28:f1:79:74:d7:b2:9d:ce:ed:93:ee:5f:db:8f:
d6:d3:64:5f:da:56:24:19:ef:24:9d:ee:23:ab:15:2d:59:5a:
f1:9d:5e:c6:67:f1:08:f5:16:f1:e5:10:6c:53:e7:13:72:57:
26:6a:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:16 2025 by rpki-client