Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier: Pi5H7FZEIM4VWnxJLrz/JnNSkTabd4c90ZtiWZL1krs=
Subject key identifier: 59:7F:60:81:3E:91:06:0A:8C:7D:F7:B0:DA:22:68:B7:93:30:BB:1C
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 0194BBCDD787D2D260C5FE5C4C62F7FBFD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=)
2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: 9Ttcb89oGCYDRRsW6FXvptK8RQ8fMXk63wBc2rSzu5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d7:87:d2:d2:60:c5:fe:5c:4c:62:f7:fb:fd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=597f60813e91060a8c7df7b0da2268b79330bb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:98:26:5f:3a:3c:26:e5:cb:56:e5:99:d8:
4d:a4:d7:86:5d:0c:b3:4d:50:3b:1f:63:98:45:d3:
d9:62:5c:18:4d:31:9e:e4:24:7f:9b:43:5d:3c:81:
bd:eb:d1:eb:1a:8a:a2:0d:0f:a0:b4:27:6e:9a:2f:
21:4e:9d:94:8a:93:6f:04:83:dc:11:f5:5a:59:5f:
1b:53:97:c9:cc:36:fe:d2:27:09:40:e0:48:a2:8f:
fc:06:78:4c:87:a4:77:71:fa:f1:41:99:42:d2:7b:
fe:ec:59:0f:91:e6:f5:d6:a2:b4:f2:06:e5:fd:88:
ee:db:56:79:9d:ff:bb:0c:e7:b8:03:45:58:cc:15:
6e:f7:af:9e:b3:c7:50:a4:b3:af:4a:b3:98:26:4d:
01:f7:ac:58:68:f5:c9:34:36:25:b4:41:a3:fe:7d:
7e:ac:89:a0:c6:3b:55:34:04:77:cb:2c:9a:a9:c9:
e0:cc:97:20:54:37:34:d6:89:84:e5:f0:35:b9:c4:
db:db:22:49:0d:a3:e9:59:9e:0f:dd:55:a0:40:09:
cc:82:b8:ec:a9:c7:a3:e5:dd:c6:0f:44:c8:46:68:
23:5f:9e:84:0f:8d:da:80:fe:cd:3a:7b:4f:d4:f5:
2d:c1:d4:71:d3:c3:df:8e:fd:b2:24:12:6d:35:82:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:60:81:3E:91:06:0A:8C:7D:F7:B0:DA:22:68:B7:93:30:BB:1C
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7f:42:8b:96:54:e0:d9:9a:5d:9e:87:7d:5f:47:7a:b5:b6:
a5:6c:af:95:d7:24:95:4f:b6:1c:2d:cc:2a:39:6c:df:50:83:
01:be:ce:ba:d7:cd:b4:ed:61:7b:44:4e:22:18:c5:ec:c4:6e:
41:d8:35:87:01:aa:21:d3:82:6a:70:9d:03:47:ca:81:f2:14:
ee:67:6d:2f:21:06:46:0f:28:6b:52:3c:7c:cd:10:fa:e4:f4:
6c:02:41:13:ae:83:0b:2c:9c:c2:d2:38:81:0a:ac:a6:4f:f4:
24:c2:e1:8d:3d:62:18:87:37:00:de:93:dd:62:1a:52:00:c3:
51:06:d5:6f:17:cf:8d:d1:72:78:1b:03:56:ce:9c:01:e4:3b:
0a:39:db:64:9f:92:f6:8f:b0:3f:cc:1a:91:2f:6d:ba:ac:75:
bd:eb:d6:a5:f6:b3:d8:cf:ef:8c:91:22:b4:82:5d:0b:a4:47:
49:62:16:2b:b3:05:31:62:e8:b1:20:e3:21:7b:ad:0c:8d:2e:
55:18:e1:b5:28:12:0a:6d:42:ad:46:03:74:c6:7c:70:6b:ff:
ba:46:d8:90:70:e8:ba:c4:ff:3f:f3:ba:80:cf:65:8e:e8:f8:
f7:67:f7:f9:92:2f:c5:cd:97:b1:20:e8:3e:a4:fb:37:2b:cf:
1e:eb:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:57 2025 by rpki-client