Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: BfBPHP8gRyd7g6/hxgm3K5kO9womgQ8It6jdAv3qW/k=
Subject key identifier: BB:32:2B:79:3F:31:35:31:4A:DC:92:ED:01:BF:CC:8C:31:15:F7:D0
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 0194BCE0BA29D61F4D4C20C3E38E4D68BF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: hGc53ZnKTWODKrGLBmiGvM96G4sBIwne+nfilIwHm+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ba:29:d6:1f:4d:4c:20:c3:e3:8e:4d:68:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=bb322b793f3135314adc92ed01bfcc8c3115f7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:f3:bf:43:55:cb:57:4a:57:07:dd:ac:5a:
ca:9b:8b:8b:6c:d7:a5:18:70:a6:3c:28:0b:6c:d2:
57:e1:58:89:a3:3d:f0:48:24:b6:6e:5e:f0:3a:61:
63:2d:e4:34:f6:24:0e:aa:ee:95:0a:86:8e:f6:62:
a9:c5:51:d5:6b:29:cf:1a:f0:e1:93:91:68:da:41:
ff:23:81:0a:73:6c:10:2d:e3:9a:44:f6:91:b8:e4:
a2:c2:a5:b4:ec:19:34:9f:ac:e1:6d:ef:57:e5:fb:
98:7f:64:cc:60:69:d6:52:01:3c:98:46:9f:0b:98:
a3:cb:ca:4f:e7:a9:17:82:57:4b:46:08:61:98:fd:
96:97:00:70:a5:72:21:e4:ab:6e:89:e5:03:f5:d4:
c2:7a:94:f3:64:fb:df:bc:09:5d:c5:0f:05:fa:37:
45:87:03:0f:f8:16:af:64:45:50:3c:fb:d6:91:fd:
ac:45:43:f6:6b:84:d8:57:10:d9:f6:c2:cc:11:8a:
86:49:32:96:f3:46:a6:4e:ed:40:d7:1d:4b:2d:1f:
49:90:d5:1e:2a:3d:e0:64:21:73:a8:0d:7f:ea:9b:
56:01:03:ad:e7:b8:c4:e0:b1:d2:94:13:aa:72:e4:
0a:70:69:b0:0f:cd:67:31:20:7c:1d:f7:ab:54:2a:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:2B:79:3F:31:35:31:4A:DC:92:ED:01:BF:CC:8C:31:15:F7:D0
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e4:6d:93:69:4b:61:0e:f6:88:0b:aa:c2:23:af:a5:75:41:
39:07:9a:10:38:67:cd:47:ad:ae:75:9d:05:b3:17:b3:3a:16:
87:13:3d:bf:df:00:aa:83:f6:f5:58:23:7d:7b:4a:4f:53:be:
6b:f1:f0:47:92:5b:ae:b5:58:92:67:e8:5d:32:d3:4c:09:51:
c3:20:e5:6a:e5:c3:51:1e:23:38:58:7e:3f:41:ae:f3:ce:8f:
81:ba:39:5a:04:54:4f:62:9f:32:16:22:3f:ef:21:60:a9:0c:
74:d1:80:c0:94:a4:1a:5a:d9:85:ca:fa:76:7f:78:6e:f0:ed:
c9:2a:33:56:30:ec:6b:04:d8:91:2e:1b:36:79:eb:f6:22:da:
28:a0:9f:73:18:8c:6f:5b:b4:d0:d1:67:ac:7e:6c:e8:91:48:
13:37:1f:7e:e8:d7:4b:1e:e8:db:dc:c1:de:2f:2e:d7:72:63:
e4:65:f5:37:97:41:a3:9e:90:99:9f:23:5c:7e:52:e6:d7:12:
45:f3:a8:1b:b7:30:9e:f4:4f:9e:e0:dd:0a:62:32:2c:33:17:
25:97:19:2d:a1:f1:02:da:67:c5:14:aa:90:8f:b2:19:aa:07:
1a:5f:eb:57:9a:f0:0e:51:cb:f5:b1:59:2a:74:6a:c0:15:57:
31:ec:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:49 2025 by rpki-client