Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: L2PSkfWtagwT5C9nVtKY7pPAjWC56CIB27EGkXMzNoo=
Subject key identifier: 1C:02:7C:72:17:56:DD:70:54:11:24:DF:0F:0E:D5:05:F9:58:2C:A1
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 0194BCA987CC857C657ED7AB89E89CF5D54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0AC6
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: easxn2EDFmbDlU168cLsMlqxdoy4/pSMfE7oV3qqoXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:87:cc:85:7c:65:7e:d7:ab:89:e8:9c:f5:d5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=1c027c721756dd70541124df0f0ed505f9582ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:65:61:06:81:00:b1:96:e2:68:83:ea:c4:fd:
d3:de:8d:a5:0d:30:6e:21:a9:54:67:98:34:b6:64:
7e:d1:38:06:3e:3b:4b:0e:f5:4f:c5:aa:72:7a:9b:
c1:a2:95:70:97:4c:85:f4:a1:9c:a4:4c:da:77:37:
ba:e5:fc:ad:79:96:88:65:38:2b:07:f6:e8:90:2a:
05:0f:17:3a:f9:3d:91:d7:8e:fc:77:77:1e:7e:6a:
ec:b3:98:61:32:4b:80:56:f9:8f:80:69:d3:af:c7:
7b:f5:86:ff:66:22:7b:6e:dd:f1:03:29:d2:b8:aa:
19:ac:34:89:e9:c3:bf:7f:e6:bd:93:4e:e4:e7:e1:
a0:bd:9d:57:e1:8b:0e:01:b0:93:28:9f:c1:87:e7:
de:2a:05:75:54:76:77:cb:03:ba:10:6f:86:6b:1f:
9a:14:29:43:a7:f5:ea:74:83:93:79:40:fb:20:0d:
bf:63:b0:76:d2:5d:40:79:e6:b5:aa:90:d1:01:fe:
0d:7d:2f:de:56:cd:17:cb:c8:53:04:06:3c:a3:7d:
79:59:94:65:5f:14:89:28:6c:0d:72:d7:e7:95:d9:
00:2d:84:62:c7:48:97:97:c3:c9:af:b3:ff:02:94:
4c:f6:fb:1c:80:6f:b4:08:d0:0a:ae:92:5d:e9:72:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:7C:72:17:56:DD:70:54:11:24:DF:0F:0E:D5:05:F9:58:2C:A1
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:77:d9:73:9a:c5:7a:68:7f:b0:64:b0:73:5d:36:a0:18:9d:
3f:74:d8:2f:73:24:ca:ce:cb:5c:cf:2e:20:f5:79:d6:08:92:
a8:48:cc:85:38:d6:5e:13:7d:fe:b8:07:f0:3b:90:4a:dc:52:
e9:4f:fe:e1:08:19:7e:d9:c5:99:7e:9f:20:bc:38:d6:37:d8:
e3:a4:0c:d1:6b:ab:9c:65:ce:1b:46:c4:03:13:03:e0:92:29:
64:ae:71:87:d8:87:d9:9e:d3:0a:62:bc:5f:9e:a1:4a:18:1d:
db:c9:bb:4e:36:39:57:af:f9:57:3e:20:6b:c7:f1:9b:d0:32:
0f:b8:30:99:6d:5b:bf:f7:1b:fc:51:91:8d:1a:59:2e:86:6b:
57:15:85:5d:d0:ba:f6:f1:2a:b5:94:24:a7:f1:5d:f0:01:c7:
0a:4c:49:d7:ba:bc:f2:b1:17:37:ad:43:2d:71:ec:cf:76:49:
6f:58:5f:9c:9b:b9:9a:19:17:b2:4a:fe:c3:5b:cc:47:36:3f:
77:ca:a1:cc:5f:3f:41:71:2c:93:e3:b8:f1:c1:b3:c4:ba:c4:
44:4a:d4:62:bf:33:f2:f9:88:62:1c:0c:28:96:d3:a2:19:72:
3d:ed:d2:e4:aa:f1:ff:eb:6d:2c:47:79:07:98:2d:9e:fe:fc:
db:d2:57:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:20 2025 by rpki-client