Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: ei9Bk2o79i4j/tlv/+ijx1ZQ5LFLi7QpzTttWAEP68Y=
Subject key identifier: 80:3E:05:AC:D4:D0:0A:E3:0D:17:9F:52:33:91:6C:65:73:01:79:8A
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 0194BCE0B0B3E74FF8AFE76659D0B230125B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: bNPgVHcUURcSa3qecKVGSLNBrpqyoIbbe0+HVfpDuUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b0:b3:e7:4f:f8:af:e7:66:59:d0:b2:30:12:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=803e05acd4d00ae30d179f5233916c657301798a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:57:b9:4e:74:5c:2d:7e:2e:0e:66:b4:6c:13:
37:2a:a8:25:78:f6:46:f4:0e:3d:8a:ee:c7:73:b5:
4e:9d:34:8c:30:5f:ca:27:70:89:4a:a9:9d:3e:e7:
2a:e0:a4:c0:61:e3:d6:f4:30:e7:9a:df:6c:0f:cf:
a5:2a:56:b3:13:25:7f:99:42:27:d6:f0:6a:7f:f5:
09:59:7f:be:85:09:4b:9d:ac:0e:b8:bd:be:8f:0a:
a1:ac:b4:a4:46:88:20:bd:8a:ed:f6:65:49:d4:67:
96:c0:7c:6e:c4:4f:56:ec:be:f1:3a:43:c4:64:85:
08:94:c7:5c:6f:a5:b3:c2:8d:fa:bb:84:79:4f:36:
76:db:a6:2a:8b:da:a5:62:f2:dd:6e:68:d0:23:4a:
9a:f2:c5:e4:d8:34:4e:c9:d8:20:ac:52:4e:43:95:
67:1a:76:27:d9:0c:0a:ec:ed:d1:65:c7:1c:ef:56:
7f:b7:d6:ab:9c:a7:06:da:7c:c6:fd:8b:ef:21:64:
57:4c:fe:53:c4:c5:fd:15:70:6c:73:b2:b9:a4:03:
90:0c:0d:22:70:5c:5b:72:43:4f:c0:46:72:ec:3c:
18:28:59:b7:5f:12:b5:46:a5:92:67:cb:9b:90:d1:
2c:78:cd:53:ff:46:40:0b:bf:5b:88:47:5f:3e:82:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:05:AC:D4:D0:0A:E3:0D:17:9F:52:33:91:6C:65:73:01:79:8A
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:46:24:c7:76:fa:eb:52:ea:92:15:9c:c9:7f:f5:cc:32:d1:
63:7b:5a:14:31:14:a3:3a:74:0d:6f:31:ae:33:d0:34:56:c7:
17:d5:e2:bb:26:94:43:15:27:67:c1:e6:08:8f:1b:15:79:ff:
1d:ee:2f:00:bf:78:35:c8:0c:6f:78:5e:3f:1e:1f:e0:3b:31:
fc:2d:92:78:f4:75:21:77:0e:84:da:61:b1:b6:a2:24:19:e1:
5c:12:74:72:9c:07:1f:3f:27:80:2c:bc:69:85:53:7c:3d:62:
31:5d:d1:16:3b:24:10:65:e3:b7:4b:47:9f:2e:3b:2c:95:ed:
f4:ea:c5:7d:13:24:7a:84:58:d1:fa:f9:40:14:77:f8:b4:28:
cc:29:21:c0:e3:15:9b:4b:b1:7f:37:f3:3c:5b:32:2c:1c:c3:
0c:e6:cd:19:11:6d:ed:1a:43:6b:aa:c5:78:58:2e:b1:46:dd:
13:f4:fa:1d:da:1d:03:8a:27:e6:18:96:05:59:c3:ae:dd:ac:
04:9f:a0:04:d9:c8:57:3e:c8:83:c6:09:d5:f2:67:4d:a5:96:
2f:56:bd:78:0c:dd:b6:83:76:4c:81:44:c7:4e:83:f4:0e:d4:
39:70:00:e2:08:94:74:48:67:5f:07:c1:6e:aa:df:a8:01:47:
6d:80:80:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:48 2025 by rpki-client