Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: Nzz9pgYVHZ2p8BByc2butghGpMPt+w0i65SbHFHtauI=
Subject key identifier: D5:1E:13:65:54:41:43:8B:34:B7:2C:1A:FC:FB:6F:61:BD:EB:9A:D1
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 0194BC72CD5638ADBFD83059914780D1C474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 0CB0
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=)
2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: Hpkc9n0/C+JjfIQBHelIk9+H595I02rUYCNzdl48BLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cd:56:38:ad:bf:d8:30:59:91:47:80:d1:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=d51e13655441438b34b72c1afcfb6f61bdeb9ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:12:f5:07:59:b8:97:b6:44:21:aa:89:d9:
1b:a6:69:59:4e:96:46:1b:8b:ad:61:ad:c0:ec:50:
69:2b:a8:ef:0a:cb:8c:08:a2:fc:04:9a:6b:21:98:
2e:eb:5b:05:eb:fc:86:e3:d9:34:df:a1:89:74:f9:
ee:2c:ad:f7:8d:a2:5e:90:21:77:1c:92:41:8f:90:
41:3d:bf:df:ac:53:7e:7d:a0:2d:3d:97:08:5e:28:
ae:7f:f5:c1:c8:1c:91:00:3f:21:31:54:d4:ff:f6:
62:2a:13:3b:d4:c0:5a:62:d0:64:19:4b:41:1c:49:
ae:44:11:ff:5c:d5:00:df:26:b3:be:e1:8b:bb:23:
9d:d6:63:a1:c6:85:30:51:dd:f4:53:e1:45:45:59:
9f:4d:e3:6b:cc:bf:38:68:9e:10:1a:9c:21:29:da:
6b:50:de:03:08:8f:a2:45:90:d9:b4:47:f2:60:38:
56:96:74:58:9b:d6:ac:32:13:0f:8a:02:5d:1a:99:
66:f5:84:a9:b8:e3:65:38:d0:70:53:d1:27:43:22:
88:00:40:0e:9a:bf:50:94:e6:7c:4d:ed:6e:7f:a1:
b5:ad:2e:c7:36:3b:e9:74:d0:f2:7d:11:2b:b2:cd:
fa:bb:fe:70:86:b2:c7:b8:c2:04:35:21:e3:d4:5c:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1E:13:65:54:41:43:8B:34:B7:2C:1A:FC:FB:6F:61:BD:EB:9A:D1
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:36:9b:58:d8:2b:28:52:9b:69:2d:1e:31:52:da:4b:60:08:
bb:08:04:40:81:e1:9d:54:64:b4:43:1a:a7:cf:07:3c:e7:d4:
75:87:da:bd:f0:51:34:1a:82:77:d0:94:37:c3:7c:1f:aa:e6:
ce:81:44:72:c1:59:f0:ce:6e:f0:96:51:de:f6:7e:8a:60:b8:
ba:5c:40:01:53:97:bf:60:03:b2:72:15:c1:d3:d4:fd:b1:fc:
37:00:f2:f3:59:c9:3d:a1:51:2e:99:8e:87:24:a9:55:eb:4e:
5f:d9:f2:6b:f7:75:c9:6b:e8:1a:eb:4d:66:c4:1a:92:ff:2b:
23:8e:3f:b9:8d:83:cf:fb:c1:a5:37:79:45:82:ac:a6:5c:54:
ae:24:83:38:3e:e4:7e:8a:64:a2:de:be:09:0e:ed:66:12:14:
64:2a:6a:95:2e:ec:ef:85:34:aa:e1:83:19:b9:ea:ca:59:31:
67:8f:ea:4d:6a:16:41:ce:b6:1a:ad:79:b1:bf:bb:99:e0:3c:
40:af:3f:cb:e7:b3:4c:23:0a:18:72:97:aa:47:91:d8:5b:09:
99:dc:db:cb:75:22:1d:24:1d:f4:f9:3a:63:42:bb:c7:da:f3:
50:7a:14:18:0f:d1:97:48:1f:98:4f:57:11:39:b8:1d:4b:5c:
ed:25:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:01 2025 by rpki-client