Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: eUib5qX9QP2IZkKHKr8Jh5cF4MH1TQ+xYQByCYth/eM=
Subject key identifier: 9A:E0:CE:66:2E:31:4E:9B:76:50:29:9F:27:80:F2:74:4A:AF:41:E2
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 0194BBCDC7C19A49E2C35608E40947CF9E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 0F35
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: HxGJFtmrCXyB2GWfXuBWUdCj1ctmpiV7Cj0oePYnHtU=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:c1:9a:49:e2:c3:56:08:e4:09:47:cf:9e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=9ae0ce662e314e9b7650299f2780f2744aaf41e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:03:94:a9:a0:df:22:88:dc:43:f4:0a:ad:
12:11:8f:fd:18:f5:6c:ca:72:00:c2:2e:a8:ba:80:
3a:42:d5:96:c2:c8:25:d7:87:d3:e0:ac:5e:62:2f:
70:7c:b9:1a:08:35:76:b6:42:89:80:67:f4:ea:16:
30:67:2d:f9:76:eb:e6:1d:43:17:b3:b6:65:ce:a8:
c8:a6:d9:d8:f9:48:08:cd:6a:93:5a:08:b5:b7:43:
02:83:da:50:f4:bc:e9:df:98:ce:16:a5:a7:f6:6b:
b3:f5:27:68:45:cc:19:38:4d:91:dd:46:bb:32:41:
05:f6:a1:13:ea:40:15:3e:f7:54:b3:f7:02:fb:6a:
f7:7d:f1:01:0a:0e:d4:00:99:78:ff:ce:dd:b5:e4:
9f:d8:52:af:26:95:a8:aa:7d:10:b6:26:0e:4b:7b:
f7:e8:10:ef:79:23:ed:51:d3:e7:64:50:1d:c7:41:
64:f9:1a:41:ba:92:d6:b8:42:18:cc:da:76:05:24:
b9:4f:0b:c3:84:9e:a7:d8:db:75:4b:9c:ee:01:04:
e0:77:48:25:cf:93:74:75:af:4a:a6:bb:62:75:fc:
7a:00:18:0b:06:06:1c:bf:6d:bb:80:58:de:e1:82:
e6:12:6e:ab:b9:fb:2a:99:02:ea:11:ba:dd:89:c0:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:CE:66:2E:31:4E:9B:76:50:29:9F:27:80:F2:74:4A:AF:41:E2
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6d:ca:65:b3:05:f7:86:3e:3c:d3:0d:8f:fa:0d:da:32:b2:
5f:b4:c6:53:1d:d9:b7:1a:99:bd:f4:eb:a0:96:cb:27:68:5e:
9f:63:77:af:4d:7c:ab:d2:a1:66:21:8e:23:6a:83:3c:6f:b2:
ca:2a:bd:3c:00:f5:4b:55:00:a8:8f:12:f4:08:ca:b5:6c:9f:
06:bc:9b:f5:ca:a8:dc:76:25:a7:dd:4b:37:f0:ab:b8:36:d7:
4b:c6:78:2f:bd:ec:04:49:5f:12:e5:d5:72:3e:a4:76:66:37:
e9:94:a8:05:22:8b:c2:e1:45:04:6b:99:b9:a2:be:02:14:f7:
31:6e:e4:b8:51:c6:91:8a:b1:a4:bc:3a:ca:fd:47:a3:2f:ef:
a4:78:2a:9a:3a:85:46:3a:5c:1b:92:cf:bb:1e:25:0b:f1:cf:
35:ad:e7:8e:18:89:10:8a:16:4d:ad:b2:ad:a0:c9:a5:73:b0:
cd:bb:00:f5:b3:a2:12:e7:ad:89:89:06:f4:b9:04:ad:ab:ce:
f8:e4:4a:27:9a:bd:96:bd:dd:66:f3:85:b3:84:9b:7c:2c:4f:
a0:b1:06:b0:f9:31:59:15:0e:a9:9b:87:f3:41:ee:ef:5d:17:
bf:b0:10:15:6d:56:17:6a:9f:55:c7:58:c9:56:59:53:65:61:
51:54:5a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:10 2025 by rpki-client