Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
File: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft (raw, json)
Hash identifier: +OizeL9UjmljTtdzJOZGQnB7EYn23we0nKBMEfZQN2o=
Subject key identifier: A9:F3:2F:78:65:7E:E5:5D:E7:BC:30:72:61:7F:C6:A2:0A:CB:00:A2
Authority key identifier: 67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
Certificate issuer: /CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Certificate serial: 0194BC0526396BE522428D00C3877E0504C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
Manifest number: 0385
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl (hash: qLElt/L3IlN+/ju9r+6HB5Sj+wngSQQTJQgVmG2kY9Y=)
2: nK_HCXY32Fzl4tvEIKTBph2J1Ds.roa (hash: Q85T1yXG2eaPvyBQfWAsYo6WtcGYElCI5jZL6LC33r0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:26:39:6b:e5:22:42:8d:00:c3:87:7e:05:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c507a0cdb531374437ebf46dd59a6bd07486c
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=a9f32f78657ee55de7bc3072617fc6a20acb00a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:1d:ca:2c:51:9b:98:08:d5:99:7f:12:cd:
ab:a6:63:9e:83:75:93:24:dd:d1:5b:5b:38:2f:5d:
f2:c9:03:5f:ee:46:c7:c2:11:70:03:5e:58:3d:d2:
1c:b9:e0:c2:cc:65:04:1e:c5:f7:23:4b:3f:26:f4:
7f:f2:72:57:0f:f2:c0:d3:b5:9e:49:0d:0a:c3:c0:
fd:15:e4:11:6d:8e:45:1d:cf:64:3a:d4:f7:dc:55:
3c:91:59:b5:ba:7f:22:e0:bc:02:a7:ec:80:6b:b0:
b8:0a:21:7d:ca:e0:e8:ed:14:14:44:58:0b:15:60:
c9:78:e3:58:b5:11:5f:6f:89:2f:ce:7d:69:8f:59:
1b:bb:f6:9c:1b:8d:74:bc:1b:12:f5:4b:e2:7d:00:
a4:55:f6:ac:8b:97:5a:c9:a5:68:da:a9:43:6f:c4:
1b:1c:50:b6:83:8d:94:39:48:36:0e:4f:0f:31:72:
2f:3c:fc:83:bc:4a:36:14:69:10:d4:a5:39:9b:bb:
bb:7b:f2:01:cb:6f:5f:5f:01:e1:99:b3:93:75:37:
7d:c5:06:56:95:44:37:c5:9d:2e:5c:be:79:87:76:
eb:06:6b:80:9d:2f:c6:f7:cd:ff:c4:bb:6c:11:22:
d9:83:96:38:e7:d7:ac:fc:d1:41:2f:5f:a7:9c:c6:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F3:2F:78:65:7E:E5:5D:E7:BC:30:72:61:7F:C6:A2:0A:CB:00:A2
X509v3 Authority Key Identifier:
keyid:67:4C:50:7A:0C:DB:53:13:74:43:7E:BF:46:DD:59:A6:BD:07:48:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/10fa00-ad6b-4b76-863e-4b35ad70cc1a/1/Z0xQegzbUxN0Q36_Rt1Zpr0HSGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f6:52:9c:0c:72:ec:83:27:90:ec:4e:8f:65:f1:b0:7d:5d:
ae:57:44:fc:a1:fd:af:8f:f5:85:ab:63:9d:a5:10:d1:f1:c9:
43:01:fd:48:4e:a0:fe:f2:3b:1b:c6:fc:ee:3e:7f:e2:52:83:
25:cc:9c:74:d6:ab:61:4e:6e:9d:01:0e:b4:d8:f9:04:8c:f1:
7c:51:32:6c:19:76:a3:d8:b6:d7:14:70:a7:3c:f9:b5:bb:ee:
84:90:7e:6e:78:d7:6c:ac:d8:11:04:ed:c8:42:61:45:6c:b9:
8a:98:f8:7c:71:ff:ac:25:b2:6f:ad:0c:92:71:09:e8:97:1d:
84:c5:13:84:14:b4:96:ff:5e:47:86:75:39:8e:42:24:5d:86:
f2:5d:52:af:6d:32:ea:28:52:33:b5:3e:2a:1d:41:63:78:8c:
a6:85:03:83:ef:61:cd:c7:01:58:23:b8:1e:15:0a:62:4a:2c:
ab:83:91:61:97:72:3e:43:85:cd:1b:b0:2e:99:f8:97:45:c9:
03:b4:e4:6c:c0:2e:0e:f1:2b:68:57:35:67:cb:7b:e3:5b:1a:
de:56:c9:a0:70:af:ae:db:de:ab:5b:15:64:9b:94:38:bf:db:
b5:db:fa:d6:8c:d7:63:38:30:b0:ed:09:6c:e3:22:d7:b3:d6:
82:d3:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:37 2025 by rpki-client