Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: tWt8Bv5W1Y7kACVCPIcebH/SfBHSMxEjyzShvAnijMs=
Subject key identifier: 51:44:37:C2:A4:FA:AD:14:FC:22:78:84:64:2B:98:2C:A6:B6:50:64
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 0194BC3BF1EC3867492B37F71F2D734EAB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 0BDA
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=)
2: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: klwrQtQDWTW5kzIjYjfo+fxCsIyvJ57+NNKmcn8TsTw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f1:ec:38:67:49:2b:37:f7:1f:2d:73:4e:ab:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=514437c2a4faad14fc227884642b982ca6b65064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2e:f4:79:17:c0:aa:67:6c:08:e0:41:3e:50:
49:07:11:ca:ff:f6:24:c1:92:00:55:99:63:ff:a7:
6b:0f:e8:6b:ca:6d:7b:82:0b:d0:23:b9:c3:29:ed:
3d:97:b7:f4:e3:5b:98:e1:10:7c:ee:f3:d9:86:fe:
93:8b:c0:2d:7d:8c:30:c9:24:b0:6e:d7:ac:0b:79:
98:a3:43:ba:1c:ec:5b:e8:9f:ed:e5:90:fa:80:d7:
9a:96:e1:81:5f:da:37:44:d5:22:a0:e0:e0:df:1c:
fe:e0:f2:a6:65:3a:1c:0b:73:0b:2b:b5:36:67:17:
31:c5:f3:b0:30:6d:7c:19:e1:eb:64:66:9d:a9:a6:
d5:8d:75:ee:c8:8d:13:d0:5b:e0:7f:88:78:84:75:
49:6e:a2:05:32:91:a8:86:6b:4b:59:f6:27:87:01:
d9:25:b0:35:6d:b6:71:45:6a:5f:53:23:35:cb:6a:
2f:68:57:41:d2:ba:a0:b4:75:3b:cb:e5:ff:26:87:
42:4b:dc:75:eb:f9:3d:75:d2:9f:a2:ec:d9:39:b3:
d7:dd:a8:2c:66:63:1b:29:76:e3:f1:86:b1:ef:0c:
6f:53:9a:d8:f2:9f:d6:5f:43:9e:87:c2:31:43:c8:
6b:f7:73:9d:0b:e5:76:3d:bf:4f:4b:1b:10:10:e6:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:37:C2:A4:FA:AD:14:FC:22:78:84:64:2B:98:2C:A6:B6:50:64
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:de:7a:88:3e:37:8d:e5:3a:27:19:5c:9d:55:51:78:e1:52:
22:80:39:3a:62:5b:ea:60:eb:bb:64:1a:31:a0:b4:dc:52:e9:
64:9d:78:15:a4:8b:b8:76:da:41:5d:d5:b8:66:6a:84:ea:d2:
ab:86:3d:ee:e1:bd:ca:4a:cc:6a:0c:4c:0e:25:5b:c6:15:4d:
ed:1b:fe:bc:15:5c:1f:5a:46:cc:a0:6b:99:f4:52:1e:53:5a:
1d:e5:dd:2f:e8:45:77:1f:87:9e:8b:fe:81:c0:b4:e9:87:c0:
ec:bd:d5:82:15:88:28:b2:d7:0f:c6:61:ea:be:4a:e5:96:58:
97:f9:ac:63:27:a9:0d:fc:37:32:2f:ac:c9:89:c4:ec:3d:bc:
dc:e3:18:a4:55:25:9c:56:0c:82:02:05:2e:ec:c5:0c:9a:e4:
1f:87:70:e3:02:1c:73:80:21:dc:52:2a:9f:31:eb:44:79:4a:
a4:5a:59:e0:41:ee:f2:82:b8:6f:b1:13:0d:28:93:55:6d:71:
40:e4:ce:88:12:ba:27:62:b4:fa:55:60:ae:51:d8:c6:a2:4e:
e5:14:d2:39:3f:bf:6e:34:64:4c:ed:94:ae:5f:8d:f1:c9:18:
36:f6:59:90:82:36:e7:0c:ec:ba:87:dc:3a:a6:f5:9c:25:45:
00:bd:50:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:16 2025 by rpki-client