Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: Q8FN8arggEe1x3qjjifma561EYrWZDynbHZVkLovjS4=
Subject key identifier: 34:21:62:E9:54:DE:4E:28:D5:5B:14:6B:10:CE:DE:07:13:D3:D2:B1
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 0194BCE092E172A6C53B7D7C2548CC5CDD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 02F8
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: COOSirhVHTLVRSIt4NAQH8L8vr4.roa (hash: tu1lQ0uqkhi4vcEmV6leM3hmh+odZkH5lyLz+npAcNE=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: 2RdI715tmAYHjtkyk8IIh/KDDi1IgLuuX9xzH3xWCPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:92:e1:72:a6:c5:3b:7d:7c:25:48:cc:5c:dd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=342162e954de4e28d55b146b10cede0713d3d2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:5e:f8:62:3a:a2:65:2f:13:7f:3e:93:b3:
9c:17:dc:e8:58:8b:6c:06:a1:6f:16:08:67:0f:59:
c4:27:8f:47:04:e8:a8:7c:fd:73:ae:01:9f:7a:49:
a8:f1:af:7d:9a:77:e2:f2:89:dd:89:9f:04:82:9c:
b6:0a:f1:f4:5e:05:84:f9:33:83:3a:c3:40:a7:28:
44:83:7c:ed:d5:33:ac:c2:48:b0:ef:46:c2:bf:83:
d0:f9:cb:af:16:e0:7c:2b:59:19:ce:5d:89:8d:04:
7f:73:4b:03:97:70:48:f5:60:f0:8f:f7:94:17:f4:
58:9f:fd:70:86:52:c5:31:b6:8d:b4:0a:94:1f:44:
2f:69:1a:13:66:ab:c6:f7:7b:33:94:22:c3:c5:1b:
a8:25:1c:5c:85:c5:eb:85:ae:26:91:bf:13:9e:00:
7e:38:d2:9d:b4:5f:ac:27:46:85:cf:8d:fa:da:ca:
78:5b:7b:5e:4d:78:6a:fd:97:12:1a:d7:66:eb:e7:
5d:1d:97:ca:9f:cf:3b:c8:f3:aa:2d:ed:16:81:da:
e1:28:a2:a5:6c:d0:65:23:4e:cd:97:1b:fe:47:38:
24:03:14:76:4b:3a:6c:7f:b3:b6:77:f2:98:a0:4f:
1c:36:c5:c3:72:16:1f:6f:a4:90:0d:98:62:c2:5d:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:21:62:E9:54:DE:4E:28:D5:5B:14:6B:10:CE:DE:07:13:D3:D2:B1
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:01:5d:74:9a:f5:3e:5b:a6:6b:2d:ed:67:8e:85:a8:d6:e0:
c9:4c:8d:1f:4a:e7:6b:d0:29:62:aa:ca:32:fa:d8:9f:b8:00:
ea:33:c3:d7:e6:ea:eb:ee:0d:f4:9c:77:c0:88:b6:59:68:74:
c4:42:61:1e:4a:6c:80:d6:c7:8f:7b:a6:49:b7:99:a1:ef:7e:
b1:12:c9:38:bc:c0:fa:ac:31:d5:9e:3c:2a:7b:bb:22:6f:84:
fc:04:1b:41:6b:90:d0:17:a8:a3:18:72:35:a8:b1:66:c3:ec:
c9:e0:05:da:48:3d:9d:0e:1a:bd:50:7a:71:fe:26:f0:4e:90:
1d:22:26:9c:1e:6b:9f:e6:96:6b:94:bb:27:0e:7f:d6:cc:37:
f4:aa:c1:76:0b:87:b2:d2:5e:f9:c0:03:49:92:b2:de:7a:3e:
ff:c6:52:10:1b:49:ec:60:90:f8:85:3a:cb:ec:a7:d6:4a:80:
24:f8:76:c3:7a:fa:77:85:29:ba:21:9d:83:4f:ae:51:ba:a7:
8d:e8:47:f1:7b:38:28:26:b1:21:84:f5:90:4c:a4:b1:1b:b4:
f1:d5:b7:fc:ba:6c:74:fd:d3:6a:17:b5:3a:24:a7:8b:3e:ad:
e6:c0:7f:62:98:87:7e:50:2d:04:93:ce:27:30:a7:97:09:ff:
44:49:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:46 2025 by rpki-client