Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json)
Hash identifier: 4Qh6Ipv2VKggSJF9oj9aHWuJA/Y/uGY8Y2GshsXMpO8=
Subject key identifier: 8F:4C:DF:2D:75:0A:AE:F9:9D:48:D0:75:06:89:3C:38:97:30:65:8A
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 0194BC72CBB1668D9096D1BEF8893541ACE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: 1jI0qKdlAHM/8Xk1I/PIblhI32cg72P5TjDWzj69A24=)
2: azO-aDRzdJeZXPnkpaxb8BBtrU8.roa (hash: z6om+JaM7Y2eklhyA3h/kaXOgcnoTRDFx+JOSlMYz7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cb:b1:66:8d:90:96:d1:be:f8:89:35:41:ac:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=8f4cdf2d750aaef99d48d07506893c389730658a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:ed:c9:88:a5:1a:b4:cd:56:9b:f6:8e:0a:
50:43:68:8f:7b:a3:f5:3a:e6:50:7d:7a:00:e2:8b:
70:f5:b3:c7:33:49:b3:3a:02:95:1e:f6:7a:2b:4c:
6f:ec:88:1c:be:96:09:75:e1:19:89:b7:50:60:ac:
22:36:34:46:1d:2b:69:1d:18:16:a8:36:ed:70:9c:
0b:ce:96:02:47:30:db:aa:b9:9b:e5:e3:c4:90:51:
1a:4e:b6:04:ad:a4:2b:ce:7d:8b:6a:6a:f2:0c:a2:
3c:18:b8:3d:a7:74:a8:70:b9:0b:77:82:3b:12:b5:
a9:97:7e:5d:73:47:1e:ff:84:73:f8:36:50:e0:54:
0b:11:aa:9b:da:06:11:7f:7b:f8:3a:f4:aa:ac:46:
0c:d1:eb:9a:90:6c:a8:ac:3b:4b:a2:3a:33:6e:f4:
e2:94:69:b1:df:13:c0:e8:38:ba:35:42:78:6b:39:
99:7b:87:0b:60:0a:d5:55:a4:91:c3:98:b6:cb:0a:
ed:ad:ee:1c:9a:56:de:72:24:fe:03:8f:44:c1:8c:
36:48:48:5e:a1:76:aa:4d:67:14:bf:a0:4f:1a:f1:
d4:37:95:1b:4e:1c:1f:e0:f7:fa:d0:b0:46:05:69:
80:a2:7a:fc:37:3b:76:fa:7b:5e:cb:10:2f:28:45:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:DF:2D:75:0A:AE:F9:9D:48:D0:75:06:89:3C:38:97:30:65:8A
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ae:2b:c1:db:9f:f7:7c:51:d8:97:bc:6b:6e:ed:15:24:1b:
e8:9c:a7:b2:d9:f7:3c:6b:1b:e6:2a:dc:15:13:5b:28:bf:0a:
3b:a3:18:36:95:29:1d:b1:36:a6:63:c0:1c:63:f2:e1:90:f8:
fb:02:f3:65:25:a9:de:4b:7e:0e:b9:43:b8:c9:9e:ec:2f:89:
a3:d0:16:95:2e:21:df:d6:88:2d:90:4c:c7:73:9c:f4:25:54:
4e:ca:de:55:4e:46:4b:d7:ee:84:c8:9b:2f:2f:a4:01:33:e4:
75:28:da:b4:d8:0b:c2:ad:35:fe:a4:85:61:6e:84:df:45:18:
1a:ae:de:04:37:92:14:3f:4f:80:ee:89:ed:79:10:34:8d:5b:
9c:ca:a4:ef:93:bd:c1:20:52:76:ba:df:14:b7:22:04:d1:0d:
63:ce:28:e4:c6:bf:90:58:63:1f:ae:90:f1:09:48:77:ab:5f:
e2:29:74:8f:c1:3d:71:9a:4f:00:a6:2b:21:4c:81:d4:e5:e6:
95:c6:ad:f9:39:18:c3:76:74:0e:74:f8:a3:10:05:ec:86:57:
7c:47:d6:ae:d6:35:e1:ce:e7:dc:40:a7:82:93:c6:ba:a5:59:
70:1c:78:7a:70:3e:03:02:f3:57:96:ff:33:cf:3d:0d:96:5c:
21:3d:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:24 2025 by rpki-client