Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File: ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier: ykN8YvOo6/5oDW0gzoSSuw5vOk/E9Tv/W5BWmKOrJ/Y=
Subject key identifier: 8D:24:0E:6F:36:44:98:F0:E5:56:26:FC:4E:45:F5:E1:71:9C:12:B8
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 0194BC3C7E5A942B761AB3D32558BCC9460E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number: 0D87
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: Rq-lqv8nvaGlsC79el8fMA5_1rc.roa (hash: T0ctud47vtW/7aXgZpP0x6VHkVLrf38PbYskxMdhNRg=)
2: X_fPOs6YAZH2TT4IWQcW6KOL-FY.roa (hash: bxGSJtgvXh/lnDA0x6ePZz0W8ihJege1t3FViWTKXLY=)
3: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: nyfnKYJhRxHVWf7o7jIyeFfQ7HJDYAO5h5eK/bDz7WE=)
4: z7EntH2_RgrImndWaf9CHwQF-tM.roa (hash: At0xjBHWEf4xXBr9D4SeVUGhACOqx602brOEncq8KCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7e:5a:94:2b:76:1a:b3:d3:25:58:bc:c9:46:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=8d240e6f364498f0e55626fc4e45f5e1719c12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:f0:c7:04:c7:68:5e:ad:00:cb:b1:b4:52:
71:90:a8:9f:f0:35:df:9d:fe:c1:8d:90:c0:c0:48:
a6:00:92:26:0e:08:93:67:b5:28:35:d6:3a:3d:05:
ef:24:7a:4a:8e:f2:e0:78:cb:89:22:bf:88:98:fb:
0c:bb:0f:31:a2:bf:08:c0:09:30:9a:42:f4:41:53:
e7:f7:f7:a5:89:8a:68:d5:81:86:1c:e6:01:3c:17:
86:ea:84:ff:93:94:6b:94:be:21:4e:d9:c0:ec:af:
af:0b:b3:29:58:9e:4d:4b:55:f9:82:1e:aa:15:41:
1d:41:56:d0:84:be:27:d4:5c:07:e9:87:1d:23:ab:
e8:df:94:bb:48:a1:f0:8e:e7:cc:5d:6d:e9:06:0c:
33:1d:a2:99:ec:c5:38:44:fd:bb:c1:dc:f2:9c:2f:
eb:60:8e:2f:1c:38:3e:fd:4d:58:7a:18:f6:d8:6e:
f2:d2:78:b4:0e:1c:60:5f:f5:e6:bc:d1:e0:bb:ab:
e8:c6:d3:99:f4:c9:fe:15:32:d6:1d:4a:44:51:4b:
87:4d:4e:72:e1:1f:73:db:70:b7:41:ac:50:66:8d:
29:4f:31:11:2b:b4:2c:05:6b:e1:c6:2e:17:09:74:
70:c6:56:e0:22:76:c1:2f:30:c1:f8:66:e8:4b:02:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:0E:6F:36:44:98:F0:E5:56:26:FC:4E:45:F5:E1:71:9C:12:B8
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:78:c8:ce:5f:4e:ca:6d:16:59:44:42:aa:2a:f3:fc:00:
ff:5f:3b:a1:81:d8:65:e1:f8:ff:43:09:b4:0b:b3:cf:77:e4:
a8:fb:bd:2e:a7:bb:98:db:d1:d2:c1:a0:96:2d:c5:ec:68:a4:
b7:80:52:87:bb:dd:99:69:f1:21:83:f5:e6:03:f1:2c:54:5b:
c8:2d:fd:d7:98:d2:7c:59:6c:58:52:15:02:9b:3a:4a:4a:79:
5a:b1:a0:31:cc:1d:18:be:5a:17:a7:ac:a8:bb:09:cf:47:1b:
07:69:31:fa:e3:3c:8d:bc:18:b7:50:76:83:66:33:89:a2:f7:
cc:e0:18:86:e9:69:0b:a5:3a:84:87:a3:5b:8f:f4:3d:d2:c2:
a7:22:f9:ef:66:aa:de:69:1c:ea:c0:a7:f4:ff:e3:99:a0:93:
55:fe:ac:a9:f5:25:eb:7b:e4:a2:f8:b5:17:ae:ff:c7:47:8d:
23:c9:5d:bb:34:81:8c:bd:58:b0:98:7f:ec:22:8a:e1:b5:ae:
d9:27:15:a3:77:58:e9:92:72:75:ee:0b:25:ec:0a:30:b1:6c:
3c:6d:64:d2:ba:03:ef:6f:9f:a2:73:f0:bd:73:6c:79:df:c5:
0d:bb:ba:58:a2:3f:63:a8:e2:91:54:59:df:42:de:7b:97:17:
77:fa:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:26:29 2025 by rpki-client