Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: w9EEI4EeGNAMo3rGdzxdmrtf2CM4EomQkoJgBtRfNaE=
Subject key identifier: BD:2D:D1:2F:97:F7:03:F1:97:9F:1E:0B:9C:B7:51:FC:9F:02:2E:B4
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 0194BC3C6D9DDF40D910E2DA9DBC4C0BF15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: 8CImFuWpAAcJG9d8q1AzQ1Y7tPdU5bNqxY2gCXYPmzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6d:9d:df:40:d9:10:e2:da:9d:bc:4c:0b:f1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=bd2dd12f97f703f1979f1e0b9cb751fc9f022eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:a5:36:fc:dc:b0:ee:cf:87:1d:fb:20:bf:
61:2f:37:e4:3f:6f:09:62:f4:de:1c:5e:c5:eb:45:
1b:2b:ed:01:67:e1:ba:c7:48:aa:a9:7a:3d:b2:fc:
81:65:24:38:64:73:73:33:f9:cd:b8:95:1a:12:70:
d6:69:f5:ae:a4:7f:43:cd:6a:5a:87:cd:68:f8:8d:
61:b8:2d:25:1f:3b:31:b7:06:5e:18:37:f0:54:f4:
79:1a:80:62:73:9f:40:22:e2:e0:69:0b:5b:c9:e0:
08:8a:f1:67:81:c7:cd:4c:5f:17:a5:f8:b0:d4:d0:
38:2e:9e:42:c9:e6:44:75:0c:19:a9:4d:7f:d9:36:
04:3b:89:e0:0c:ee:cb:7e:2d:42:3d:ff:0d:02:ae:
38:6c:3a:f2:de:4c:c3:0b:50:6e:91:a0:30:51:d9:
ac:de:ca:3f:1d:bc:71:ea:50:44:5c:c1:2a:e3:46:
1a:e8:b5:e0:66:fb:fe:2e:2d:51:69:bf:3e:c9:29:
6a:06:87:cd:5f:ca:ab:cd:4f:1a:82:af:4c:67:81:
8d:c8:53:86:2b:5f:40:4e:b8:6f:b3:4d:6a:94:41:
10:20:12:3d:db:9a:c0:2c:bd:1e:5c:bc:c0:ff:8c:
19:de:19:43:46:48:c6:38:c8:86:74:bd:89:37:f9:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2D:D1:2F:97:F7:03:F1:97:9F:1E:0B:9C:B7:51:FC:9F:02:2E:B4
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:37:93:e2:21:a9:1d:c7:28:2c:f1:10:ac:11:8b:4e:93:6d:
4e:66:8a:bd:91:79:00:77:8d:36:2f:28:cb:3c:a6:1d:a1:c4:
ff:9a:fe:5c:af:68:fb:ab:46:3c:e8:08:21:b5:14:5e:3b:f8:
61:e0:b9:3b:af:1d:d1:c6:4c:23:2d:2d:32:89:d8:a5:a8:d4:
fc:28:d7:f5:94:3e:3d:8d:6e:c0:79:b3:02:70:be:79:a5:fe:
12:88:6b:2a:00:d6:e5:05:25:2c:17:1e:46:04:66:3a:66:67:
77:7b:cc:68:7f:8d:73:51:b0:37:2e:f8:9a:ea:71:a5:5d:fc:
7e:d8:c3:12:25:c5:cf:f2:43:96:45:9f:06:73:23:2e:25:b3:
9c:6a:a8:a2:ed:0a:3b:92:8e:fe:dc:45:5f:3f:19:00:f4:a6:
2e:e8:be:ae:32:e4:d8:72:9a:1e:8c:a8:67:a2:e7:c4:21:24:
6a:33:76:2f:b5:5b:2b:9d:67:ef:43:3d:48:af:64:5b:e0:77:
45:3e:67:8d:15:4c:9e:a4:38:3b:0c:f5:01:bd:d2:27:8e:0b:
b5:5e:b6:99:4d:bb:a8:97:8a:fc:5d:b8:a7:68:21:a7:5c:f0:
f5:eb:c5:3e:cc:76:a2:6b:15:27:8d:6d:ce:86:94:ba:15:28:
a9:b0:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:38 2025 by rpki-client