Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: 9XnHToxNUkXibsEQXkbmU+gbzVu1VTAgcsT1S3xcbGc=
Subject key identifier: 98:A6:7D:09:55:9D:8A:1B:36:B2:CF:2B:02:99:2C:04:25:AB:6E:D1
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 0194BC3C638C2BF49F3EDE2C6D2BABE006AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: DOfSsatcOz0iX8qBULuzR0a/QBuyN7EumqvWsFnJ9os=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:63:8c:2b:f4:9f:3e:de:2c:6d:2b:ab:e0:06:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=98a67d09559d8a1b36b2cf2b02992c0425ab6ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:97:b6:58:42:67:70:5d:44:0f:58:d8:0c:
e9:25:de:b5:ca:64:0d:13:0c:70:c0:5d:ef:33:b7:
16:c2:21:b1:55:68:5e:12:65:2a:8c:1f:b6:dc:fc:
95:5c:b6:28:72:7b:22:01:7b:02:0a:5b:b8:8b:a0:
8c:f1:ec:f2:25:63:b7:c3:20:80:5c:fa:bf:b6:19:
2b:be:cf:1e:a1:ed:97:55:83:9f:dc:a5:6b:4e:42:
0a:67:82:fb:b7:73:a8:16:7a:96:85:1d:82:de:3a:
a6:36:c9:c8:73:0f:ce:15:fb:39:4e:05:95:a9:ef:
ed:ef:03:ee:d6:9a:4a:f2:ea:06:a9:2b:c8:6c:e9:
07:a3:c3:09:69:ee:eb:4d:91:83:86:a1:f0:7a:9c:
9b:3f:4d:56:60:1a:ae:c9:bd:3d:85:ad:74:c5:84:
b4:16:09:5a:04:73:5d:1b:ef:95:14:16:63:60:36:
bd:93:4f:ea:39:c3:43:0f:1f:ee:b8:63:06:ee:06:
a0:4f:27:6a:a4:44:0e:b1:68:53:80:3d:16:1e:3c:
6b:20:b8:59:db:4f:4e:8c:71:9b:c3:bd:5a:5b:c1:
1c:cc:de:a8:72:2a:3b:f5:13:5e:ab:eb:a2:73:b1:
aa:cc:01:e2:ca:89:9f:e2:38:a2:7e:7c:77:14:c4:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:7D:09:55:9D:8A:1B:36:B2:CF:2B:02:99:2C:04:25:AB:6E:D1
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:df:6b:08:1e:45:c5:09:ec:3f:ef:28:ed:e5:8e:81:3a:02:
a4:40:15:a9:35:1c:e2:67:89:2e:52:ce:4b:e8:e8:aa:b7:b4:
32:a2:f7:23:80:4a:49:d6:57:1e:a2:49:45:6e:61:da:8f:e9:
8d:0c:db:95:89:55:86:28:37:2d:35:8c:67:7a:83:37:f3:fd:
df:44:9d:0c:d6:60:e5:b4:5c:1a:fa:f8:30:9e:cf:db:24:2a:
ca:be:33:35:78:9b:4f:d9:ce:d8:79:a9:b3:e2:4d:cb:da:34:
0b:d5:73:75:e6:67:8c:11:ee:02:ae:b9:6f:d4:25:50:02:a2:
e6:b5:53:2d:44:c5:0d:19:b8:34:c9:9b:d7:56:5b:cf:aa:19:
05:e3:88:7e:b3:be:55:1c:43:cd:3e:5a:35:d0:d1:a3:ae:72:
a4:20:df:2b:a7:51:b3:b1:b6:1d:88:48:aa:76:ed:16:f1:2c:
8c:d7:0f:1a:dd:38:1a:b6:8b:be:00:20:78:4e:d3:43:64:21:
4a:67:85:bd:4e:f1:b0:f8:28:fd:17:e1:dd:d7:54:63:d0:18:
58:94:37:c6:9f:fe:37:66:83:80:e2:30:c4:b4:e1:f0:fc:b9:
3b:5e:30:73:93:ef:54:b6:de:bb:7b:ee:48:a8:4a:85:7b:12:
98:6a:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:30:48 2025 by rpki-client