Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: zaUxBmEXvbCzB0LTdVoc2W9b4dKzYyDBlIPzPxqmZfc=
Subject key identifier: 66:00:C1:B9:F0:AB:C3:B2:97:B8:FE:07:E0:70:53:B6:15:6C:70:54
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 0194BC72C75A7817BF955C9820A0B2DB56B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: ge78k936R9UjWO4v1s8NXMsZkPIp2LMx86Kf+sFIClo=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c7:5a:78:17:bf:95:5c:98:20:a0:b2:db:56:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=6600c1b9f0abc3b297b8fe07e07053b6156c7054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:aa:32:33:53:3d:6e:f9:9a:7b:08:57:cb:
c6:a2:36:6f:b6:12:2c:bf:99:4f:50:a9:25:25:b8:
76:c0:16:3f:7c:fc:3b:7a:14:3d:57:51:72:93:d0:
b0:c0:f9:98:30:08:96:04:f2:18:8e:e3:56:f1:13:
45:f2:47:d1:bb:5c:88:13:73:0b:03:3f:69:fc:bb:
76:c8:1d:ed:14:0e:88:04:64:87:fa:c1:cc:30:15:
93:d9:4e:ab:83:f2:14:f1:5f:2a:69:80:7c:07:b4:
05:90:67:be:68:bd:c7:c3:c7:a4:76:b3:b5:7e:96:
4b:18:36:bd:67:1c:3d:09:d1:bc:51:07:5e:c6:07:
a9:6a:00:c8:de:8c:c5:46:12:b3:ce:7a:12:c0:79:
c3:a8:0a:26:cc:a6:ab:3c:e2:2c:25:6f:b5:83:30:
9e:ea:5d:88:cf:52:5c:d8:cd:85:63:35:2f:bf:4b:
e3:f5:09:39:d8:e1:9c:ff:8a:48:41:43:63:bd:5d:
a9:d6:e6:9f:d3:62:f5:5f:be:84:20:33:71:a9:ee:
5b:c1:5b:9b:e4:b3:c6:f0:9b:f2:4f:46:5b:9b:00:
71:ac:4d:67:cd:77:42:f5:f9:2a:1d:e0:c9:47:c0:
73:33:51:67:d9:13:67:3b:39:cb:b2:3a:7c:71:b3:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:00:C1:B9:F0:AB:C3:B2:97:B8:FE:07:E0:70:53:B6:15:6C:70:54
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:68:ce:5b:62:51:e2:57:f8:2c:d1:f1:83:09:0e:83:76:72:
6e:8b:b8:87:e9:1d:95:ee:44:51:fa:38:cb:88:d0:d7:eb:34:
62:5e:35:ee:16:b8:18:50:ad:d0:ac:b0:db:90:21:e9:25:3c:
8e:35:2b:34:6e:8d:06:61:69:a7:33:69:27:f9:a7:e2:c8:68:
40:e2:68:36:ee:a0:c0:28:ef:04:3d:b6:de:34:95:8c:32:e4:
3e:ba:40:69:2d:fb:9d:1d:d2:7b:b8:84:b1:70:d9:83:9f:26:
c5:8a:23:93:ad:60:9f:a9:63:e1:f1:1e:8b:38:f6:fd:60:e8:
83:e9:5b:83:51:95:db:8f:ef:16:f0:19:85:65:7a:fa:d9:9e:
71:d7:15:57:7c:3f:d8:da:fb:f4:38:66:c1:1d:b6:67:95:83:
e5:cf:32:38:44:14:b4:6f:20:8e:49:5b:bd:4c:25:d8:cc:95:
aa:92:1c:50:ad:4b:4b:e5:a8:4e:12:e8:6b:6b:98:6e:50:af:
13:5f:0f:43:12:7c:c2:1a:74:74:3e:ff:9b:b6:e1:1f:b7:17:
ed:82:c4:bc:d8:1f:5c:af:8b:3f:98:48:d7:02:e1:6b:92:68:
ce:ae:b3:83:65:13:c1:7e:03:04:14:09:0a:e2:d0:af:eb:be:
a2:80:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:39:04 2025 by rpki-client