Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: MPxGOjTjEnufYjBagduIZctT+b1Z+Znt7eB0htnfcGo=
Subject key identifier: 9D:1A:AB:3E:5B:52:CE:38:C4:08:33:C2:A6:98:E5:CC:24:7E:BA:D1
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 0194BC3C8DF8A5355079052AE6813AFB9907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 10F1
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: lWGRLQb71eTWt0dNDiaJy1KSZxcLhbXvRwCAHzHzqSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8d:f8:a5:35:50:79:05:2a:e6:81:3a:fb:99:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=9d1aab3e5b52ce38c40833c2a698e5cc247ebad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:de:31:04:e8:3f:0c:9b:48:59:4f:1b:26:
02:56:e1:fa:48:82:05:b2:40:aa:38:de:06:ce:c7:
f3:17:4b:b2:17:d4:ba:3e:a8:7b:5e:6e:2f:c8:b3:
1f:86:77:cc:02:f2:06:6f:23:36:7e:09:17:20:c3:
69:26:3c:92:d8:52:33:8c:45:8a:02:7a:29:75:b1:
b0:31:1f:84:7a:1d:d6:bf:2b:c8:d7:02:2c:a6:07:
99:79:13:1d:0c:e3:9b:ca:40:dc:52:93:0f:da:9e:
1b:d1:fc:12:95:a0:67:db:b1:6a:97:56:50:c4:9c:
43:ea:b5:57:77:b8:60:cc:1d:ea:de:57:1b:69:fa:
96:5d:4d:25:89:aa:51:91:51:22:10:0e:90:2d:c3:
12:cf:36:8f:14:e9:12:4c:9e:65:9d:85:74:6e:fd:
9e:a8:fa:b4:64:96:ac:65:cc:98:d6:21:12:a8:05:
ab:23:c2:05:fa:c7:85:32:a2:7a:3d:42:3c:78:f7:
07:91:34:34:40:6c:8f:d6:bc:94:14:c4:a6:3b:79:
c1:a9:85:8d:b8:64:a3:1b:6d:1e:b2:5f:fe:62:3b:
c3:ad:07:e3:c1:39:74:4e:4a:c1:5f:75:c2:7d:fb:
ae:b9:0c:63:81:33:38:1a:bf:83:de:bb:19:91:bb:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1A:AB:3E:5B:52:CE:38:C4:08:33:C2:A6:98:E5:CC:24:7E:BA:D1
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:11:ed:ba:85:df:65:2c:6a:f1:ce:36:5e:7e:69:81:2d:d1:
68:65:7b:b5:ea:a6:66:69:2b:c2:42:74:f8:48:39:e3:8b:dc:
4d:4f:be:36:d5:c1:19:c8:b8:92:89:8e:55:bf:7c:8b:f1:50:
03:c3:98:38:59:bf:8e:6c:96:34:76:9b:59:46:65:f2:7b:65:
2d:5f:fa:b3:9d:1c:e2:23:6c:15:86:fb:f7:4a:fe:f4:41:b9:
4e:27:f4:4f:42:84:1c:25:5f:2a:82:35:4b:e7:64:05:fa:22:
bb:5c:b4:6f:12:d0:53:8c:d9:9b:48:02:fe:31:24:a4:89:58:
ae:03:8f:ee:b7:e5:00:3c:44:2c:91:5b:99:68:8b:09:73:42:
6b:41:1c:3a:fe:5a:94:fb:da:24:0c:9b:21:5d:7d:c0:42:49:
e3:ef:af:55:01:92:f7:85:ec:b7:04:a0:77:11:ab:d4:87:b9:
2c:b5:f1:b1:e2:c1:8e:8a:4a:8f:04:3b:e5:6a:7f:e3:69:84:
49:71:4d:ef:3b:ee:72:5f:5c:a8:a9:20:ae:2b:42:0b:7c:d3:
04:40:1c:96:2d:03:d5:4d:3b:78:e1:ab:61:c8:31:5e:04:fc:
b5:59:8e:c0:03:59:f6:90:a5:2c:87:a1:af:88:3d:32:a5:47:
ea:35:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:50 2025 by rpki-client