Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json)
Hash identifier: Dlfn6p5TUDUKea6Hu77t20joNa1buroeb5TlAHLb73w=
Subject key identifier: A5:51:3F:B8:BA:1B:B1:F7:14:AE:AE:ED:DD:68:AE:19:A6:2A:7C:96
Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a
Certificate serial: 0194BD1790ED738E571A2B667A937DD3AD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 3OCzpqqGOlJ3RRPa9qcY9JxjkUo.roa (hash: InQFvxlV7A4HcZ9T6xcxQF/B13Yg7udCj77rsg046YE=)
2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: kirKnajmDZFm7/pnjjoGXN3kVgSyQuaQu9HNpcDQQ+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:ed:73:8e:57:1a:2b:66:7a:93:7d:d3:ad:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=a5513fb8ba1bb1f714aeaeeddd68ae19a62a7c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:aa:5c:db:a4:c8:90:1e:57:d0:05:7d:ae:
08:4c:36:49:cd:9e:d9:a7:98:36:d6:8b:64:4e:e0:
47:46:c9:b4:9c:21:4a:87:b6:7f:8a:95:4f:e7:8a:
d0:46:fa:cc:52:a5:61:d4:00:e9:1a:e0:57:81:56:
f7:dc:8d:e3:8d:78:62:cd:14:a6:48:9f:62:fa:f5:
07:e2:38:ab:9c:84:c6:3f:46:be:68:29:43:1b:0d:
1c:57:f7:ff:05:56:f2:87:44:10:5e:4f:eb:45:65:
c4:21:a1:7d:9e:95:8c:19:d7:75:c6:d7:d6:5a:fc:
a2:30:0f:78:1b:7a:e1:6a:9a:32:65:16:20:42:82:
1a:8b:72:fe:47:c7:d1:62:fb:77:8a:01:cf:3f:5d:
51:5e:07:c1:e5:43:e3:be:34:3d:fa:82:47:f9:7c:
a5:72:da:d3:94:c0:3d:f2:60:e7:06:25:40:16:d3:
c3:10:e1:17:3d:8d:7f:2c:ca:c7:ef:37:04:e3:bc:
0f:f8:fe:9d:30:02:51:19:ad:4b:75:1e:95:a3:c5:
92:e1:83:2a:10:4a:47:90:99:51:3f:dd:80:d0:de:
36:38:e0:88:c6:e5:c7:87:5d:6f:f0:48:08:8f:4d:
df:8c:64:68:7f:e6:35:08:34:d1:66:61:8e:cf:69:
16:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:51:3F:B8:BA:1B:B1:F7:14:AE:AE:ED:DD:68:AE:19:A6:2A:7C:96
X509v3 Authority Key Identifier:
keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ff:73:1e:e2:fd:7a:d0:bb:2d:de:ed:9e:ca:2d:2a:4e:87:
0d:66:a8:f8:86:20:60:4e:71:0e:ce:5a:33:17:dd:51:fb:2b:
1c:9e:bf:30:7a:8d:e3:11:2d:58:87:af:f6:72:f4:ec:02:cc:
a0:00:0f:ce:4e:93:d5:fe:79:2d:ab:65:5d:97:9c:c5:fe:13:
cb:9e:62:0a:d3:a0:78:63:fa:25:5d:09:cf:f1:9c:bf:da:ec:
35:c4:29:b6:a1:27:2a:9f:f5:65:c7:50:74:a8:5e:5e:c1:19:
e8:d7:74:81:b7:18:0b:45:fa:c8:07:b4:57:4c:f3:5f:f7:bd:
c8:54:c1:ce:2e:d7:31:99:cb:87:6c:89:64:57:01:5e:3a:97:
1f:79:a9:4b:58:b0:d6:bb:86:13:7c:93:ae:e4:60:b3:4d:96:
2f:1b:e5:da:34:79:69:b3:86:2f:a4:fb:07:fe:bd:c8:9f:5b:
37:2f:91:2d:1f:e2:93:f3:72:54:66:dc:33:30:7e:7e:e9:c2:
31:1c:9c:1e:f4:ef:0f:4d:61:3b:b1:e6:11:a4:93:30:13:3c:
5f:40:1c:6d:c4:82:fc:96:5d:02:ac:19:2d:a4:bd:8d:79:0f:
a9:73:ec:a9:8b:cf:0c:71:e3:d9:8d:e8:66:b4:e7:04:ea:89:
8f:eb:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:09 2025 by rpki-client