Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: phBJkEyv5C3kHQH6a/Us3e3RNqQoIfLUeNKebGFwOdo=
Subject key identifier: B3:CE:EE:85:83:A2:4C:43:F5:3B:09:94:F3:A8:98:14:7B:3F:6A:BF
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 0194BC04B7F6AEA279B75C581CC18A358276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 3RInciSdJGuSvDB_51KkkZIJFSM.roa (hash: 3/HjzRtzuMbFeOMatgJOwMZQLWYkmzjLRu3ceCOI8Rg=)
2: uW_HHeG5ibj4gBvlLnjeIIuuYg4.roa (hash: cEM1jH3XWHH+prqVsKrAdHDeKJ63pn+aJymmGDWSWfM=)
3: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: Xc6/C4B7SszVqi2dEcx636s9mH2ykOV1X0vsMceUq7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b7:f6:ae:a2:79:b7:5c:58:1c:c1:8a:35:82:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=b3ceee8583a24c43f53b0994f3a898147b3f6abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:ec:86:e0:d4:b5:10:c1:e4:16:d4:67:ae:
95:3b:8b:c9:03:06:8e:8b:b9:3a:8f:ba:06:4b:1e:
83:84:b5:4f:17:1a:8e:d7:00:62:27:8c:03:1f:2e:
1d:76:3c:3d:3e:67:bd:d0:2a:d7:ea:27:00:f8:58:
99:57:fd:85:43:38:64:88:0e:71:c4:f6:ab:db:00:
00:66:7c:1c:ab:c3:86:80:db:25:49:5d:93:ed:b1:
82:d5:e1:22:d7:e4:78:dd:92:94:38:38:a6:6d:f3:
72:e7:16:a2:f4:28:8b:44:24:86:5e:fa:af:9b:b0:
3c:cb:d2:43:31:c1:91:58:91:f2:c7:61:1b:83:aa:
bf:75:1d:f5:2f:5f:e0:c2:73:21:1a:42:99:9b:74:
c0:c6:80:1f:7e:9b:1f:8d:f1:5a:d6:e9:95:1e:17:
ad:74:c7:11:8e:f7:18:03:78:b1:1b:96:d7:85:67:
f4:dc:28:16:12:4f:91:8e:ce:e5:e9:15:cc:e5:12:
b6:c9:89:8e:b0:c8:e1:98:f9:09:5e:a7:d3:12:81:
d6:37:38:43:b5:68:a5:70:4d:e3:c6:ed:78:3b:2a:
01:67:b0:13:26:1d:78:3b:a5:50:7d:19:0c:1e:83:
27:02:80:0d:b6:f6:ce:c1:31:2a:82:cd:10:38:64:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CE:EE:85:83:A2:4C:43:F5:3B:09:94:F3:A8:98:14:7B:3F:6A:BF
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:91:bb:f5:5a:fb:6e:6f:13:5b:be:a6:b8:13:e0:e5:b2:83:
2b:1b:c8:3d:dd:5e:4c:fc:98:00:ea:fc:ee:45:1c:5b:77:7b:
da:ed:e6:a1:61:7b:5b:8a:b4:65:cc:8c:fe:79:b9:e4:4b:c8:
ab:7f:ce:f7:b2:13:1f:88:0c:f5:a3:14:0c:aa:bf:34:d7:49:
d2:a9:0e:17:d7:57:4c:3c:32:67:11:6b:b2:2b:24:98:65:39:
b8:1b:41:14:5f:41:96:83:78:24:2e:3e:6d:7a:e4:4d:df:b0:
20:a5:1d:de:07:4e:a0:bb:b8:dd:05:89:ab:cb:ee:d4:a2:ef:
e9:7c:a9:30:4b:67:c2:2a:5e:a4:d0:f8:46:be:e8:20:15:dc:
b8:c9:0a:5e:eb:94:34:7b:aa:cf:93:8b:aa:10:01:d1:14:a9:
53:7a:44:20:8a:39:a2:b6:4c:5d:db:e5:4f:2b:53:ac:d1:64:
75:0e:12:15:d4:4a:b9:66:44:49:41:fc:6b:27:0c:74:b1:3c:
42:44:52:5d:7d:a0:5a:58:20:30:68:a9:26:ab:35:a6:30:dc:
d7:56:df:99:51:dc:41:ae:a0:d3:6e:ae:88:7b:b8:ee:52:fe:
ab:37:af:c8:ce:6f:81:10:2d:68:c0:cc:f0:f8:c0:02:60:64:
43:b3:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:19:55 2025 by rpki-client