Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: P5LYdJuvEgNPesrbjb6XF/R3jmW4yjAVCctUtJSNPSU=
Subject key identifier: A2:8A:C7:C3:66:A4:A7:65:F9:ED:F5:74:60:7D:BD:E0:B5:B6:D5:1D
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 0194BCE08573E40C74D955367AF60C5688C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: 879dphxutM8xUdBmZpr9HHOhMOY24GJtWze69H2mgl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:73:e4:0c:74:d9:55:36:7a:f6:0c:56:88:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=a28ac7c366a4a765f9edf574607dbde0b5b6d51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:11:28:6f:9b:1b:23:e2:70:a6:89:9c:2d:
e0:a4:8b:2e:c7:bb:93:e1:be:0f:f0:11:27:da:28:
94:84:a4:d4:a5:92:2c:b7:a0:a3:4e:3f:58:f4:6f:
12:df:f0:61:15:05:45:c5:95:30:5d:99:29:9f:47:
95:c6:7e:f1:2e:34:2d:44:77:ff:58:2a:05:d5:1b:
f5:28:6b:f2:25:1e:87:7e:20:c8:25:eb:81:65:de:
ba:c8:81:e4:05:84:01:bb:11:cb:0c:31:29:85:a4:
d0:f8:cf:f9:2e:26:3a:ec:b8:85:59:30:b2:85:9b:
1c:db:c5:62:94:63:52:b9:67:7f:c1:1c:c6:48:44:
24:25:5e:c7:3a:25:c3:9a:1a:b9:18:d8:43:c1:1b:
dc:f6:40:a1:dc:6f:b3:ed:c9:66:73:aa:f0:30:ef:
a5:76:04:72:c2:92:f2:9e:b9:38:35:29:2e:96:7d:
48:a7:38:34:c6:d0:9c:6a:1b:4d:4f:77:27:e9:36:
96:58:a0:33:dc:92:29:0f:3c:86:64:5d:40:1d:20:
b2:1b:8c:06:93:ad:af:65:8d:3f:8f:7b:0f:6b:20:
88:1f:0c:93:d4:8b:ac:f2:a2:88:5d:33:50:dc:7e:
c5:31:cc:3c:1e:e6:89:d0:8b:bd:45:3d:11:09:1b:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8A:C7:C3:66:A4:A7:65:F9:ED:F5:74:60:7D:BD:E0:B5:B6:D5:1D
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3a:bf:04:59:a1:ef:98:0a:73:25:ea:46:c0:61:e0:ce:2a:
49:07:d7:59:84:36:3f:e7:c0:47:4c:0a:2f:fd:84:c9:04:48:
e1:43:e2:a7:dd:ec:4e:60:c7:cc:76:4a:f4:16:cb:42:06:6c:
9d:4a:51:84:0e:46:3c:95:7f:b2:57:87:c0:ec:17:b5:ce:35:
c8:6d:20:46:bb:04:b1:82:86:5a:91:7a:dc:dd:0e:ee:13:cc:
e9:80:6c:8c:e4:c0:20:a2:f4:a3:bb:ca:29:ee:16:63:a9:83:
25:42:76:4c:3d:ad:51:dd:7c:d7:a1:a9:ea:d2:db:77:c4:25:
58:3d:1a:95:c5:4c:16:56:ec:d5:59:50:c1:77:0a:a4:7e:75:
01:03:55:5c:da:de:95:00:56:c6:0b:5a:17:52:ce:04:8f:37:
44:6e:15:81:50:2b:cb:da:34:ba:3e:ac:8a:58:b8:3b:55:f6:
08:8f:63:16:61:d0:c2:05:d4:82:58:4b:63:90:91:0a:b3:94:
a8:27:84:8f:49:da:65:12:d7:a8:5e:c6:e1:6b:37:35:05:88:
04:64:9e:fd:3d:7d:12:e6:a5:ca:39:20:ca:a8:45:05:6a:81:
93:30:62:7d:48:87:68:bd:24:46:ad:2d:30:0d:1e:5a:cf:62:
95:3c:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:01 2025 by rpki-client