Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
File: z2hDzhUimoAj2X-iejflkniyv9c.mft (raw, json)
Hash identifier: UTvspQ/V3VHQVOLqlnHpuuF+fOuqS/fuvRLst+8SPfU=
Subject key identifier: 03:0F:16:85:DD:0E:CC:A0:17:1A:C9:AD:D0:62:E6:1D:4D:96:C5:73
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Certificate issuer: /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial: 0194BD4E624C919F29AC6E07BB03FED68B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
Manifest number: 0A18
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: pZ2-rl1wvNOlZXWq6r9tiMcpCLE.roa (hash: UTgRZg+3/3Y1WSaSgU/Ax1MIkqu5a18zaZd2IsaahgY=)
2: z2hDzhUimoAj2X-iejflkniyv9c.crl (hash: mUNbyBUaPCmAjjd4bIvw24KfmHqpHnsZIjPR7Mk1m4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:4c:91:9f:29:ac:6e:07:bb:03:fe:d6:8b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=030f1685dd0ecca0171ac9add062e61d4d96c573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:c3:cf:fc:04:2a:97:65:b7:1d:3d:89:05:
0a:ff:7e:e0:c6:3c:61:0c:73:25:9a:11:89:30:e4:
a8:9d:4f:a4:2d:74:a2:91:b5:cf:85:40:3f:df:03:
b8:67:f7:31:32:8c:92:cf:82:64:cd:36:fd:88:dd:
d6:bb:64:46:0c:67:3f:07:38:21:f8:e1:60:77:9b:
42:a0:f9:80:a7:46:b3:d7:2a:0e:7d:92:95:3b:2a:
82:86:e8:b8:79:1a:11:87:c6:4c:58:41:4e:05:e8:
38:f6:16:00:c6:c8:28:71:aa:13:46:e3:d7:b3:c4:
fb:65:18:32:4c:ec:76:4f:4e:6b:98:40:cb:a7:23:
50:6f:3d:84:45:bc:c5:60:2a:76:ae:8e:6f:98:14:
56:ac:5b:66:64:66:37:f8:5f:88:6d:cd:e6:0d:e6:
11:fd:7e:95:cf:f8:f2:a2:4e:a1:68:3c:0a:c6:ba:
45:ff:f2:18:2a:99:bb:6e:d9:3b:da:7f:12:3d:60:
f9:bd:dc:a9:bb:a0:66:6d:9a:51:d7:46:9c:de:4b:
26:00:0a:a1:57:85:e4:0e:07:b6:5a:6a:be:2f:e9:
d3:45:a3:bc:4f:d7:17:c2:ba:01:d6:62:2a:17:3f:
e9:20:c8:19:30:40:98:b8:a4:a0:4e:20:f7:2c:8d:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0F:16:85:DD:0E:CC:A0:17:1A:C9:AD:D0:62:E6:1D:4D:96:C5:73
X509v3 Authority Key Identifier:
keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ea:1e:78:c2:f4:b7:8c:2b:76:46:20:67:74:c6:18:43:0a:
41:dc:b4:6b:f4:bc:05:44:3e:6e:d2:46:0a:c4:ca:ce:c0:d4:
6c:c5:ec:d4:5c:ad:66:c8:4b:b1:5d:57:8a:cb:88:af:d0:cb:
eb:97:e1:9c:99:c6:d0:06:a0:17:be:a7:4e:a4:91:9b:4f:63:
6c:97:db:5e:5f:8e:78:4b:0a:31:a6:12:8d:42:ec:62:8a:12:
e1:08:4f:14:01:40:d3:d9:45:a3:4d:40:6c:98:66:7e:c0:66:
11:e9:74:e7:f2:39:be:a3:3a:d6:d8:09:42:34:c3:c1:ef:ad:
8f:53:90:8b:67:ec:1d:37:ae:74:71:df:50:98:3c:bd:59:ce:
31:3d:f3:4f:bd:4c:ed:a6:77:1f:e3:cc:c2:52:2f:a1:b1:58:
67:4c:55:ff:70:5c:69:f6:ab:c0:0f:d5:ec:5a:bd:5c:a2:90:
6d:23:0b:76:ca:28:0b:b9:11:a6:b0:81:78:94:88:59:fe:49:
d6:37:9d:5c:46:8c:92:45:f2:c6:e0:85:eb:31:47:c8:8d:e4:
c6:bc:76:a8:00:04:5c:ea:e5:cb:30:f3:01:22:b8:29:19:99:
cc:6d:30:3e:52:ce:cb:2c:af:b7:f8:f7:67:78:ae:18:4c:db:
20:fc:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:32 2025 by rpki-client