Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier: DYuX0PWsgC44tltWR4P9B+BazLO0aQEIFkEv85PQFPc=
Subject key identifier: AA:4B:90:E3:0C:A9:DE:1B:8E:10:BE:ED:71:39:A2:D9:77:39:22:92
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 0194BBCEAA920961ECE18147FC44594C69D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=)
2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: 3CCDW1p4AtzFY2fxZ6/VfrFMjyaw267UTV4ONDcUhNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:aa:92:09:61:ec:e1:81:47:fc:44:59:4c:69:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=aa4b90e30ca9de1b8e10beed7139a2d977392292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:fa:85:11:cd:a2:8a:34:c5:cf:86:54:7c:
5b:71:67:3b:68:ae:27:ed:2d:cf:19:37:bc:d5:28:
14:40:38:6a:66:2b:c7:75:9a:83:db:68:38:c0:44:
dc:a6:28:ba:24:0d:53:ad:73:86:57:01:69:87:93:
c1:62:7b:da:3e:4e:76:50:c7:6a:d6:22:4e:f1:de:
26:a5:b5:ce:12:cd:97:c0:46:87:93:64:ce:ef:5a:
0d:d4:3c:17:32:60:82:62:89:96:2f:c9:2f:08:2e:
a7:6d:60:3b:b3:6c:1b:3e:20:de:ed:a6:00:da:e8:
ae:e7:3b:91:40:b7:f3:e7:af:b2:36:fe:c7:ee:82:
5a:e8:89:ce:39:20:c6:91:f0:06:60:c9:00:33:e2:
c5:19:b5:c1:cd:ca:66:cd:f2:4c:d5:39:ea:a3:3d:
dc:9e:16:4d:42:e6:3f:f6:0f:df:db:31:c8:98:64:
2d:ac:90:5d:d6:39:a3:e9:d7:86:e0:3b:6d:ed:a0:
99:09:8f:71:87:26:64:d3:98:8a:12:b8:fc:b2:2e:
6b:7a:bb:08:7b:29:e7:1c:96:e1:27:21:bb:86:16:
08:4a:dc:e3:8c:ba:1f:83:6d:ff:23:ec:35:1d:58:
32:db:b0:47:03:b4:11:51:f7:3b:8c:49:de:f7:ad:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:90:E3:0C:A9:DE:1B:8E:10:BE:ED:71:39:A2:D9:77:39:22:92
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0b:a7:21:ff:d0:ac:3a:53:50:1f:a1:89:55:20:75:10:c9:
38:31:7d:86:63:b1:fa:a3:25:65:29:9b:65:d1:dc:66:14:4a:
af:90:4c:00:cc:8e:7c:e8:96:0e:3d:1d:e2:94:dd:85:9e:79:
49:68:11:3e:24:32:50:38:d9:bf:3b:3f:ca:e8:d9:50:d8:c1:
f9:e7:01:33:67:b9:6f:4f:88:05:96:c0:da:8d:94:ea:72:ae:
6e:17:23:c6:19:58:53:6e:29:6b:65:d5:37:13:b4:86:17:8f:
4a:9c:a6:88:a4:25:ec:69:84:f2:c1:91:b0:e8:59:3f:f7:38:
da:f0:04:dd:60:c7:86:20:dd:e3:28:13:ad:aa:d5:d6:8a:59:
d0:0c:a9:70:22:6b:2e:e2:d6:f2:94:f6:ad:d5:0f:00:45:c6:
5c:9d:09:19:a0:73:e6:9e:e8:81:24:f0:80:1a:c7:64:7f:8d:
22:9f:20:28:54:68:13:eb:9a:79:5e:8e:ac:f2:8b:1a:a3:b7:
b6:53:7a:cb:ff:25:c3:68:d7:80:73:d3:d3:d3:12:04:70:b1:
cd:11:a3:9b:ab:97:20:12:8f:78:b8:27:79:af:88:ce:1f:ad:
98:bc:74:33:92:9b:62:1f:ce:1a:9f:db:1b:09:bf:04:03:08:
4e:75:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:48 2025 by rpki-client