Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
File: Z2JE3gGQpt1aiZorN7ACua5jLIY.mft (raw, json)
Hash identifier: Yx0v823BZznLycR2bI1kKbsEuaJIH5K4X5AdxsPMdZs=
Subject key identifier: 02:3B:60:71:21:75:8B:82:30:66:C4:A8:37:CF:0A:74:39:90:80:EE
Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
Certificate issuer: /CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Certificate serial: 0194BBCDD71065046641E1E75EFF64F50618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 21cAYiN5jMpqkJRdEkHSMeQVgkY.roa (hash: KwzUXQv1pIgCUyqyYd3vxndo9n20A9iWRxEC49c1pqI=)
2: Z2JE3gGQpt1aiZorN7ACua5jLIY.crl (hash: iYd4yJTqcw5rbW5+P8f1CWz+U08OMsY+Nd6jfKjbQKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d7:10:65:04:66:41:e1:e7:5e:ff:64:f5:06:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=023b607121758b823066c4a837cf0a74399080ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:5a:60:84:6e:c6:13:a4:3b:84:21:ec:a3:
a9:d7:13:27:33:07:99:6a:10:e0:1b:c6:67:5e:06:
fb:1c:18:66:c0:4e:62:9e:40:53:80:84:f2:ab:76:
49:af:6a:e0:22:18:f2:85:50:95:ce:b5:71:b6:b5:
20:4c:28:c7:dc:d4:5f:21:e4:2d:0c:c1:32:b7:96:
da:0f:94:64:e4:82:4a:3b:eb:db:40:1f:77:4e:8e:
9d:23:88:9a:a5:51:4a:c4:17:a2:29:59:a4:1d:b5:
23:5c:ff:b1:8a:34:71:dd:4f:a6:27:b2:06:d3:0a:
59:53:1c:22:e0:7d:07:41:62:07:e3:e7:53:b2:c0:
8c:d0:6d:14:88:06:f9:43:22:d9:c0:c3:ec:1d:0e:
69:bc:50:62:43:af:c8:6c:3d:7a:b4:7d:9d:c3:22:
42:50:d9:4a:06:71:52:bb:b3:70:d4:bf:80:48:ee:
ee:b7:30:ac:92:df:29:c0:73:5c:1f:fa:bd:51:d5:
13:b5:54:ac:ff:ac:95:52:25:60:b3:63:9d:fd:2c:
47:5d:89:f9:58:80:c6:e1:6f:d4:99:7a:f4:57:57:
d7:3a:6d:82:ee:25:5c:01:0f:40:53:b6:a3:65:1d:
f9:1b:41:a1:b2:6a:3a:55:14:b2:ef:c9:e2:07:03:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:60:71:21:75:8B:82:30:66:C4:A8:37:CF:0A:74:39:90:80:EE
X509v3 Authority Key Identifier:
keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:21:48:d5:5f:e9:12:4a:c0:f3:b7:e6:d9:15:9e:55:b3:6d:
ec:00:f4:e6:bb:d6:27:77:73:76:94:e8:cf:e2:f2:16:16:24:
94:e2:14:b9:5c:f9:c6:ff:bf:47:a4:60:2c:a6:aa:0b:98:44:
64:ef:18:a8:a3:9f:a7:a5:1a:5c:44:0d:e9:d3:85:e2:39:13:
86:93:ca:bf:cc:0b:63:69:97:23:53:27:bb:f4:f1:96:85:2d:
4a:d2:8f:5b:67:c5:8e:43:ac:c6:f7:8d:a9:67:09:a6:5c:bf:
c9:7a:ef:47:76:6b:92:9c:51:5f:ce:1a:4a:92:db:94:1c:58:
26:49:ed:e6:c0:c0:86:85:a5:df:01:fc:50:7e:73:4b:7b:47:
09:6e:50:b2:0d:91:55:e3:a7:86:1a:24:27:93:1d:26:b3:a7:
f0:05:99:22:43:aa:28:fa:d7:a0:e3:d0:44:b7:df:14:70:ad:
d0:95:d2:f4:4e:53:c8:ab:75:c2:42:33:d2:c6:7d:6b:85:46:
0d:f5:77:b8:b1:b7:04:8b:52:49:48:ce:8a:24:36:d6:75:6d:
d8:5b:7e:14:01:5f:c1:6b:e7:86:e4:fe:91:c3:ed:e3:e3:0b:
ba:1a:fd:b8:c5:de:f0:64:d7:f8:f2:06:a2:2c:37:f8:41:d4:
b1:0a:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:35 2025 by rpki-client