Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: nDJyOmDyBvcwmgTWiDWtdlNhvAR41b/8gQxTAdeSLj0=
Subject key identifier: 30:D5:8E:EC:91:76:C0:EA:5E:A4:F1:64:BB:C6:12:79:BD:BB:1E:0E
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 0194BC727A922A50508DD3A2FAFF613540C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (hash: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: 5ZPsQk3SvvsRvV9NGIrXveBtUs8lxlzMuKp1ZfA+lR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7a:92:2a:50:50:8d:d3:a2:fa:ff:61:35:40:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=30d58eec9176c0ea5ea4f164bbc61279bdbb1e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:1e:5d:75:37:59:f3:06:b3:c6:ad:0f:68:
35:17:f0:2a:38:b6:7f:b0:5c:37:a8:13:cc:1d:c1:
e9:13:ae:eb:5f:d3:b9:a5:f4:9e:af:e3:de:ba:fc:
00:b8:9c:41:a6:8a:4b:af:32:4e:9a:1f:b7:d0:d7:
12:1b:c6:ac:4b:07:b2:50:41:03:be:68:8d:a9:47:
c8:5a:3b:09:9c:d5:6a:1c:55:3f:18:64:42:dc:45:
3d:6a:d8:23:1c:4b:29:8a:4a:e3:d6:09:e7:27:f6:
3d:d7:32:c3:cd:fd:e2:40:d6:97:87:83:55:be:9a:
54:5c:fe:7b:59:f1:e9:72:22:d7:75:66:99:55:64:
7b:20:50:0b:11:7d:65:c7:6b:2a:72:32:85:a0:ab:
b2:93:db:63:16:78:15:54:12:d0:f1:3a:8b:d4:53:
0c:81:c2:16:8e:ec:1d:39:3d:67:df:52:54:7a:59:
5a:75:84:4f:b8:86:d6:4e:bb:c8:74:ff:26:7d:ce:
76:12:40:b0:1a:9d:f9:35:08:00:b0:aa:db:5d:02:
17:b3:7a:93:89:68:ba:40:ea:06:48:80:72:03:27:
d7:e8:95:45:53:e2:bc:b5:db:1f:9b:e7:40:e2:44:
e8:45:91:9d:e7:c8:4f:c4:0b:2a:3c:a0:a5:e2:c2:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:8E:EC:91:76:C0:EA:5E:A4:F1:64:BB:C6:12:79:BD:BB:1E:0E
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:77:2f:25:51:27:c3:b5:35:cb:97:e1:da:92:c0:85:1b:71:
2c:a1:4d:de:89:47:c0:bf:73:1c:49:77:85:5b:a0:c9:9e:bc:
45:dc:00:bf:cd:b9:ea:c3:7f:43:fc:21:d9:fa:c0:56:dd:3e:
15:02:57:e8:62:ca:33:72:84:43:0e:55:f1:71:e3:d2:06:30:
95:71:64:92:58:1f:68:cc:9c:03:e9:0e:0c:75:56:d6:ec:a0:
f7:c1:6a:5e:54:3a:7a:cb:c8:05:20:28:cb:1f:a3:ad:41:3e:
f0:87:75:f2:50:35:02:2e:1b:65:9b:96:ad:7d:9a:88:46:1d:
ee:d8:b5:89:43:bf:28:1d:7f:25:ae:88:4e:40:64:50:e4:75:
fc:be:13:0c:23:bf:73:ca:17:84:d7:7d:6f:32:cb:3e:15:60:
84:f7:d5:48:c6:b7:94:e8:46:de:f0:45:69:98:fe:68:2c:7b:
ed:1e:96:bd:ca:bc:ff:13:47:a1:47:01:3a:c3:48:79:79:77:
6d:3d:a3:83:f9:c3:85:f2:01:34:04:da:f0:7d:88:0f:e5:f3:
d1:e6:47:1a:b5:7e:5a:74:00:f1:13:85:e8:23:b0:89:6b:a8:
44:cc:86:25:d4:9e:15:f3:4b:6d:fc:fc:de:1b:cb:c7:ff:10:
d8:ca:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:35:15 2025 by rpki-client