Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: fVTedYWLv/dLHvgn/w3PEQVGTcD44cvfnCxV82I4IeA=
Subject key identifier: 1D:78:66:D9:F6:BD:AC:F6:3A:6D:0C:33:43:6E:A4:4F:A6:EF:C8:DF
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 0194BD178FD3A45B0A20B84415A268C2EB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 116E
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 1-utv31eNtHYCODQjw0OBJ9A1ak.roa (hash: /AARSXPg1zjQZ6XPrMtvagEPxIaMWqUCldvhvMILl0E=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: yeo6k7r9922NSgZYJI06up3UWFtQcvLaXlM3KCDwyZ8=)
3: v-1dMJATbmCqn4ZIXY3_7O06Kgo.roa (hash: e/oJSwkuDJQUs8pWr+iLRNfJ7vsAry7pnZFcOPKfgOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8f:d3:a4:5b:0a:20:b8:44:15:a2:68:c2:eb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=1d7866d9f6bdacf63a6d0c33436ea44fa6efc8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:0f:0f:38:01:0f:61:d5:58:73:08:c9:79:
97:df:1e:b2:af:52:f3:e4:5e:c1:8c:a3:f1:bc:4f:
32:af:b9:33:d7:9a:51:48:24:79:d0:18:44:01:6c:
1d:2e:dc:21:92:e9:9d:d6:b1:bd:f7:b5:7d:b1:32:
f0:8f:fc:7f:5e:c0:7e:e3:30:f5:4c:e2:2a:a8:61:
ea:c1:8c:a3:4f:9b:6a:1f:4e:67:86:1f:c6:45:dc:
31:ba:4f:ba:c2:1f:97:95:50:3d:c7:47:b3:c9:10:
23:7b:33:50:6d:ef:21:8e:dd:64:d2:6e:e1:1a:d3:
52:2d:b0:fa:ab:54:b8:ff:9a:05:a2:c4:f0:95:c1:
19:1d:67:a9:52:72:eb:ff:14:c2:f3:5b:63:fb:07:
db:46:d5:6e:70:b2:07:9a:6d:75:c8:c8:d9:08:b3:
e9:b8:93:67:c6:82:2f:5a:f2:ad:5d:d2:1b:00:b7:
ce:45:ad:57:f1:25:22:fd:d3:36:45:24:99:36:6b:
a1:46:62:68:bd:af:33:cb:78:b5:ec:39:c8:3a:aa:
2d:79:2b:85:65:2d:03:c3:c0:4f:00:fc:5d:24:9d:
3e:da:bb:10:5b:56:4d:b3:9f:e5:23:b0:26:79:4f:
7f:db:c3:30:79:26:57:73:f4:62:69:59:0e:17:27:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:78:66:D9:F6:BD:AC:F6:3A:6D:0C:33:43:6E:A4:4F:A6:EF:C8:DF
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:6b:e4:a9:3c:87:d4:b8:34:2c:17:ef:7e:50:31:72:54:
93:2d:26:f7:98:39:26:70:fb:fa:de:a4:ae:7e:8a:be:c7:63:
5c:8a:50:42:f0:0d:9a:28:a0:75:15:b8:7b:c6:74:7e:49:a9:
65:16:da:fc:10:01:73:b0:c8:87:5d:7c:2e:2a:4d:1d:4f:6c:
cb:4e:73:42:f8:a4:8f:c8:dd:21:3c:a6:80:c2:15:da:e9:b2:
a4:f0:7e:ab:43:82:ec:0e:1e:f1:c0:5e:06:32:7f:77:44:ac:
ef:14:3e:e1:05:8c:b4:79:8b:dd:c0:1a:48:4b:a8:3e:ef:e4:
f5:6f:63:89:de:ce:51:01:79:22:ab:d3:ee:79:4c:2c:83:ac:
49:81:3a:83:db:76:d0:63:81:ce:fa:51:83:cb:e5:34:bf:a8:
19:29:5c:f9:44:d8:95:56:53:64:97:7e:22:7d:ea:c2:6f:53:
51:a2:8f:3b:fd:0f:dd:56:01:12:59:f7:7d:e5:f6:37:e4:22:
fd:99:a5:26:d4:d5:bd:5a:c7:31:0e:66:d7:69:9f:37:25:90:
ae:af:4e:d5:11:a0:d5:98:e3:1e:d5:6a:ff:08:27:94:71:48:
db:86:d6:8e:f4:f0:df:22:03:4a:32:f9:f1:a6:86:1b:55:98:
d8:e4:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:07 2025 by rpki-client