Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: K8TqSMC9P2YuZrunPvVbLHuZAeex2QPk5mfoMjlAf5Y=
Subject key identifier: 01:FA:67:46:B3:BF:DE:65:D6:E6:F5:BC:16:9B:39:80:30:2F:06:B2
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 0194BC04D4A4C400B264C103E745B05F42CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 09D8
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: MvhwcX9KxFKWSzfaH14ZkXd0YBMUMElOTj8AUlODJU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d4:a4:c4:00:b2:64:c1:03:e7:45:b0:5f:42:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=01fa6746b3bfde65d6e6f5bc169b3980302f06b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:ab:61:98:77:96:56:32:d9:4a:7b:8b:8d:
f3:f5:b8:a1:83:d2:c4:2b:b2:ed:ac:ed:61:81:6e:
30:22:2c:da:cd:4d:a0:bc:ff:0b:19:52:39:d0:9e:
33:ef:12:d0:e7:c4:40:5a:4f:1f:dc:78:68:1d:94:
e0:76:97:5f:17:06:60:00:6f:6d:3d:3c:46:82:0c:
9e:df:04:03:8d:5a:a3:4e:7d:ae:65:03:49:25:99:
41:93:55:7f:08:33:12:ba:52:07:72:f9:dc:80:f7:
4e:f8:9c:08:60:40:9f:dd:39:da:30:41:42:ad:ed:
a2:69:9d:21:30:f3:2b:ee:82:ec:1d:c3:b7:7b:be:
ca:09:a3:f2:a1:15:d3:24:93:c0:98:22:01:86:6d:
ce:bd:c7:5a:2c:ab:7e:dc:26:12:bb:b1:d3:1d:95:
43:cc:70:b4:c5:8c:6c:e2:53:e4:14:57:fa:28:9b:
bd:1e:d0:12:18:83:ff:1c:3a:84:15:27:5e:2a:68:
a0:8c:4f:7b:5a:a3:e4:1a:ac:79:63:5a:12:43:bf:
87:0f:15:4b:6b:e0:78:6a:fb:14:08:8e:72:d1:7d:
d9:5e:3b:d1:c7:05:4d:56:68:19:9d:f8:3f:ac:63:
8e:bd:f9:7a:d1:c8:68:7f:33:a0:98:f2:15:8c:dd:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:67:46:B3:BF:DE:65:D6:E6:F5:BC:16:9B:39:80:30:2F:06:B2
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b6:32:27:25:d2:b4:0a:2c:7d:63:a6:be:7c:cd:89:83:34:
59:15:e6:00:06:62:6d:ae:5c:e2:5c:da:aa:7e:34:1b:3b:2a:
18:66:46:ff:17:f4:03:21:46:fa:a4:fd:5b:92:99:54:c9:6d:
6b:aa:79:8e:e8:35:56:49:47:7e:ab:0f:57:af:89:b4:c4:f7:
10:7c:73:e7:a9:4d:23:17:a3:33:43:69:27:1b:0a:23:2f:d4:
a4:c3:83:f3:f2:ac:6f:b3:86:06:3f:f0:a4:42:5b:31:0c:7c:
c2:05:28:8d:f1:2f:d4:a3:0f:25:6b:d1:17:32:82:2d:a3:c4:
04:be:c3:75:dc:5a:0d:a1:b9:e3:2f:4a:59:2c:8c:d8:87:fe:
df:f8:83:41:18:b4:c8:ca:33:52:10:14:7c:2e:98:21:c9:de:
ed:5f:45:92:b0:07:aa:bd:df:18:bb:98:9f:ee:3b:9e:6f:92:
7b:bf:07:a2:9b:b8:e4:a9:0e:9c:d9:79:0f:e8:fd:af:f0:8f:
37:88:03:1a:fd:e8:56:e0:0f:0b:f8:f8:bf:fb:e7:aa:51:c1:
52:1a:bf:fa:b2:13:84:d9:06:92:0b:76:7f:c1:d6:46:df:23:
8b:a0:4c:89:d2:c5:8d:c1:df:4c:63:ad:49:81:f7:46:b8:3d:
27:41:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:12 2025 by rpki-client