Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: PS6Ip1opE4oSNHw76Zj/ugiDuO6qkyyy2SKpua1LHuQ=
Subject key identifier: C4:24:B6:7A:E4:45:E2:EA:EB:7E:5E:98:47:FF:9D:A7:6A:E2:13:90
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 0194BD4E4B902B8A71AB5546FDB26D915C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: iHxTLDTYQbfVt6JBAQ7Qa6fzmujZmmrFE1NlwlCvgGg=)
2: aaI39-DbGwiYxab88qud3MKXp8I.roa (hash: hXf3Ze4XBluhbrN2BpmWvri4Oj4OkdW717jPTVFXetQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4b:90:2b:8a:71:ab:55:46:fd:b2:6d:91:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=c424b67ae445e2eaeb7e5e9847ff9da76ae21390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:c2:2d:29:5a:ef:c6:67:17:97:53:b2:fc:
a7:bf:3a:5a:86:7b:32:a6:04:49:47:e4:c2:40:da:
94:8f:45:7a:0c:72:82:4d:02:eb:12:03:78:a7:0c:
3d:11:69:fc:63:d0:17:70:a3:f3:88:b2:4f:f8:bb:
da:17:bd:c8:87:af:50:39:ae:5e:ae:0e:56:90:ea:
34:cd:82:3c:d7:63:60:66:13:ec:36:51:ec:2f:56:
5f:0e:ab:22:80:ee:e9:c9:29:4f:6b:08:a2:b7:ad:
13:75:b5:1b:2c:cf:6d:bb:69:c9:75:17:77:07:1f:
86:45:6b:3b:65:c5:c3:b5:d5:61:41:48:e1:6e:9c:
0c:80:d4:52:c2:82:43:0a:db:e7:c4:5e:37:11:61:
7c:f0:e3:4a:d1:67:91:00:04:9b:46:82:d7:8b:3d:
69:15:e2:ff:9b:46:5c:07:18:60:18:89:01:e1:81:
bd:74:a4:38:4b:5d:e4:07:5e:33:50:24:c5:a4:b1:
32:66:15:e9:43:94:76:b2:fe:d0:61:00:78:39:c1:
2f:6c:9c:f7:2a:48:c0:08:36:57:64:79:55:75:d8:
fc:9b:a6:84:05:84:45:15:ca:3e:25:ea:71:9d:6a:
a7:e3:a9:8c:ec:31:a6:53:7b:28:a3:2d:46:9e:56:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:24:B6:7A:E4:45:E2:EA:EB:7E:5E:98:47:FF:9D:A7:6A:E2:13:90
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:32:71:1a:80:fc:87:a7:1f:f4:0a:16:bd:45:82:2b:20:50:
72:a8:81:01:f2:1f:89:22:ff:bb:af:86:ed:d1:fa:cf:ff:cb:
86:4f:e2:49:d5:b2:8d:d0:b8:db:f9:e3:79:31:c7:54:c6:2b:
85:ae:3e:29:59:be:1d:e5:b2:e7:cd:87:0f:a8:d4:dc:30:54:
75:e2:16:65:7f:07:da:76:ff:10:e8:27:2c:46:9f:50:3a:b4:
5c:1a:16:17:b6:05:de:e3:d6:1b:f0:9f:a1:42:27:5a:35:6d:
b6:d3:1c:af:56:c6:80:13:78:88:dd:cd:18:be:ef:4e:a1:b3:
7c:ad:53:88:f9:1a:1f:0a:d6:9e:9f:72:3c:01:28:2f:04:91:
6f:34:4e:ff:63:f1:8d:b0:68:d9:ee:84:fb:b6:76:ab:6d:84:
a3:09:68:28:f7:d6:c9:cd:a8:23:aa:50:83:d5:73:c9:5a:3a:
bc:72:39:7f:39:5f:d5:60:92:b5:a6:b9:34:7d:6d:86:46:89:
71:ad:4e:8c:7b:c0:08:be:5e:0c:03:b9:e6:27:10:c5:fa:b7:
c2:28:f9:ac:e3:4f:71:a4:41:12:f0:d7:d8:ec:df:b1:88:32:
71:66:75:f0:1a:d7:de:69:45:99:f1:b5:10:a6:8a:a3:47:96:
f9:9c:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:58:22 2025 by rpki-client