Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File: zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier: uKPywnjLFaIwQk0F9wpta4jKoZ9Pr8zA8En6hyPfU4k=
Subject key identifier: 7F:89:AE:6E:3E:46:E9:82:15:7E:B0:40:60:4B:3E:A9:1E:78:18:8D
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial: 0194BCA98C0612DB73E7F1D91C717FB4F73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number: 1168
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: EpL6n7YsTJUyCIMDB2XXj1UETF0.roa (hash: 0aITT3j5lY16SRph4DUvA4Lnw1Z/zDWpJihg1Nz305o=)
2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: U5p/E92zt5KqK38D8VwWEaxqr1BBYrKCA57eZeQ7kr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:06:12:db:73:e7:f1:d9:1c:71:7f:b4:f7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=7f89ae6e3e46e982157eb040604b3ea91e78188d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:b1:af:ac:b8:9f:cf:df:74:1e:02:6e:54:
62:89:9c:08:bc:09:b8:90:c3:44:e2:a6:eb:3d:f8:
67:12:9d:03:ed:a8:9a:c2:1d:22:3f:33:27:3e:7d:
c1:9a:05:b3:5d:11:70:85:eb:0c:5b:fb:55:15:fe:
06:72:5e:d3:96:ea:41:ce:ee:a5:e2:7f:29:86:24:
31:76:f7:17:a5:39:51:41:b1:a6:ec:9d:14:11:65:
9a:83:89:20:b4:8e:90:31:a9:bb:1e:0e:6c:3b:29:
8a:6e:55:6a:d5:56:f1:0a:49:2b:13:e5:91:33:93:
0b:6b:8c:30:89:fd:55:a0:41:28:9a:22:c2:73:aa:
1f:13:25:f3:55:8a:a8:cd:6c:d9:40:59:7d:31:02:
c6:22:8a:02:00:f4:b2:ae:2e:f3:e6:b0:1b:86:41:
a4:b7:19:4a:15:09:19:5a:a0:cd:17:bd:3c:57:55:
2a:54:0d:74:fb:ee:95:ee:76:fb:e6:12:01:1b:cd:
c4:90:9d:24:13:f9:22:43:ad:5e:11:86:e5:2e:03:
3a:63:03:67:a3:22:f7:20:d7:11:24:e7:71:30:9e:
41:f3:21:c9:69:df:f8:a6:65:34:25:80:82:e6:ee:
bb:dd:e8:2c:dc:6e:7e:4a:00:0c:e1:bd:f0:01:54:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:AE:6E:3E:46:E9:82:15:7E:B0:40:60:4B:3E:A9:1E:78:18:8D
X509v3 Authority Key Identifier:
keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f2:e7:c6:ac:a0:4b:00:65:90:c5:02:cf:b1:2a:68:8f:70:
b6:cf:54:f3:50:05:1c:c6:ee:cb:6d:1e:bc:32:d5:f3:9f:d9:
02:a0:a4:c3:46:e5:ac:d9:15:f3:93:b9:64:45:b4:90:54:79:
05:3d:bf:dd:8b:e5:75:be:33:ba:e7:fe:2b:02:71:50:5f:5b:
c5:2b:0a:36:4d:ba:4d:e1:91:9b:49:90:13:cf:12:94:a1:c5:
5d:59:97:18:db:9a:79:63:34:2a:cf:8b:8c:0e:93:64:22:7d:
52:2a:56:11:bd:78:5b:e7:d4:d8:c6:34:75:07:c1:af:c7:fd:
15:77:7b:c8:5f:d9:2e:1c:3d:c9:88:62:65:b0:72:ff:53:12:
8c:fe:ea:2e:47:0a:72:f2:af:fa:ac:25:1c:56:47:82:14:33:
c2:80:8b:48:b5:8b:bb:b0:80:c7:f6:51:7f:bd:12:66:27:8e:
10:70:c0:c2:aa:a5:d8:c0:a6:50:08:da:f5:62:61:bc:b0:2e:
7a:7e:de:af:4e:31:cd:26:68:ac:5f:cc:a8:ce:c7:02:97:c0:
00:ec:f1:46:e6:ac:29:37:d9:41:5c:dd:87:1b:39:a8:c3:a1:
1e:8f:7e:3f:81:59:43:5f:f9:d9:83:42:a7:06:0c:7e:05:68:
93:14:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:04 2025 by rpki-client