Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: 87im2tV14wUBcjC41uvU2QR9CgqM7J05aWDe/+mGHks=
Subject key identifier: 5C:50:D1:77:F8:2C:CC:23:54:C0:52:BD:F1:5B:B9:F4:32:22:9C:50
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 0194BBCE6D2F5BE77C52E6FD9BED3F850FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: IqdjD_fsRcY86-7hZ953c9mux0M.roa (hash: UIiOvIRXIda+5wk7mIwh5k6RoSv4GhdJHg1jb9nFR4s=)
2: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
3: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
4: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
5: zVdth24X5nqjsfHBDas52yk14is.crl (hash: uFXSZXNwYvGkrQcEHYwXpOTcdhnSLub5ES2ao/BhaC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6d:2f:5b:e7:7c:52:e6:fd:9b:ed:3f:85:0f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=5c50d177f82ccc2354c052bdf15bb9f432229c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:20:93:48:d6:1d:5f:5a:f7:04:7d:23:4d:
d4:74:e8:05:57:22:1f:52:f9:56:2d:2b:f9:37:da:
21:de:f7:7b:ef:f2:6c:7b:f7:7b:33:a7:ee:0b:0f:
70:6e:b6:14:fa:52:be:03:53:f5:15:88:69:7b:c8:
4f:5b:f0:c9:82:e9:35:c1:76:1a:9b:d4:0a:59:6d:
1a:3a:38:d1:f5:9e:5a:b9:8e:c6:e2:08:0e:56:b4:
c2:b8:65:e9:c1:19:2b:73:5d:7e:f7:04:97:d6:a5:
47:f0:c4:07:2b:81:d1:85:c6:35:b5:d3:f6:dc:ff:
29:e1:4d:d4:6e:ab:5c:f6:17:9e:d9:4f:6c:f0:2b:
7e:94:62:2b:7a:95:36:18:b6:28:74:35:af:99:fa:
11:e6:54:54:f9:f1:82:4c:45:bf:b6:3b:c1:39:af:
ff:42:f4:15:b2:26:eb:29:90:82:cd:86:60:88:6e:
70:f1:b6:c9:44:6f:36:f5:e6:4e:e7:a6:63:23:7f:
62:66:98:5a:8b:a4:b3:08:75:f9:ae:31:ad:85:73:
96:8d:f3:66:f8:7e:37:4c:0c:f3:0f:59:54:44:d6:
9f:5f:f4:6d:08:95:c4:f2:e8:cc:d8:fe:a8:73:62:
b5:d0:cb:fe:3c:1e:a1:f2:7d:f9:2e:fa:33:65:d4:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:50:D1:77:F8:2C:CC:23:54:C0:52:BD:F1:5B:B9:F4:32:22:9C:50
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:dd:11:1e:ff:bd:27:58:19:6f:26:8d:cf:25:b3:28:02:46:
13:3b:05:63:e4:39:cf:fa:f2:23:b6:b5:78:cb:c9:83:fe:8d:
16:68:ad:a6:a3:0c:de:4c:00:11:89:de:61:f2:d2:2a:4d:32:
f0:06:2f:eb:06:e1:01:be:fe:d6:51:8d:6d:3b:5e:58:60:fb:
de:b4:f2:e9:41:1f:c0:64:b0:bf:ff:dd:93:4e:85:bc:a5:ca:
24:11:d4:6f:ae:e8:63:3b:af:7b:06:a4:47:c5:f2:94:c7:3b:
42:03:bb:33:8a:7b:41:bc:85:e6:2a:da:e3:1e:f3:00:08:60:
53:93:a2:23:ed:f6:34:88:fd:32:d0:52:8f:47:cc:a2:cf:48:
00:22:e9:82:7d:34:e1:83:f2:a1:5c:da:c7:cc:bd:5d:6e:d6:
87:be:12:1d:c8:72:0f:60:21:c1:57:b7:01:a5:7f:cd:8b:81:
62:5b:45:8d:08:30:56:62:f2:d3:22:5d:90:8c:96:78:34:8d:
4f:2e:35:5d:98:26:4d:ed:5e:45:15:17:ff:ef:48:26:6b:27:
f4:c4:ec:65:11:7f:6a:9b:6a:6c:25:33:0d:d2:e4:ee:e2:a1:
bd:af:c1:fd:10:72:bd:ef:2c:e4:e3:71:b5:49:03:fd:c1:16:
3c:5e:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:12 2025 by rpki-client