Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier: thX26Yhbnwdx9Ay+tPEbQ/58oi8/l4xaLXTdTHAStXY=
Subject key identifier: B4:E3:34:97:62:7E:C3:37:B2:84:AE:C3:DD:F1:10:4B:E0:8E:19:CC
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial: 0194BD856FC3BCC2540C776DD35349B1F7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: ETgXzoEpP4ar0seCWozyb+mgr969UKGeyqKwVMj43wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6f:c3:bc:c2:54:0c:77:6d:d3:53:49:b1:f7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=b4e33497627ec337b284aec3ddf1104be08e19cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:e7:09:bb:1c:68:ce:92:43:42:bf:9a:74:
81:e6:73:58:e1:33:b2:e2:e4:c8:0e:57:00:c6:a4:
dc:8f:03:c8:c7:71:27:34:4b:98:8b:31:56:71:7e:
97:03:da:b2:47:78:4f:9f:d0:95:d4:82:f6:e2:db:
17:1e:e2:7f:78:bf:2d:cb:a3:da:c2:12:f3:20:ca:
18:2d:91:f5:33:ec:4e:f0:d6:08:2b:36:26:00:b7:
c0:e3:2b:09:d8:a2:c0:e9:34:cc:d9:6c:0e:b8:a4:
f3:31:b3:9b:d1:3e:cd:74:f4:c0:21:83:ce:f6:ea:
64:6a:a6:f2:b7:07:61:ca:8f:13:ab:b9:9f:af:a1:
cb:5d:bc:a7:9c:42:d9:fc:08:f0:07:0f:9a:6b:64:
84:3c:9c:58:b2:14:21:78:65:51:93:4f:cb:7a:88:
79:2c:c6:f6:b7:f3:af:04:1d:4f:2c:b2:0a:54:71:
ef:d6:3c:cb:21:68:ba:a3:5c:bf:86:d3:17:67:39:
7e:46:0d:c9:2f:ed:e4:c9:9e:74:29:67:13:50:ab:
3b:3f:54:1c:ae:83:bd:8d:d2:fb:c7:da:a1:f6:57:
8b:55:47:85:1b:e4:f8:ec:f5:47:d4:f1:2c:ac:4b:
c5:8b:26:64:3f:78:e6:aa:b6:a7:51:d2:ca:74:82:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:34:97:62:7E:C3:37:B2:84:AE:C3:DD:F1:10:4B:E0:8E:19:CC
X509v3 Authority Key Identifier:
keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:d7:91:92:1e:76:3e:7c:b2:15:f3:6f:a3:c9:27:7b:fc:
e5:94:6f:48:2f:85:9a:3a:a3:4a:10:96:d3:9f:be:13:5a:a2:
2b:37:47:aa:27:ba:58:c9:2c:ae:11:f7:58:3f:c2:8a:3f:c2:
5d:be:87:bf:71:1a:f3:d9:b7:62:b0:0a:6c:9f:0a:3e:3f:21:
0e:04:05:9e:e8:47:79:82:dd:ad:96:30:29:ab:66:ba:40:bb:
65:98:fc:61:f4:a9:f2:2b:6c:77:17:c8:21:db:ce:24:23:27:
ca:8d:7a:0b:1c:d0:22:c0:04:86:e5:a8:5f:b4:4a:bf:80:d3:
9a:1a:a0:78:28:57:1b:40:06:03:d3:28:57:eb:0a:45:47:fe:
cf:6f:50:cf:79:bd:7a:7d:f8:4d:93:28:fb:8b:e4:c4:f2:9a:
06:55:bc:53:b3:a3:39:c1:07:97:05:66:6b:18:fd:98:08:f3:
aa:f9:d0:e4:81:0d:50:80:bd:1d:ad:df:42:18:a3:99:db:fc:
31:7a:a1:22:f0:b0:36:89:ff:db:ae:99:04:81:35:dc:c8:f4:
8a:e2:c6:75:77:12:3b:07:5c:29:f7:8d:d9:a4:ad:05:2d:5b:
89:7e:f6:06:56:4f:1c:39:23:91:0a:d5:d9:3f:25:3c:9a:f8:
c3:0b:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:24 2025 by rpki-client