Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
File: Rzmd24xw_jNP6cKHtpJpRihRjGk.mft (raw, json)
Hash identifier: bY4DqRwe7XEKBlKkD/AsQNmw+k0jCcYDiEQYISb8PNM=
Subject key identifier: 33:FD:9E:72:AC:AF:43:43:12:46:BE:06:63:A6:88:7B:76:8A:78:02
Authority key identifier: 47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
Certificate issuer: /CN=47399ddb8c70fe334fe9c287b692694628518c69
Certificate serial: 0194BC05286D7A26B0CE5A0EA7CA308A2655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
Manifest number: 0737
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: QtxEQGYqA7zt6kbo76L4Elg-1BE.roa (hash: BDm7256ve39MMR4Mv9LtNp15OMRgK9Ec6rAqIR1Wgck=)
2: Rzmd24xw_jNP6cKHtpJpRihRjGk.crl (hash: OcJ/O1JbUCn9n+WB/rX1P/10Hx+M72YZL8let3TNsPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:28:6d:7a:26:b0:ce:5a:0e:a7:ca:30:8a:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47399ddb8c70fe334fe9c287b692694628518c69
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=33fd9e72acaf43431246be0663a6887b768a7802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:89:62:9e:f2:f4:64:5e:33:0d:85:a8:d5:
fc:35:39:25:32:1b:82:f3:9f:32:fa:8f:f5:5a:97:
46:22:69:9a:e8:f7:24:29:6c:3f:f2:be:60:52:32:
43:ec:9c:0b:99:a7:a1:46:6d:7c:d0:5b:59:54:0a:
61:ec:f4:53:57:fd:ee:ca:2f:8e:93:8f:4d:ed:f2:
65:56:01:13:02:8c:a7:26:87:5d:14:e7:f0:7c:f8:
b0:2f:a0:f4:0d:c0:01:58:36:fa:8d:15:01:2e:81:
be:26:87:89:96:78:4c:68:f7:60:cb:93:f0:4f:6a:
58:3f:cb:9d:da:63:05:17:2e:e6:b6:73:75:97:35:
e4:d5:b6:03:4e:a2:82:96:7b:b7:1c:f0:75:b9:e1:
87:ef:81:ba:1f:61:c6:18:1c:62:a2:49:c8:63:9a:
4c:fe:02:75:11:11:ea:e7:3b:3b:50:25:16:99:84:
c5:ae:e4:cc:35:17:43:2f:50:aa:23:2f:e8:32:b0:
8d:64:e8:2a:2a:03:7e:f2:9b:cc:6a:6d:70:fe:98:
47:9d:3c:01:ee:ea:4c:06:8e:a2:82:28:ed:0d:e8:
56:6a:57:45:fd:41:98:ee:52:6d:b3:63:ef:ef:f6:
55:bc:28:3e:2a:5e:88:ac:c2:40:ee:4a:ff:96:96:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:9E:72:AC:AF:43:43:12:46:BE:06:63:A6:88:7B:76:8A:78:02
X509v3 Authority Key Identifier:
keyid:47:39:9D:DB:8C:70:FE:33:4F:E9:C2:87:B6:92:69:46:28:51:8C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzmd24xw_jNP6cKHtpJpRihRjGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/512795-7ed4-4f31-98a4-4e5988548013/1/Rzmd24xw_jNP6cKHtpJpRihRjGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1c:69:b4:63:49:e0:42:54:f8:16:32:be:49:ae:dc:6f:25:
bb:9d:19:97:3f:2c:d0:a0:66:79:eb:c9:8f:33:c7:b0:a8:38:
2f:33:41:39:89:cc:6c:f2:63:e6:f0:86:1d:53:12:5d:66:fd:
ab:89:84:3e:b4:e5:06:2e:d4:eb:03:24:6c:2b:c7:eb:1c:ad:
27:29:db:09:5d:f3:f2:84:1e:34:c1:37:22:2f:74:70:1f:97:
07:7f:ee:7f:98:02:cc:fc:da:70:63:b2:aa:3c:9f:1c:8d:5a:
ab:83:c6:72:d2:1d:c4:90:c2:cc:e0:4b:12:2b:23:ad:e6:3b:
9f:ee:1c:b7:2f:4a:ba:54:6b:98:5b:d5:a8:61:51:70:ad:a8:
b8:29:a2:db:68:1e:af:1b:24:1b:5e:da:27:08:67:43:7a:b2:
0d:e1:fe:2a:29:a0:b5:48:7f:5d:83:b5:92:67:8f:63:f7:40:
80:34:e1:63:da:63:28:e8:8a:50:9c:4f:ee:ac:ed:cb:34:c6:
c6:ba:b5:0c:8d:ef:d6:c9:29:a7:f1:68:63:4a:8c:1f:ec:16:
35:10:ea:fa:67:55:50:e8:2d:02:7e:0e:72:4b:57:51:9c:2d:
7f:dd:07:e9:91:f0:5c:af:62:cd:77:55:db:48:9f:19:46:fc:
f8:de:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:47 2025 by rpki-client