Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: jnmIv88n7TQDSVQbnOWL20ztSVoISX0zfO3Z71UpmZ0=
Subject key identifier: AF:F9:C0:AB:FE:B5:63:E0:5D:70:71:B2:F7:50:19:DF:E7:0A:52:F1
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 0194BD4E7C976CC7018A2088A229E18CA4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 040D
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: fm3OWEes8cO1gpQkqd+obpR+kl1qFHHL15dMkG2/QWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7c:97:6c:c7:01:8a:20:88:a2:29:e1:8c:a4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=aff9c0abfeb563e05d7071b2f75019dfe70a52f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:3f:cf:0c:7a:04:23:5c:20:8a:b5:d6:e0:
db:2f:7b:81:07:28:66:d2:65:f7:fa:21:d6:1c:7e:
a0:b0:45:a7:0a:1a:25:fd:48:11:c7:24:1d:95:4b:
5e:03:84:a6:bf:a6:41:10:2d:6d:bb:1f:dc:34:ed:
9c:b3:79:05:eb:56:fb:38:a0:68:64:42:3a:16:3c:
37:9e:4c:ec:3f:60:eb:b0:27:34:a9:38:36:97:c8:
ed:20:a4:fe:d1:08:16:98:f1:de:09:ac:89:e3:9c:
63:33:e7:e8:55:68:c4:3f:7d:48:e4:9d:a2:10:a7:
42:5a:80:63:e2:e7:45:36:2a:98:2b:3c:c0:87:aa:
d0:80:e8:73:4e:7f:43:72:0c:3b:b8:84:77:c9:10:
e2:61:c0:a9:3a:9c:19:9b:a7:bb:41:c4:a4:b5:c1:
84:8d:25:04:e0:87:53:aa:31:e1:bf:ff:ec:d2:d4:
72:e8:aa:87:d7:6e:94:62:b6:83:b0:a1:b8:48:95:
e0:cb:cd:e8:af:59:21:bb:e5:b8:d9:fc:33:80:36:
42:94:91:cd:41:fc:73:f5:9d:0c:b9:88:f2:32:d6:
80:45:f8:09:3a:8d:d2:16:16:6d:8d:11:19:78:ed:
37:4d:72:b7:b3:80:5c:ea:38:0c:cd:d4:be:77:6a:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:C0:AB:FE:B5:63:E0:5D:70:71:B2:F7:50:19:DF:E7:0A:52:F1
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9c:20:6f:a3:8e:80:e8:2e:2f:1d:0b:04:6a:9a:2e:69:4a:
10:5e:04:f4:a9:a0:49:a7:0d:2a:69:b5:59:73:88:3f:aa:3d:
dd:37:4a:b8:9a:1b:10:be:fb:91:e9:78:64:4f:ce:3a:79:f4:
d5:11:54:fd:5b:15:f6:27:22:d1:5e:0c:3b:fd:3d:db:ff:2b:
82:5e:68:d2:a0:35:4a:96:34:56:a2:57:69:55:b5:79:7d:ce:
81:18:57:61:20:36:a8:68:3f:e8:d8:38:55:9b:f1:4b:ea:f7:
a5:e1:da:f0:08:51:0d:b0:7f:07:c5:af:77:46:29:4d:bb:4a:
5e:76:0c:8b:a7:e4:bc:a3:90:fd:9b:17:4a:d3:3c:1b:24:ef:
52:43:65:71:98:f4:b4:e1:34:a1:fb:7f:80:c3:8e:01:21:62:
4e:c1:6d:22:c4:4f:b5:98:fa:85:31:71:af:af:88:46:52:50:
63:69:ab:2b:04:19:9a:29:92:b9:34:fa:f9:f1:ad:75:fe:de:
5e:25:c6:c3:ad:0e:1a:16:8a:23:6d:92:b8:1d:ce:22:9e:27:
5f:44:b8:c7:c2:d5:22:bb:3f:3c:f7:ed:77:f6:b2:3c:f8:69:
e9:40:a2:50:9a:a3:e9:81:41:f5:27:ca:05:b1:7d:86:23:9b:
40:76:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:41:52 2025 by rpki-client