Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier: MzOef2woiNyqy6K4atFYi2IrNzr/ze6VF4zgD/FbgY8=
Subject key identifier: 1F:12:4A:77:BE:98:AF:B8:0E:4C:BD:4B:27:94:7F:D3:76:9A:31:47
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 0194BD17846A4EA274254C8DBEA1CD40DA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number: 0B01
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: vPXxAbfzU2MiW9EjO9X5Xdas4V4IfemKJbgpgJe7DaA=)
2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:84:6a:4e:a2:74:25:4c:8d:be:a1:cd:40:da:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=1f124a77be98afb80e4cbd4b27947fd3769a3147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:8c:9a:bd:a1:98:c3:5d:e1:22:f5:e1:8e:
3b:fe:8d:9f:fc:63:8c:f8:0e:34:39:94:ad:82:6f:
69:7c:12:d3:b5:19:36:95:39:bc:d3:25:34:28:20:
0d:9d:32:48:6c:b7:2a:ad:18:62:c2:13:95:1c:7a:
38:a2:8b:02:ed:26:69:80:44:c2:92:93:17:3e:da:
62:f1:84:e1:93:b1:17:0d:83:2a:ec:0a:a2:cd:b7:
ad:fb:b2:63:dc:21:f5:08:41:5e:34:6b:a9:ec:8e:
79:05:1c:fe:5e:5e:20:3e:83:b2:94:43:19:b3:09:
16:4d:ef:0a:9e:91:28:4a:e7:99:fc:fe:14:e4:73:
c6:b3:61:f8:90:06:ac:38:b2:ff:b2:81:b4:5a:fe:
47:e7:39:37:09:3c:29:ba:90:ee:40:9d:0c:e8:25:
ae:db:23:3c:60:5d:cf:69:7f:ad:f4:60:31:a2:f9:
a9:b8:54:e5:48:d8:1a:21:5d:e3:5e:e9:68:58:66:
e0:c5:68:94:7f:c9:11:c7:b2:be:63:f6:ac:bc:05:
5e:bb:e4:c6:5d:57:3c:2a:4a:4a:25:d2:56:c9:00:
d1:45:42:18:70:7c:4b:ef:b7:97:24:59:f5:97:32:
c4:54:e7:7e:89:1b:f3:17:26:a4:14:f7:b5:9f:d4:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:12:4A:77:BE:98:AF:B8:0E:4C:BD:4B:27:94:7F:D3:76:9A:31:47
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:96:3a:d3:79:59:21:9f:81:11:19:be:43:b3:99:22:e3:84:
b6:94:0e:22:14:35:78:c8:42:34:c2:eb:cb:78:3b:0a:09:76:
06:8d:77:02:48:c5:7e:52:84:af:8e:5d:f7:09:32:fe:9a:8f:
6a:be:e2:22:34:71:fe:f2:b4:a4:da:6e:6f:4b:d6:95:50:a9:
77:31:74:4f:ba:77:73:bf:12:db:54:5b:c2:a8:41:d7:56:15:
ab:5e:f5:e2:65:80:5f:ff:28:90:28:54:58:69:1d:29:30:c1:
7d:d7:4c:84:a7:01:f5:26:e2:4d:9e:1a:17:83:fc:24:77:33:
68:94:e6:8d:c9:b9:12:9c:04:fc:02:18:1d:3a:1d:d3:86:56:
9a:a7:16:d9:3d:b6:cb:6d:78:b8:d2:9e:fc:db:08:a2:9f:88:
ac:58:de:a4:75:8c:a6:2e:0e:b9:6a:1a:c7:73:8a:1f:dd:e7:
54:8c:d8:ce:c8:b3:ec:91:d3:41:45:52:d5:04:0a:66:e7:e0:
c4:70:eb:d7:7b:37:23:b0:01:fa:af:a5:ba:71:09:4c:73:21:
1a:cb:72:e2:b5:ad:d0:0b:f9:5c:2c:07:32:9f:19:85:d6:31:
2d:99:8d:cd:34:b5:0b:5d:76:14:c4:bd:70:3e:5f:49:e0:5a:
75:24:3f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:04 2025 by rpki-client