Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier: WbcOySg1at02oqxM+zRjAgVgOe88h+inZnN5pDS6pjw=
Subject key identifier: 00:FA:4E:6C:9C:64:79:6C:6D:2F:FB:B9:2B:E1:68:19:40:4D:14:CB
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 0194BD85B7FFA748D4C6356D5F605B4CB8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number: 0F8A
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=)
2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=)
3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=)
4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=)
5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=)
6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=)
7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: 0zA0RpXDxGM0dyHDbHkdzExrgCxDddqo9TSh0qoCxOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b7:ff:a7:48:d4:c6:35:6d:5f:60:5b:4c:b8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=00fa4e6c9c64796c6d2ffbb92be16819404d14cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:a0:07:c1:c7:01:92:a3:af:5e:e2:e9:79:
c0:79:ec:5a:56:ca:5b:93:60:4f:6f:52:29:a3:24:
d6:ed:11:aa:1f:ec:16:15:e0:15:f2:f5:4c:7c:c9:
e0:28:58:df:67:a1:e3:20:95:95:d3:10:e5:7e:68:
5a:e6:13:8d:9e:a2:a3:fd:ad:62:48:75:97:ca:10:
98:40:50:6a:a5:65:76:ae:c1:9b:c4:4a:e3:2e:16:
6e:7a:ae:2c:85:0d:1a:26:f6:1c:5a:28:6b:d2:23:
f6:20:28:af:a3:62:91:f4:47:a4:79:89:e1:9d:86:
21:8d:3b:8f:e9:53:67:00:0b:96:82:f3:e5:8f:79:
c6:56:ef:1c:aa:a9:c7:87:e5:8c:33:51:a3:ba:1f:
60:7e:3c:89:4b:bf:0c:f8:e8:9b:31:a9:24:81:a6:
ef:51:b8:ce:cd:d0:73:79:02:fd:14:ab:06:78:65:
8c:22:1c:5f:44:56:69:ac:3f:ed:13:0b:e5:65:f0:
3e:75:cd:d9:f5:1f:29:9d:82:4f:d0:81:c9:3e:36:
22:ed:c0:dd:46:ab:99:21:01:ec:f8:be:e6:27:07:
91:46:e4:ae:bd:96:18:b3:b8:41:42:d9:37:bf:25:
86:c5:a3:89:a1:f0:e3:3e:90:13:bd:6c:66:27:ca:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FA:4E:6C:9C:64:79:6C:6D:2F:FB:B9:2B:E1:68:19:40:4D:14:CB
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4d:a0:bf:ec:44:6f:49:b3:2d:8a:b7:ae:1f:00:d7:c9:31:
87:91:21:c3:98:bf:f6:de:97:11:61:bc:06:62:fc:65:f2:5c:
38:f0:0c:54:aa:cb:7e:60:25:61:54:90:07:af:c5:aa:d8:9f:
f0:0c:0b:bb:2a:06:96:9e:7b:12:57:80:23:19:83:58:68:e6:
30:5a:45:8e:9e:5d:65:3c:18:25:68:b8:46:c6:90:09:98:90:
cd:82:92:57:26:a9:1b:3b:1a:ce:b0:5f:85:54:58:ce:c1:06:
5e:1e:1b:99:ea:b7:65:5e:e1:83:ed:25:92:ea:ae:71:cb:44:
45:e0:2b:7d:3f:9a:11:e6:12:a1:f0:b0:24:b1:4e:de:21:1d:
9f:2c:e4:65:32:5a:73:43:f1:3f:dc:6e:b7:c1:08:05:fa:05:
7b:4a:66:3a:47:8d:fa:3c:4f:e8:bd:72:b9:63:08:eb:03:28:
ac:42:ac:84:9d:8b:65:db:12:a6:11:94:ce:20:bd:0a:da:c7:
6f:d0:6e:4e:a4:9d:31:79:13:97:05:49:9d:a3:73:5b:af:df:
52:55:af:9f:3e:a5:e1:0d:d5:ec:9c:f5:b8:00:d8:63:ba:18:
71:db:5c:86:88:da:79:12:86:97:c3:51:95:80:3d:ca:26:92:
55:59:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:21 2025 by rpki-client