Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
File: iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json)
Hash identifier: ZF3NDnaAU68BhBmqj4y9SN7EbPoVLeDhU3YiNHm2u20=
Subject key identifier: DE:FB:BB:91:D0:AA:0F:91:2B:21:CA:98:70:80:A4:77:41:6D:90:18
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Certificate issuer: /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial: 0194BD17701CD462A1AAC7994382EF3B0A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 1wukbEM_Z2cOLmS317mkgQWPtlY.roa (hash: mynvXYceF8nnYoZdEmhOk8iYDpjkXUz62HUCHGcK8Wc=)
2: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: +jQG6D7G4a9zj8+zqURoiU5XgvqKVmLk82Hj8s/GqrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:70:1c:d4:62:a1:aa:c7:99:43:82:ef:3b:0a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=defbbb91d0aa0f912b21ca987080a477416d9018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:21:42:bc:cb:b3:28:f3:f4:0d:8b:75:0b:
ee:bd:2b:f5:d0:c0:81:94:17:b3:4c:20:ac:ae:a6:
04:2a:c2:9d:b9:7e:6a:97:23:5a:07:b9:62:e4:76:
79:ac:57:50:1e:42:28:ae:f8:8b:c6:44:75:4a:73:
5e:43:ed:8e:5d:20:f1:29:be:79:24:fd:6a:19:fa:
2c:85:a9:d3:51:66:ef:10:20:6d:5e:63:ea:ff:cd:
3b:0a:c6:d0:b3:48:00:c8:46:81:1a:fb:f3:45:2c:
d0:b4:78:12:2f:1e:af:a6:13:c2:81:95:e9:40:d9:
46:0f:c9:f7:8f:3c:14:b0:70:79:7c:e0:aa:92:27:
3f:58:5e:71:50:98:0f:38:49:54:87:28:28:aa:df:
19:8d:50:a2:e3:41:cd:57:00:48:1e:f7:c8:d3:f7:
e5:2c:88:8a:f9:1d:2d:de:9f:f3:d1:73:46:ce:5b:
35:a3:11:95:a2:64:76:d3:d3:5d:30:53:ba:26:00:
6b:d5:10:cd:2f:6d:56:6f:09:19:a9:73:93:e6:00:
a1:57:bf:21:a2:1e:29:b7:67:41:44:ee:ec:b8:a6:
84:0d:44:d6:d5:2a:49:11:b7:08:e0:ca:e5:86:82:
3a:f5:8a:be:7c:03:47:85:1c:d2:5e:70:6a:1f:84:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FB:BB:91:D0:AA:0F:91:2B:21:CA:98:70:80:A4:77:41:6D:90:18
X509v3 Authority Key Identifier:
keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a5:3d:e6:82:79:d5:2d:49:57:da:cf:af:8e:b4:07:ee:bf:
93:3d:6a:49:e5:72:d5:52:42:08:f6:36:b5:d5:15:13:d5:dd:
ac:78:f7:c9:bd:0c:b4:15:79:3a:78:e0:7c:1b:24:2f:d0:27:
20:e5:86:fa:91:8c:85:16:3e:fb:9d:1a:45:4a:0c:a5:8e:0c:
b8:95:59:c5:8b:4d:6d:18:c8:46:b4:1d:9c:02:56:89:f9:2e:
54:85:dd:01:ea:57:4b:5c:80:fc:2f:c6:32:15:01:27:f4:f2:
b2:01:58:b7:01:46:f6:26:dd:0f:55:3c:8f:9b:64:eb:5c:00:
da:eb:e9:35:6b:26:a4:10:34:9d:12:ee:9a:18:82:f2:29:62:
80:87:fb:2f:cb:e2:6a:86:9c:3c:1f:c4:11:bc:3e:4a:01:84:
51:f7:d5:8d:05:5b:9d:ff:d3:8d:3a:c1:82:c7:70:5f:4d:87:
25:41:51:f6:b0:7d:cb:49:8a:27:85:f8:80:de:4b:8a:35:8f:
c5:50:18:93:7a:46:3b:f4:3e:15:b4:3c:9b:b4:22:42:2b:b9:
93:9f:f6:67:65:88:87:7f:2b:df:24:f7:79:ec:0d:a0:95:f4:
3b:cd:d9:9a:e2:da:42:e8:8c:ce:12:f3:56:92:64:69:48:d6:
24:0d:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:36 2025 by rpki-client