Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
File: zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft (raw, json)
Hash identifier: LnisG9BWxmB/sx62QMhtzBoNvgeAPQ+S8lxaK4fkG9g=
Subject key identifier: A8:DC:53:7D:E7:7C:6B:A9:D1:8D:53:49:62:21:B2:8B:41:87:AA:F7
Authority key identifier: CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
Certificate issuer: /CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Certificate serial: 0194BD17F0C9C37F7B80F529F7552ED22AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: WMmVXxLBNxJnZE-IVz74wBzTPGY.roa (hash: 8cKtSjQsmp93ydLLkC85Xv608/v/eBo4I+GY+4AHbek=)
2: zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl (hash: yKhOqku4SE7eViDui/jiTL2yDvEhIHgw0wZ+4FsJJAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f0:c9:c3:7f:7b:80:f5:29:f7:55:2e:d2:2a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=a8dc537de77c6ba9d18d53496221b28b4187aaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:e3:63:99:9d:19:93:d3:33:03:49:2a:c6:
53:67:a3:81:ad:64:e5:13:cf:cc:f6:4c:e6:00:ea:
df:f9:55:9b:b4:b9:75:d2:94:f5:f0:82:b4:e9:d6:
d8:0e:76:7d:af:45:fa:56:71:b2:46:13:d7:ac:cc:
4f:60:af:77:e4:32:97:eb:c0:9d:a5:4e:ff:fa:42:
d5:56:8e:d2:28:60:7c:6c:41:68:d1:f6:29:b5:73:
74:68:06:92:02:6f:84:09:30:e8:f7:35:97:a8:53:
dd:ca:0c:ba:87:bc:09:15:1c:76:1d:94:1f:60:93:
78:8f:4e:a7:c3:3f:61:2d:54:e8:b0:63:6d:a3:18:
14:fc:86:d4:20:39:7f:67:35:3a:af:72:a3:96:97:
0f:eb:ba:1a:5e:6d:0d:2c:dc:75:84:72:54:8c:88:
f2:74:d7:90:b2:4f:c6:08:a0:5e:82:6a:e8:bf:d2:
a8:99:83:b2:45:88:ed:19:2d:1f:78:1b:ef:1c:81:
85:62:f7:fe:9b:82:4b:32:b9:a1:e8:9a:1f:67:5b:
0d:97:4d:53:9a:90:90:52:7f:d6:ff:aa:ac:a5:bf:
c7:93:cd:ab:a7:08:2a:b3:6b:26:af:41:95:3f:56:
de:e3:20:8e:d3:4f:fb:b2:de:be:a4:21:67:3c:52:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:53:7D:E7:7C:6B:A9:D1:8D:53:49:62:21:B2:8B:41:87:AA:F7
X509v3 Authority Key Identifier:
keyid:CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:91:c3:7a:e9:2c:ac:bd:22:a0:27:be:54:96:d5:6d:60:89:
57:c8:ca:ff:1c:70:c1:e3:61:35:24:58:c3:c8:7a:5e:fd:d9:
72:19:57:51:0f:8b:46:d5:d9:a7:57:7d:4c:13:5b:76:c9:03:
57:92:f3:b0:44:5a:e2:67:ac:5f:f9:3b:87:6f:f5:4f:72:92:
ab:74:5a:67:bd:11:53:ca:c4:7d:53:b8:15:50:a1:86:06:b4:
7f:64:f1:ce:8f:e0:40:53:0d:c8:f7:91:20:87:14:1a:3e:5f:
97:5f:12:50:4b:7a:17:35:12:b5:a8:fd:c2:4e:e6:f7:16:ec:
b1:4f:c3:8b:e7:d8:fe:fc:15:12:fb:f2:b5:eb:5b:6e:be:68:
3e:fc:68:c9:9c:d0:25:b4:1b:a3:1f:6a:7e:d4:74:97:81:37:
46:6c:0d:e9:8d:a5:68:da:20:01:73:72:97:a4:1b:f2:51:96:
f8:9b:e7:60:4e:8b:ff:35:87:cd:e1:7a:29:39:4a:17:b8:d4:
38:bd:8f:15:8d:d9:d8:d4:d5:c3:d7:b9:0f:25:79:0a:83:ab:
3f:92:b3:c2:f5:c9:00:5a:64:53:2e:c7:bd:34:8e:5b:99:d0:
05:e0:ed:13:66:76:b5:82:11:f0:91:01:64:09:1e:39:c1:7e:
58:fc:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:21 2025 by rpki-client