Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: JPB2QKIsLGPUNnC4seItySIkhzeERArAWJ42XmW8RHQ=
Subject key identifier: 00:70:A7:4F:B9:55:76:30:58:A5:7A:D9:84:65:56:CE:4B:0D:12:F8
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 0194BCAA1F05E40499E094C4969E63202AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 0A93
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: fhp+jPckMpnStYEmqMeeVWcoda6hDYUqTZwGraZKhy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1f:05:e4:04:99:e0:94:c4:96:9e:63:20:2a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=0070a74fb955763058a57ad9846556ce4b0d12f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:5a:fa:5e:fc:40:10:ba:c4:ae:fc:44:98:
e3:2c:e1:66:d7:56:13:3c:11:a4:2a:31:0b:b3:cb:
32:be:92:8b:3c:2c:c6:05:3c:5f:31:92:64:b1:32:
fd:57:7c:87:82:87:69:be:ae:22:90:e8:24:c7:bd:
d4:44:6b:dd:a3:71:ed:92:8e:8d:e4:44:c2:41:6d:
5f:54:98:5f:b3:f3:c5:f8:56:a5:11:ea:35:a5:66:
e4:55:40:1b:09:a5:1c:3f:ea:2b:9c:e6:9b:bf:14:
8e:9b:f6:c4:bd:0e:8e:c5:bb:76:97:29:bd:38:b3:
be:32:ff:6d:5c:21:7b:aa:78:90:83:b5:6c:60:51:
63:ba:65:d8:04:22:af:bf:62:0a:a1:55:9f:4c:38:
0a:dd:e9:59:2a:a2:c8:83:47:82:a3:b1:80:17:6b:
c3:fe:18:a9:20:11:f6:dd:1b:e5:48:53:4a:ad:31:
ae:b0:7c:f5:18:b8:24:a4:55:bb:35:e8:c4:db:83:
0a:2f:0e:04:98:0b:53:5d:53:ff:4e:91:f8:3f:03:
4e:01:6d:39:1e:e6:c0:d3:7a:0a:24:6d:cd:63:66:
51:0c:76:56:4a:a7:4a:aa:aa:e9:03:36:7f:74:eb:
df:8f:5f:6e:d2:dd:79:88:08:28:d4:6b:55:55:f9:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:70:A7:4F:B9:55:76:30:58:A5:7A:D9:84:65:56:CE:4B:0D:12:F8
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:f5:28:e2:bf:fc:3f:87:54:97:46:f9:d7:49:d0:13:81:
58:a8:43:24:8d:ec:8c:04:85:34:7b:34:5f:67:88:2a:b3:d2:
82:fd:e2:a4:06:92:08:28:24:9f:f9:74:b2:5b:3f:fe:ab:bb:
6a:cf:0b:54:42:46:c2:7e:5f:ef:b4:fd:0b:44:d5:51:71:6a:
04:30:da:47:ea:14:ea:bc:78:ba:62:c0:82:93:bf:95:1f:93:
21:15:17:60:98:24:40:fd:dd:42:48:2f:bd:19:42:93:16:66:
5a:81:09:ee:f6:97:2e:3d:4d:95:41:6b:93:c5:a4:59:ca:ee:
54:ea:8c:e5:a8:ed:ac:fd:2c:11:d4:56:c6:a7:2d:46:c4:51:
a1:00:06:c3:63:34:b2:b1:3b:c7:45:6a:51:cc:f1:e3:af:75:
31:97:16:14:60:f6:2f:cd:81:86:6d:76:31:cc:e3:f3:48:64:
a5:31:10:f3:db:0e:fa:8a:df:ad:14:96:95:6d:9a:ce:d4:c8:
af:d6:45:c3:da:ce:9c:dd:f9:aa:92:09:8c:49:a9:e5:90:26:
c9:9e:3f:3b:0f:fd:76:6c:39:47:68:28:fc:e0:3b:c1:b3:d7:
c2:46:d2:31:5a:16:65:83:23:bf:fd:8d:f0:da:52:0d:1b:9b:
80:49:f1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:21 2025 by rpki-client