Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: T23yrECk3DSw8s+NeanBNs5F7rPQlAgHxn/7fLHIg5U=
Subject key identifier: 76:B2:E8:4E:E6:28:6B:37:F8:2F:FC:53:6C:AD:5A:F0:8C:1E:8E:5D
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 0194BD85442710405CF9B8E5AE1A8C466F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 0492
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: NrYJL5cRvwpZ3RyMAVGDFH01EXU.roa (hash: fOvkxo0aYuZ6vUK7661AO18BzMq/4cGFeP4MdjUl6rw=)
2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: K8T0SXIPwmUzx4EoYpyNUSMHL7VKUKJVJna943PnWW0=)
3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:44:27:10:40:5c:f9:b8:e5:ae:1a:8c:46:6f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=76b2e84ee6286b37f82ffc536cad5af08c1e8e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:bd:9c:c4:23:f7:fa:d5:37:c7:40:a0:6a:
fb:cc:a1:bf:39:92:3a:01:d2:da:7f:01:cb:c5:8f:
50:3e:a2:92:73:1f:c6:df:f1:4a:47:86:6c:f0:b0:
88:7d:c8:41:2d:aa:45:73:44:6f:93:b1:4c:80:ca:
c5:14:6c:04:1d:33:ea:07:ec:0f:d3:42:05:1a:f7:
35:16:e4:48:f7:c9:88:86:b8:4d:ed:78:2c:14:06:
ca:11:26:a8:14:24:bd:be:98:5c:e5:e8:0a:64:80:
ae:55:1e:73:a6:49:2e:ac:78:e9:6d:38:3f:ea:24:
f0:99:35:19:19:42:fb:2f:d1:23:23:ed:8d:21:28:
00:b3:4e:6f:96:22:43:5d:7a:f8:c8:ec:21:81:df:
a0:70:7b:07:6f:b4:f9:86:16:0e:66:e1:0e:ba:aa:
e7:4c:da:44:1a:e5:a3:61:d7:30:35:36:66:63:7e:
2a:3f:79:37:63:b2:39:e2:23:81:3c:d7:9f:e4:1e:
cb:0c:31:9a:e1:11:68:7e:c0:7a:f4:a9:37:bb:da:
d1:19:62:a3:b0:05:a8:53:18:c1:b8:d4:3d:b5:bf:
e0:8c:63:ba:96:bf:be:b8:7b:7f:97:60:30:09:25:
c1:12:b7:56:9b:bc:9e:f1:24:e3:b1:03:e5:51:03:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B2:E8:4E:E6:28:6B:37:F8:2F:FC:53:6C:AD:5A:F0:8C:1E:8E:5D
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8e:bd:ac:ed:10:b7:4d:ce:2f:8e:4c:6d:36:69:35:3e:81:
c5:d5:5d:b3:cb:b2:db:ec:3e:0e:ca:8a:55:54:dd:d2:a7:e2:
c7:df:00:78:7d:72:70:d8:9b:84:3c:fe:81:61:53:b7:c1:95:
f3:f3:31:7b:23:68:28:f6:9a:31:58:15:46:88:4c:e6:09:6f:
3b:ef:35:54:63:a2:ef:f3:d9:1a:87:05:81:f9:8f:15:6d:d6:
d2:3f:42:f5:c6:62:8e:c1:cb:c5:43:14:10:87:ab:ce:d0:2a:
00:6a:b3:d2:3f:05:ba:1d:4a:ad:10:be:f5:e8:87:be:79:94:
3f:15:44:67:e8:69:74:aa:d1:74:f7:3e:8d:40:f9:1e:59:f8:
4f:4e:24:03:9f:22:be:25:1b:b4:50:0e:62:09:e3:db:70:5c:
74:e3:9a:c5:b5:ba:5e:ac:1b:b3:6a:2a:39:c6:94:a1:02:3f:
c8:94:a9:25:35:aa:aa:fc:a1:45:96:e7:3f:d0:89:51:1f:14:
e7:f2:ad:59:68:d7:02:c7:6c:b9:41:49:4f:7c:3c:31:ce:2a:
df:51:d7:1d:87:d8:3c:90:e7:7f:8d:56:0e:b5:d5:b6:0c:95:
61:a6:6a:d4:82:f9:05:12:28:d2:37:89:f9:00:41:b4:bf:c8:
09:d2:e4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:31 2025 by rpki-client