Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: bYvjSGVKRRTdNYZ0+xtJ2kp59XSFCw8hyq1/Fd5D9vg=
Subject key identifier: 31:CE:22:3C:46:40:B1:4B:38:E5:A0:1D:EE:AB:43:86:83:27:68:F1
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 0194BCA9CA913CD0599B097F640451A209BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 0138
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: FwAE9Pw7j59HGWA5l4a6ZE7xm6M3v9IvUi598NcsUXc=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ca:91:3c:d0:59:9b:09:7f:64:04:51:a2:09:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=31ce223c4640b14b38e5a01deeab4386832768f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:43:ba:ea:83:1c:58:25:aa:f2:80:b3:27:
b0:db:7c:da:aa:82:f7:2a:7a:b8:5f:e9:51:da:c3:
e2:2b:9e:47:05:01:0d:95:42:d0:60:f7:8b:e7:80:
8d:b7:31:d7:a8:10:ed:44:55:57:8b:6e:c8:44:10:
b2:ff:65:6a:fd:1e:06:25:cc:a5:8d:b5:4a:81:00:
73:67:0e:24:4c:1b:d5:db:d0:8e:b6:12:f0:df:8e:
67:20:67:7f:91:be:6b:24:f6:b5:b5:cd:41:41:fc:
f0:f2:45:56:93:22:02:3e:75:92:f8:6e:7a:02:bc:
df:f2:62:e3:74:44:03:32:2d:a3:cf:03:c4:8b:4e:
7b:3c:f1:08:ba:59:8d:41:91:50:c3:69:5d:a9:4d:
c8:ce:8e:69:22:8b:57:66:d3:8e:e3:4a:7a:9c:7e:
2f:2d:f1:e3:0e:f9:71:65:ff:77:fd:e7:61:90:b4:
3e:83:55:85:e1:ef:fe:d2:d5:65:7e:20:48:8a:bc:
c2:76:2b:28:1f:1c:df:90:31:1b:a8:9c:45:61:65:
9d:1e:a8:14:1a:c0:07:3b:ae:47:00:0e:c3:10:fc:
ac:4f:6a:8d:32:b1:11:96:48:b7:57:8d:96:2d:36:
2c:ae:e1:c4:44:05:f4:aa:9e:21:31:5a:e5:cd:1f:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CE:22:3C:46:40:B1:4B:38:E5:A0:1D:EE:AB:43:86:83:27:68:F1
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0e:5a:7f:cb:60:e3:03:e0:96:0f:7a:a3:ac:a8:64:1c:d8:
78:49:cf:2e:71:94:3d:7e:27:4e:68:ad:1b:da:21:44:c5:fe:
3a:e2:c5:ec:20:d0:56:da:0c:d4:05:d1:58:0e:2d:1d:fe:0b:
44:e8:c3:a7:d6:50:79:34:e5:1d:41:39:94:79:c2:14:16:9f:
b0:e8:f1:3d:28:fd:fc:de:7a:0f:12:37:ec:d5:31:e0:80:be:
6c:e6:33:ee:03:df:f6:bd:5f:af:6b:66:68:07:0b:02:7a:7c:
d2:ff:7d:da:45:6c:15:0c:24:77:b8:46:d5:d9:24:0a:b4:e3:
aa:37:f9:2f:1d:46:69:c6:ab:68:75:de:cb:97:76:13:8e:0a:
a0:ff:04:f6:75:ab:73:86:46:b2:49:73:c8:02:e7:74:e4:06:
8f:a5:c1:55:ca:96:49:6d:33:23:cb:a6:87:6d:84:04:05:b0:
ab:38:bd:44:15:fd:20:ac:2e:9e:6d:15:ff:77:a2:13:48:fd:
ca:d9:a9:45:25:1a:b5:53:52:ff:46:8d:f6:5c:67:a4:18:cd:
6f:2c:4a:ee:08:23:39:f1:a4:ef:86:e1:3e:73:96:82:db:67:
a1:f8:4c:57:9f:ac:0a:27:83:47:3f:ed:e3:5c:28:6f:e2:e0:
90:6b:b5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:16 2025 by rpki-client