Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: tC3xpP/zDlvajjujRuI0U3ug4Xf8wPsRVedJSsrw0z8=
Subject key identifier: 87:C8:8C:7C:CD:13:AB:74:3C:04:E4:FB:E9:A0:EC:46:A6:B6:52:9D
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 0194BD852E31492CCEE20DD1B686DC31C892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: Le+zlf6YYKbGvhBzV8f57Qr/Nf0i8yWX/2FWZLQy43M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2e:31:49:2c:ce:e2:0d:d1:b6:86:dc:31:c8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=87c88c7ccd13ab743c04e4fbe9a0ec46a6b6529d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:e0:9e:6f:bc:65:65:2e:ea:a8:82:0d:57:
3c:f4:23:a3:a5:76:d3:2d:c3:e1:13:65:59:32:70:
26:86:8b:53:77:a1:c0:21:13:59:e3:03:2b:f7:ea:
af:1a:a0:40:32:0a:44:5f:5b:d5:a9:6b:ba:26:55:
02:45:26:80:9f:21:76:45:91:08:01:69:25:a9:d5:
e5:b4:0c:1e:0a:f6:16:e4:66:e9:16:66:dc:c4:67:
31:c7:10:a5:72:8c:b8:a1:db:dc:37:ea:5d:2a:d6:
7d:14:32:ea:d1:86:00:08:8a:80:7d:90:87:e2:dc:
8d:a8:1c:ac:35:47:ea:67:6e:fc:13:63:42:c7:5a:
f5:7c:7e:2f:1d:c2:91:33:c4:23:df:60:d4:49:23:
67:72:cd:82:17:f1:f9:23:dd:00:32:c8:03:3a:83:
50:f0:80:56:6d:c7:f4:19:18:52:f9:f6:28:6d:85:
97:5b:4d:08:98:b9:f0:1e:a0:a6:f5:56:b9:37:c2:
93:b8:31:ca:6a:05:e6:6b:0b:e2:ca:bc:9f:68:fb:
c9:0e:a3:01:12:37:a4:57:a6:dc:63:52:83:2b:00:
c5:e3:0d:e0:3c:10:14:cb:63:4d:10:c8:96:fa:3c:
66:e0:77:3e:99:41:6a:d7:d8:f8:2a:fc:d3:37:c0:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:8C:7C:CD:13:AB:74:3C:04:E4:FB:E9:A0:EC:46:A6:B6:52:9D
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:88:a4:d9:c9:66:8f:83:f2:17:4b:f8:0c:b5:3c:2e:a7:02:
e7:d7:55:c2:54:46:2a:58:c8:d7:1a:f5:c7:4f:45:9c:81:ab:
15:f4:31:db:f2:03:30:e0:47:72:f2:09:2b:87:54:c6:b5:ee:
be:90:77:4c:b7:19:d8:db:7e:51:4d:7a:a0:86:6d:fb:c3:91:
6a:b5:0c:87:0d:ec:b8:2c:64:28:c8:7a:a0:9a:32:83:9b:88:
e5:05:b0:02:ca:71:3b:3b:35:0f:b4:84:c1:a3:0a:a3:ed:d6:
8b:b2:0a:b4:b3:0f:80:89:5f:19:3e:0a:3d:66:49:b8:33:63:
b6:f0:b6:30:a8:4c:e0:37:52:b8:45:eb:44:86:2a:28:27:5f:
5b:77:9a:6d:be:bd:20:ed:e0:dc:f9:50:62:e3:0e:ba:e7:2a:
40:42:7f:2f:33:c4:7f:3b:95:aa:52:14:42:0f:07:ef:ad:e9:
4c:de:21:6e:81:d7:29:40:db:b1:5c:e8:f3:0c:aa:a5:72:79:
2c:71:90:24:55:de:ca:15:23:56:14:ea:74:45:20:3f:10:44:
69:db:0b:3b:2e:48:fa:c4:16:45:6f:74:89:28:f9:26:9d:00:
5a:26:e3:68:b2:90:c9:0d:b7:2d:9c:fb:21:4d:b2:d1:5e:f5:
63:24:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:34 2025 by rpki-client