Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier: G+YyvlJg2kyKOym0B1HWC2JEGS+66BHU0wfNLpdD/JA=
Subject key identifier: 87:D3:A0:F6:CA:C3:37:13:CF:DD:E1:50:5C:18:40:98:E7:D4:2E:C8
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 0194BBCEC6DAAB13B117775C2CA1C6B60E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number: 10EA
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: OcYq4y2xhPwZ9mo3fvJB8iMsbIsg/bPIVFtTqlMRQ6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c6:da:ab:13:b1:17:77:5c:2c:a1:c6:b6:0e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=87d3a0f6cac33713cfdde1505c184098e7d42ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:bf:1a:24:ff:0d:61:7f:e2:61:72:84:49:
7a:85:0d:de:98:0e:d5:5a:5b:95:57:1e:f2:58:0a:
56:68:10:23:37:7f:7f:da:55:96:be:0f:70:30:21:
35:33:2d:cc:b8:c4:41:15:11:a8:22:4b:79:99:d8:
f8:44:5b:a8:83:68:ec:dd:36:aa:67:e9:78:0c:3f:
7f:3e:9f:e9:9f:c9:7a:32:a1:9c:84:c7:1f:de:e0:
e2:7b:f2:b3:a9:35:12:1d:2b:8d:ee:50:12:92:54:
b8:e3:bf:f9:80:b4:8d:51:5c:18:ff:90:aa:ca:4a:
7e:38:70:6d:51:33:1d:82:75:f8:16:fb:91:34:db:
02:de:ad:17:21:f7:70:9f:c6:bb:12:c1:ba:30:f3:
e0:0d:22:17:b0:68:ca:3b:44:7c:d1:50:9b:11:df:
af:c2:34:cd:4a:07:a6:21:2f:e6:fd:2f:4c:fb:09:
88:96:82:89:c7:46:fe:0e:9a:3d:dc:e1:f5:13:be:
3f:5c:14:90:2e:68:ec:f6:68:25:75:d6:66:31:b2:
d9:0b:99:4a:6c:ba:37:7f:f1:62:8e:d1:67:da:ca:
c2:89:f3:72:44:34:2e:4a:e0:b8:16:3c:24:0a:b1:
6b:fd:fa:26:b8:dd:aa:cb:70:73:27:92:ab:42:82:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:A0:F6:CA:C3:37:13:CF:DD:E1:50:5C:18:40:98:E7:D4:2E:C8
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:92:0f:b8:7b:aa:33:89:a3:26:a3:61:57:2a:ed:23:f7:2c:
d8:ec:39:2a:62:22:a3:fc:5e:45:bc:f9:97:2d:a2:d9:bb:77:
19:44:51:eb:cf:bd:d0:45:d5:13:d4:5f:d2:d4:1f:16:48:66:
53:a6:32:51:f6:e8:d0:57:d7:fc:d7:e2:0f:2e:92:8e:9d:ce:
b4:54:7b:e2:32:b8:e0:33:fc:07:08:38:1f:a4:dd:35:68:74:
8d:7f:83:7a:75:4a:24:f8:50:fc:7a:6c:cd:07:b0:c9:5f:b8:
89:22:47:5a:d5:db:0b:33:d1:8a:54:d3:8c:1c:07:fd:32:f0:
d2:d4:ff:42:4b:eb:62:9d:58:29:35:37:d2:fa:11:f6:8e:21:
6b:d8:05:a0:2e:c4:7c:6a:9a:98:df:e4:d4:94:ed:84:17:3a:
d0:e5:7c:1d:24:07:73:08:31:07:c6:d9:2b:2a:1f:96:2b:1a:
4f:15:21:3f:0d:86:8b:0f:47:77:ce:3d:9d:64:da:04:e4:3c:
8c:df:f0:9a:bf:c8:70:35:0e:7d:4f:22:3b:60:0c:6e:86:21:
9a:d8:53:73:4d:46:eb:e9:b6:6b:ba:cf:d9:b3:72:15:5b:45:
a7:f5:83:14:d7:74:0d:f1:e8:8e:19:b2:fc:a0:e5:37:e1:36:
e1:0d:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:55 2025 by rpki-client