Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: fOsyJoG2J9a9+tSXzIyLoPY7C3RWAxPCQv6JsPr/DnU=
Subject key identifier: B4:93:6F:59:C5:F4:98:51:87:89:D5:66:F4:75:1B:AA:49:88:E0:9D
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 0194BCE08152C4CE3B07F7373EFF4EA2764C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: 5Od1zJq69/t1ERPYyALQp4okdprv/C4krCEagym/aIg=)
2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:81:52:c4:ce:3b:07:f7:37:3e:ff:4e:a2:76:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=b4936f59c5f498518789d566f4751baa4988e09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:6f:38:2b:19:81:40:86:1d:ac:5d:fe:ee:
e7:2a:d6:b3:43:16:12:26:c4:e9:19:65:e4:d1:d0:
61:56:9e:44:73:62:ce:80:0f:3d:01:a4:ad:51:8e:
52:1b:10:00:51:de:4e:84:e8:82:a9:b6:5b:ab:35:
df:8e:de:07:53:2e:2f:72:0f:4e:83:4f:f8:7a:54:
ea:5c:2f:b1:4f:32:69:57:10:a9:4c:cf:c9:c6:30:
d7:21:05:b5:39:4d:ce:6a:97:f2:bb:74:ab:44:f8:
88:ff:54:62:e4:6d:d8:56:b5:92:20:84:20:1c:68:
d0:0c:1b:dc:93:e5:9c:64:f4:04:c9:61:f3:70:af:
ce:6a:46:07:c0:41:10:f9:0a:35:c8:45:4d:54:3c:
b6:e8:31:23:60:1b:32:56:2d:13:52:8a:e9:24:a9:
e5:2d:5b:7d:60:1d:ab:38:2b:cd:ab:7e:54:55:63:
81:c4:77:b0:db:89:34:0d:40:bc:f3:86:75:a8:75:
e5:57:39:aa:c2:71:8f:bc:51:57:20:11:3b:ac:21:
4d:28:3a:d7:2f:e2:59:12:3d:6b:93:ba:ef:e6:ab:
dc:43:dc:69:d5:72:1b:1a:37:5e:10:c7:db:3c:16:
9e:50:4f:3c:87:7b:10:24:e3:7f:4a:c5:da:df:d9:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:93:6F:59:C5:F4:98:51:87:89:D5:66:F4:75:1B:AA:49:88:E0:9D
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:76:39:0b:09:ec:87:e9:a2:0a:48:93:79:f4:44:83:36:2e:
0c:4e:7c:1c:84:08:69:1b:fb:4a:df:63:57:7c:a0:a3:cf:de:
56:67:2e:97:8d:b9:c1:eb:d8:94:e5:ca:6a:a6:eb:19:24:1a:
c1:b0:18:11:c8:45:db:56:d3:8d:7c:50:48:73:ba:2b:58:d3:
22:e1:b8:1d:b6:d5:29:61:61:51:4d:18:97:64:a3:a0:99:22:
27:2b:02:3e:8b:05:57:17:99:1f:f8:a0:fe:1e:15:a2:4d:48:
53:b9:cd:20:ee:4c:6c:60:ad:7b:7b:d3:76:7e:8e:ae:77:7f:
c6:f5:0b:76:65:e9:30:a7:71:a4:94:89:04:50:d9:34:58:da:
11:2d:c3:d9:7c:fc:7c:0e:85:28:55:f5:8d:7f:ec:8d:ce:66:
02:32:65:74:1f:69:2c:41:31:16:ca:e7:64:6f:90:bb:38:10:
bf:ed:70:e4:af:b2:de:75:13:6f:30:53:d5:bb:bc:48:31:86:
d4:d6:d0:75:19:b2:e8:14:52:e0:52:93:cd:89:03:ee:aa:98:
42:c4:7e:8d:36:db:13:f1:2d:59:11:4c:49:49:29:29:4b:33:
12:68:8e:99:8c:9d:c2:f3:12:65:f9:5a:00:69:18:e8:d4:7a:
b0:37:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:28 2025 by rpki-client