Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
File: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft (raw, json)
Hash identifier: 35W+CrdFMfVEXgzAjUWIaPC/59JElkmx5RjN6aZ5WD4=
Subject key identifier: 82:CD:F7:B6:F1:AF:6F:47:85:73:62:D4:CD:8D:E0:30:07:5F:89:62
Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170
Certificate serial: 0194BBCE0E1350AB3B2F29143D8AAC464394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 7vdGx51ck_YIgYpkt1SPNVfsVKE.roa (hash: Nw+uAqY1I65YKmQSbXqROB23bDhd2atga2x/5hREPHM=)
2: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl (hash: n7sqCvw59zJnulTr9OWMnN0LCK69nv90pylMHX9iTrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0e:13:50:ab:3b:2f:29:14:3d:8a:ac:46:43:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daba15d1d366cb53095412d06490e23498e170
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=82cdf7b6f1af6f47857362d4cd8de030075f8962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:fa:4d:26:3b:09:c4:b6:04:11:3d:1f:04:
d5:ba:02:0a:f4:64:1f:28:17:e0:89:d3:6f:61:86:
8c:92:e5:f4:29:07:0b:1c:9f:0d:ed:97:36:2d:be:
03:f6:f7:bb:31:0f:36:19:ae:2b:96:b8:ef:2a:4a:
54:b8:24:1c:ea:79:55:36:80:55:1c:b1:1a:83:34:
97:b6:27:79:f2:b8:ba:e0:26:aa:9c:a2:d2:a0:52:
f3:42:f7:36:2d:47:86:a5:94:f9:e8:0f:a2:6a:f3:
0b:29:13:9e:82:dc:f4:30:2d:19:9a:33:ac:50:1c:
53:ea:a9:2c:2c:0d:20:70:1d:f9:92:b8:3d:88:7e:
b2:09:dc:3d:e1:81:1c:d1:ee:3e:3b:23:76:ae:14:
24:16:41:8a:69:38:3b:5b:51:86:74:a8:12:95:bf:
c2:58:f8:a5:d7:46:82:72:47:02:50:11:7d:20:23:
c1:83:43:f2:7a:4e:c1:d8:61:ab:e6:47:59:5f:3a:
ed:ce:94:8f:dd:6e:50:cf:a2:4b:b4:99:02:37:b8:
48:88:94:17:8c:c1:dc:89:75:af:0e:52:9a:9e:7d:
eb:ba:2f:be:f5:06:7b:17:3b:58:ad:f6:c0:34:7d:
32:1f:2b:99:eb:35:2c:ea:21:f7:1f:7f:fa:c8:58:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:F7:B6:F1:AF:6F:47:85:73:62:D4:CD:8D:E0:30:07:5F:89:62
X509v3 Authority Key Identifier:
keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8f:79:0e:c4:fb:e0:40:b4:e0:72:92:e6:68:16:7e:87:e7:
d8:17:d6:75:e1:ae:95:df:31:f5:9a:1f:0f:01:19:d7:cc:f3:
68:0e:e1:a1:93:61:c9:87:c4:aa:ba:06:f9:02:d2:fe:a5:9a:
39:c9:05:73:18:fa:ec:57:29:7c:61:b7:5c:81:c8:d7:d2:c5:
22:37:1c:d8:81:63:9a:5c:6e:37:79:5e:8d:ee:08:a6:1e:a3:
6f:56:cb:b2:b7:af:86:8f:bf:6b:99:ec:2b:eb:fe:f2:67:64:
b1:e3:f8:97:64:12:79:f5:47:2f:c3:29:18:98:88:ca:6d:09:
fa:fc:93:8e:e1:32:07:16:3a:39:51:39:db:24:bd:aa:dc:0a:
47:6d:85:ef:b8:5c:01:73:c4:6e:6a:61:53:f7:45:09:c4:c8:
04:ae:a6:7d:24:98:16:22:bc:5c:9d:7b:08:cf:ce:5d:e9:5f:
10:c8:03:d5:81:37:92:4d:d8:65:19:a9:0b:a4:fe:36:b7:f9:
cf:21:21:88:41:af:14:10:b6:b0:d9:7e:71:3c:45:31:91:1d:
65:09:49:c1:80:98:8a:94:27:e4:77:e3:bb:cb:d8:11:8b:bc:
2d:b3:08:1b:49:35:f9:d3:8e:fc:1c:46:7a:a4:89:9f:14:77:
e2:1e:94:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:16 2025 by rpki-client