Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: 9G0nXqIoGWMMzDGWALvP/zXXzPupHiOp6zYPEiojEj0=
Subject key identifier: C2:70:E1:34:FE:29:78:3E:3D:22:E1:0E:FA:38:68:9F:50:C2:94:2C
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 0194BD1786C6314D11A56321683364DD810F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 03C6
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: ekZEfGIQNSiichkWh+tBpHc3uxpQu9zYsNhcHl+ezOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:86:c6:31:4d:11:a5:63:21:68:33:64:dd:81:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=c270e134fe29783e3d22e10efa38689f50c2942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:68:dc:bd:a5:f7:ff:1a:3e:f6:96:22:5f:
27:de:7a:15:1e:c7:c1:72:83:d5:3f:4c:20:c7:56:
f3:f2:c3:e2:13:50:9d:25:aa:4f:0b:ed:d4:25:45:
f3:1c:fb:24:b0:8d:d0:77:84:d7:36:3b:17:30:39:
fe:7b:3e:a5:5d:45:1a:d0:94:78:ad:d9:df:ee:66:
a0:23:bb:0b:3d:e4:42:d7:4b:78:b2:3b:e8:ff:06:
bd:5c:c3:99:34:54:ee:24:84:ed:34:11:ba:09:ae:
3f:40:10:67:10:b5:24:66:95:fa:c4:f5:ce:8c:0b:
68:93:81:b9:ff:49:b4:cf:05:fc:71:0b:a9:10:dc:
3b:a7:42:da:f1:39:2c:ba:0a:d1:66:26:d1:67:44:
18:59:26:0c:b4:b9:5c:88:c2:94:f6:f5:02:2f:29:
5e:4d:43:14:1c:88:85:7b:05:bd:04:17:f2:76:39:
bf:6e:31:ab:de:25:03:57:db:6c:d0:ec:79:79:47:
b3:0e:48:19:ab:d7:6c:20:ce:06:a3:39:0b:b9:ba:
7f:a1:57:d4:ce:a7:d7:15:28:06:98:6c:67:c6:cb:
36:e6:92:e2:17:0e:90:cc:41:48:8a:5a:95:c2:b1:
80:3f:03:bf:4d:69:c8:00:63:33:a3:42:3d:c3:5d:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:E1:34:FE:29:78:3E:3D:22:E1:0E:FA:38:68:9F:50:C2:94:2C
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:df:05:58:81:d7:eb:fb:b7:6a:12:07:79:ea:b2:89:1e:1c:
17:21:dc:27:83:ea:68:03:97:7a:e8:90:47:2e:bc:fe:54:7f:
c3:f8:9d:59:76:3e:89:3d:19:5b:1b:b1:23:51:40:72:a1:40:
ef:2f:35:14:30:a3:dc:bd:3c:67:e0:2b:e7:d1:1e:72:ae:c4:
27:bb:d4:84:79:68:3a:b6:fe:bf:7b:79:33:02:ca:29:eb:f9:
f3:ea:b7:09:7f:46:46:b8:14:d9:9d:37:ef:cd:2b:05:b1:3d:
d9:6d:b4:ac:e9:69:39:ae:fa:4a:c0:3b:33:2e:24:a8:cd:0c:
d0:98:db:4e:2b:aa:27:c1:36:dc:2d:6f:f1:f5:0c:39:8b:0a:
79:90:84:7b:8b:8f:a3:e2:e7:02:41:c7:12:6d:22:a8:85:f4:
45:b8:81:f5:d7:b0:3d:f5:63:cb:ea:13:60:de:9a:a0:8d:2e:
3e:36:11:98:56:dd:38:03:1d:85:52:29:13:23:3b:5a:9c:d3:
4e:95:ff:3c:60:95:eb:22:41:9b:2c:28:28:01:03:a7:fa:2e:
68:9a:7a:3f:31:8d:fd:1d:25:cf:7c:26:88:7c:3f:e4:0e:b2:
b7:d8:32:b4:2d:be:a2:6b:29:44:51:53:73:66:e9:ad:14:70:
29:9e:3a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:34 2025 by rpki-client