Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: J95cjm+CDOrhI49foUCRjhDA+l+TbHbFjQ0K/KvvWSs=
Subject key identifier: C3:B5:FE:7D:88:64:F4:62:7A:21:2A:E0:67:D0:C5:C0:9D:D6:02:DE
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 0194BD852536D507F1867F957B31542183A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: 5XE+ifPw19uDqUwBMrnByPJGXtV9i9akF/Kx7/u+Si4=)
2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:25:36:d5:07:f1:86:7f:95:7b:31:54:21:83:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=c3b5fe7d8864f4627a212ae067d0c5c09dd602de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:c5:e4:52:54:dc:11:70:2e:e2:9f:de:8e:
24:dc:84:80:74:7e:9f:5a:85:b9:78:35:fb:4b:9e:
5d:66:ec:5f:79:66:74:c0:96:9e:55:f4:98:20:c9:
3e:0e:3c:1c:92:e1:4d:38:3e:3b:aa:a5:af:b5:b9:
56:85:60:43:17:80:8d:fc:20:c5:db:42:eb:d8:af:
b8:56:f6:67:ad:ac:c2:0e:3c:66:da:39:4a:38:21:
ce:c9:32:2e:5b:a2:64:34:ee:8b:22:e6:bf:db:a0:
67:1c:cd:98:3d:d3:5a:19:66:e3:6e:d8:a4:82:62:
f3:8f:ed:84:d1:31:71:22:2a:6f:2a:c3:33:6c:7d:
2f:84:54:b2:ff:cb:42:cd:1b:d4:e1:05:11:4b:51:
0b:71:47:09:ee:cf:c1:17:96:a1:c9:4e:ed:84:53:
1c:54:03:2b:2d:bf:71:ef:c7:63:5a:10:74:a9:f4:
33:ef:51:b0:8c:a6:2a:25:4a:7c:6a:86:b5:22:d9:
ab:07:2a:8c:56:b9:49:31:02:10:d6:67:c4:57:63:
20:45:9c:36:67:7e:8a:62:4a:6b:e0:12:55:0f:37:
70:09:9c:d1:3a:51:97:e7:dd:f9:fc:7a:45:15:f5:
d9:e5:c6:71:30:93:10:10:e1:9f:5c:9f:26:c6:29:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:FE:7D:88:64:F4:62:7A:21:2A:E0:67:D0:C5:C0:9D:D6:02:DE
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:ec:14:c5:46:a7:1c:a0:27:8f:54:4e:5d:d7:1c:30:49:
83:84:16:73:fe:dd:bc:e5:ca:7f:01:b3:27:28:0e:db:a5:91:
bf:28:14:9a:89:71:2d:fd:86:79:6c:be:c7:e8:e7:b8:0e:93:
c3:f5:ae:53:de:ae:4c:6e:c4:05:c5:c3:25:87:e1:fb:ab:fc:
bb:e1:7e:55:51:49:5b:8e:47:3d:06:ab:df:3e:80:26:ab:3c:
9c:ad:8a:17:b0:62:bb:50:a4:67:e4:72:53:f1:98:d5:0c:77:
3f:b0:ea:28:56:70:87:9f:2a:a9:47:89:ca:7e:a9:e6:39:3b:
76:96:27:4d:6e:f1:85:51:78:7c:1c:b8:ae:6e:f9:69:f0:67:
fa:10:76:d3:3c:e5:7f:b1:db:ef:a1:92:c1:df:1e:c2:b6:15:
ad:84:cc:e4:f2:18:1d:22:37:e0:ab:f6:57:8e:f1:32:1d:1f:
8b:3c:7d:d4:3e:c2:bd:57:fb:fe:c9:f3:aa:94:c8:8d:7e:81:
4d:eb:88:a8:7e:a7:3d:45:0d:1d:99:b1:a4:67:c5:e3:36:cb:
0c:d1:f5:29:2b:b8:cc:46:58:53:92:d8:bf:61:a9:76:b0:16:
6b:0d:20:fd:95:6b:94:32:a5:19:7d:a3:65:33:8f:58:1d:83:
c9:69:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:29 2025 by rpki-client