Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: sls9A4HSiDY2aQpfVukT9/kDgIFUP1Da1aJT5NmM6eY=
Subject key identifier: 12:97:49:9B:B3:BE:70:48:D0:28:2A:40:12:48:50:B2:A1:63:80:26
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 0194BD8585C4D897359C875952EF5194C8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0932
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: WBoAmr/vBl8RfO0rKchhsxgyOxKf9mZLvLAa05xIMao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:85:c4:d8:97:35:9c:87:59:52:ef:51:94:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=1297499bb3be7048d0282a40124850b2a1638026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:85:ae:10:de:a7:04:60:d7:be:62:3f:1f:
a0:79:fb:41:f3:a1:4a:ea:0e:a4:9d:3f:a5:f2:6a:
6d:d7:38:58:ee:af:d6:86:a5:29:df:77:d9:4b:94:
c8:ad:07:68:e8:7c:85:da:e9:98:5a:d1:3b:33:fe:
5b:bb:35:cd:c8:b1:00:12:91:08:e7:40:2c:30:ca:
0d:ec:42:2b:7b:d2:ff:83:8a:0f:9e:fd:ee:a8:68:
a1:02:8c:a2:f3:c7:d4:a5:36:7e:67:77:c1:fb:76:
e8:cb:ae:a7:73:37:d2:d2:f1:16:57:76:2f:02:ef:
ae:16:29:bb:78:d4:05:04:39:24:0b:01:41:ce:17:
9a:1a:fa:6f:e4:2d:62:27:2c:b3:6e:cd:1b:99:7e:
f8:e1:8d:db:9b:f0:d9:dc:74:f5:48:a3:f9:92:23:
63:3a:49:a1:6c:b6:bf:af:c7:0d:73:24:f8:a4:f9:
d7:0e:4c:0d:af:7a:b3:1c:6f:51:48:81:b4:2e:64:
b4:b0:68:c0:7e:08:66:ad:7f:e4:fc:70:85:85:b8:
27:27:86:b9:af:5e:8b:df:38:57:84:97:05:66:7b:
bc:67:69:5d:a4:9d:8f:1f:e5:42:88:b2:46:dc:1a:
62:d2:2a:b5:c2:97:0f:2b:64:d0:87:99:61:74:a9:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:97:49:9B:B3:BE:70:48:D0:28:2A:40:12:48:50:B2:A1:63:80:26
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ed:8f:ef:6c:65:94:51:7a:77:0e:13:ba:cd:1c:00:d9:b8:
b3:ab:2b:96:01:74:9e:ca:4a:49:f6:9f:10:47:f7:80:0a:0d:
90:e6:b2:f2:64:d1:71:53:37:c5:f1:c8:b1:d8:2d:5c:3c:0e:
0b:6b:66:ee:23:47:36:be:d6:ca:00:e1:a1:2c:f1:94:fd:b5:
c2:2c:01:36:e0:4d:8a:50:05:16:83:88:8b:52:97:fc:66:07:
a3:ce:13:a8:99:f8:65:bd:c1:09:09:aa:b8:73:98:99:09:87:
70:84:7e:fc:31:72:d4:bc:29:35:b2:95:76:2f:0a:28:0e:47:
26:5a:66:3e:13:8a:82:ca:0d:c4:fd:08:71:b8:d3:51:d7:3a:
f5:65:25:97:ca:62:8d:fd:8b:e9:3e:62:cb:da:88:1c:2e:96:
44:c9:3e:42:14:31:88:a5:5d:97:39:25:eb:12:19:a6:84:1f:
75:d3:4f:91:ea:3a:02:51:6d:b1:aa:c5:6b:a8:99:b2:76:82:
02:96:39:d6:d8:40:47:db:95:e5:a1:c0:28:53:db:7b:dc:fa:
50:44:eb:41:6d:e9:84:54:f1:49:cb:ad:64:a1:f2:4a:4f:ec:
7e:e1:73:44:12:e5:5d:48:b3:59:51:b6:6c:8f:29:3f:a3:5c:
a9:41:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:24 2025 by rpki-client