Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier: oyNHZY3STpsdxjPG2sl8YpAzT+3vtDyzQdpzdJRPfAU=
Subject key identifier: 27:31:B6:2C:CC:FE:C5:EF:93:0A:37:D5:72:E1:9C:96:A3:68:DC:CB
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 0194BCE091B3FCCB941C98D6657A873979AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number: 116D
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: C_tBNxeBdMQFQvAqAIQOAGk3NV0.roa (hash: ytHvNr9cmIrq9gpmtc0zxz6E+7ODTCXhvZEm/AZ4ML0=)
2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: rREnADFpe4129yjBX88abutJNgTIDeE2TInWzmbxpP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:91:b3:fc:cb:94:1c:98:d6:65:7a:87:39:79:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=2731b62cccfec5ef930a37d572e19c96a368dccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:86:74:a8:75:4c:8a:b1:c8:55:f1:b5:f9:
ff:e7:81:9a:3c:45:fa:39:b4:e9:c7:fd:8d:00:b7:
8a:e2:22:d5:9d:25:aa:3e:4b:70:e7:ca:a8:6f:2c:
a2:c9:db:4e:ee:a3:40:0d:f5:9b:c7:1b:30:2d:d1:
d6:4a:5b:03:f9:8e:37:09:30:aa:51:cc:0b:c0:fb:
a6:2e:45:f6:e6:66:0d:d2:57:13:59:eb:b2:11:37:
a4:eb:eb:79:c7:bc:76:34:93:1e:3a:00:b8:27:47:
e8:ef:77:13:c2:ae:04:24:22:12:7a:5a:9f:4e:04:
1f:ca:f0:93:fc:d3:a9:22:1e:4a:a0:25:23:ae:8b:
dc:d5:8b:09:84:47:7e:d9:33:96:f4:fb:4e:70:d1:
1c:d5:f6:48:00:07:a5:1e:43:89:eb:af:c9:a9:b4:
2e:a9:bc:8c:e5:0b:58:fc:98:f5:60:b6:68:9c:cb:
3d:6d:9e:87:a0:2a:a0:e8:59:1e:a6:f2:ec:36:62:
4b:87:69:5b:ce:2b:fc:e9:21:05:fa:38:38:2e:3f:
e8:49:de:c8:57:c7:d9:58:10:92:75:bb:18:1d:81:
7b:0c:75:29:37:7b:1a:23:2d:af:7f:97:18:47:8c:
45:c5:85:7d:4a:94:10:fd:83:9b:e0:b4:ed:e9:3d:
1a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:31:B6:2C:CC:FE:C5:EF:93:0A:37:D5:72:E1:9C:96:A3:68:DC:CB
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:f2:2f:bb:cc:5e:37:b5:a9:72:95:93:56:d8:af:c6:6f:
55:a5:c8:c4:52:b0:be:22:21:ee:a4:70:72:91:b0:b7:a9:c8:
ff:ea:c9:da:32:7f:2d:34:75:b0:1a:9b:1a:27:6b:b9:98:15:
41:f7:46:af:b7:c5:83:de:f5:ad:a1:ae:78:8e:5b:ae:a3:0f:
cf:dc:ad:d6:e6:b4:c0:81:1c:1c:63:33:89:99:9b:37:7b:e9:
dd:5a:46:ca:51:91:b5:f0:c0:79:eb:87:81:ea:c7:32:53:d9:
ec:99:9e:73:39:58:52:3c:34:0d:56:86:ea:eb:c6:1d:bb:4f:
1d:d1:00:ab:b9:25:76:09:bb:d0:0a:59:7b:47:7b:4b:06:cb:
02:07:b6:58:95:d0:f4:8b:18:53:da:f2:a1:92:32:c0:4b:74:
fa:9d:5f:57:b1:33:28:c9:1c:31:a8:c2:e1:9d:22:28:99:e9:
60:70:ed:31:03:60:fb:03:bd:c3:42:dc:77:1b:ad:7b:11:69:
1a:bb:af:e9:4e:03:a8:9a:0c:09:f7:29:61:f6:4e:a1:cb:9e:
9a:cc:65:44:5f:dc:a8:f8:28:96:a7:d8:02:ca:05:84:cb:e9:
70:83:b7:2f:c5:77:05:22:86:90:42:58:4a:9b:7e:71:39:b7:
44:9b:8c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:12 2025 by rpki-client