Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: ZXAPlhusD/HSilg2tDayVOuwA+eHQRW4Rqmah4wBMBY=
Subject key identifier: 13:3A:21:E2:F0:D1:AE:BD:BD:18:37:15:C8:CF:F6:8B:26:D3:06:06
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0194BC0522C825BEBE4B78B5CFCB6C35892D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0B12
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: DieqFAYergGx5jkyYCXfuNUwdBih6ZopURg1aGmkFy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:22:c8:25:be:be:4b:78:b5:cf:cb:6c:35:89:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=133a21e2f0d1aebdbd183715c8cff68b26d30606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:3b:2d:a6:72:56:76:58:ba:79:99:bd:fd:
d5:74:bf:bf:a2:3b:0f:cd:6f:6a:a0:c4:59:51:3d:
ad:b1:95:f5:5b:bd:53:e0:1c:5a:6b:cc:88:0b:5d:
48:60:6e:41:72:39:56:d6:8a:97:e1:bf:3b:a7:8b:
2b:17:8c:d7:ed:5e:38:4a:35:ed:83:7b:e9:0d:04:
38:d7:9a:ab:f2:ab:8b:c7:8f:28:50:4f:84:a0:c1:
14:69:5f:a2:e4:34:b7:7a:bd:2b:5e:2f:63:85:47:
20:41:f3:9b:12:9a:51:81:f9:ae:d9:53:5e:bc:8c:
87:a1:42:6c:40:62:3c:ba:65:30:3f:f7:28:32:03:
b2:c4:2f:88:5e:fc:35:9d:3a:db:20:cd:47:8b:f3:
d5:34:3d:d8:98:69:0b:da:7e:7b:bf:e4:5a:64:c7:
c5:73:57:40:51:2b:77:d7:f3:68:ff:68:d3:4b:1b:
5e:f1:ca:3c:01:3b:07:d8:f5:1c:31:03:e4:d4:b8:
c8:eb:54:35:6d:9a:a3:c3:40:3e:65:d7:8a:72:95:
8a:4b:56:8e:5c:07:13:66:6b:d9:4f:0a:47:47:43:
ad:87:20:c8:1c:10:f1:24:70:45:3c:c9:3c:10:71:
a5:9b:a5:a4:c2:8a:af:97:24:13:0e:7d:c1:c1:cf:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:21:E2:F0:D1:AE:BD:BD:18:37:15:C8:CF:F6:8B:26:D3:06:06
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:80:7a:35:8a:c3:b9:56:80:ed:3b:5e:65:26:27:26:a4:69:
d4:bd:fa:8c:a9:64:45:7b:1a:c4:72:a4:88:0d:c7:3b:56:ba:
42:ae:d7:9d:91:2f:cc:41:71:31:4c:d3:c9:f6:92:b1:70:0d:
4a:d5:fe:0a:4a:fc:30:80:46:0f:e2:60:79:2c:96:5c:aa:5c:
ed:e5:8f:18:f1:2d:b6:1f:36:7f:a8:e2:b0:8a:ee:bc:56:e5:
0c:f9:80:ae:37:44:1b:c2:32:65:51:da:4c:6d:4a:c6:a4:5d:
58:b4:16:ed:9f:d1:87:7e:95:b0:af:51:4e:6b:eb:c8:38:50:
93:fc:49:e2:62:73:1d:45:cc:0b:53:23:7b:a2:0e:de:30:6e:
9a:ea:53:9b:64:e6:cb:dd:28:eb:6b:1f:6b:84:df:b6:32:11:
c2:89:99:f2:9f:aa:d5:11:7e:26:20:da:e9:4f:42:a0:e7:d0:
4b:c7:04:24:17:91:e3:35:7c:cd:21:fc:9f:9b:0f:ae:94:fb:
04:28:1f:d2:50:8d:b4:a9:e1:57:f9:7a:1b:9e:fa:d9:0a:c9:
70:03:91:0c:e8:dc:a8:b6:3f:4e:06:b5:32:ef:50:25:b6:df:
e0:75:c0:16:b0:f8:c7:80:c2:be:4e:1b:72:9b:57:c3:20:1b:
06:a7:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:54 2025 by rpki-client