Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: IoiTRe6V/2tYgxfm/pJmr4BNGHNxM3X6p72nC0Vrmcs=
Subject key identifier: 7C:2E:4C:91:E3:66:36:DC:54:EE:75:07:24:7D:36:C3:2F:60:06:61
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 0194BC72FF1C23BEFECF73ADC682C3E633D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 0180
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
2: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
3: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: CJs/sAIalGvtsaMsoagkeMRt2jlr4qvMTo6H1Y6UCqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ff:1c:23:be:fe:cf:73:ad:c6:82:c3:e6:33:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=7c2e4c91e36636dc54ee7507247d36c32f600661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:4a:67:27:50:01:2f:51:fc:a8:e4:e7:d6:
e7:56:c9:d7:6b:c9:53:77:ff:45:e5:78:b4:e7:36:
9f:c5:78:ba:6f:00:68:9f:cd:37:f4:e2:23:25:31:
61:3f:ff:ba:b0:50:81:75:fc:84:69:05:73:2d:30:
45:a4:cd:17:83:e4:7c:df:4a:ab:d2:b1:3a:a5:be:
15:04:28:18:35:ef:2b:c4:d2:5f:0c:0b:65:dc:b8:
9c:9b:f6:8f:a1:cf:15:3c:e9:97:d4:66:53:11:e4:
7e:38:a8:3c:f8:e4:b3:5c:37:67:fd:96:0b:95:50:
16:8e:ec:56:cb:0d:1d:94:23:47:8f:9e:d8:eb:57:
5c:88:82:52:df:9b:9f:d6:7a:53:64:27:79:b4:9b:
34:b7:96:2d:80:6e:6d:24:16:ca:30:11:c8:c9:35:
95:45:c6:af:8a:ca:01:b5:72:a1:0a:46:9e:33:e9:
37:55:c3:ee:a1:c2:32:dd:d4:a0:65:b3:bf:89:1f:
39:2f:4f:10:37:cc:0f:46:5f:70:a3:e0:9c:0a:0b:
49:e6:78:0e:a6:e7:28:b3:66:4f:7d:12:9a:bb:f5:
99:ae:e7:f1:90:32:5c:75:57:6c:2d:d6:d6:01:67:
79:d3:dc:6f:ca:b2:1b:11:1c:50:7d:ee:15:4a:05:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2E:4C:91:E3:66:36:DC:54:EE:75:07:24:7D:36:C3:2F:60:06:61
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3e:67:e5:6c:82:b4:5d:33:05:a2:0b:e6:7c:7b:ed:d9:3a:
49:fd:4c:8b:2d:a8:28:3d:aa:07:72:ca:72:bd:29:72:cb:6a:
0d:45:97:10:58:69:87:83:db:ed:c5:83:fd:46:55:18:19:8b:
4f:17:70:c5:90:00:46:4b:2a:07:12:8d:02:a4:13:c5:44:0c:
2f:c9:a3:1a:e9:1a:4d:b3:c9:2a:7a:3d:9f:0a:34:b1:01:08:
c0:d3:f0:7c:25:58:cd:a1:56:3f:fe:88:5e:47:e7:d9:b5:bf:
aa:a4:82:f6:47:6c:d6:3e:22:b1:f8:01:2a:62:80:39:24:5a:
6b:ca:4d:c8:ba:f7:ca:fa:14:a8:67:87:c8:58:7e:38:10:03:
8c:74:a3:84:0f:da:31:af:c2:c0:a1:90:08:bb:ca:e7:9d:77:
1f:19:9c:7b:9a:51:eb:8b:6d:b0:5d:a9:c7:de:74:62:5b:42:
ac:65:81:81:40:d2:d6:59:9b:35:d8:f9:92:7e:7d:18:94:7b:
f3:fa:fd:79:ae:02:c2:e2:ff:30:e9:c7:1d:25:93:90:85:44:
54:3a:be:da:eb:32:61:08:bb:90:99:6f:2b:14:0e:9f:36:ca:
b7:38:c3:39:6c:07:af:88:39:6c:c9:c7:65:b4:95:b2:83:e4:
7e:b0:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:49 2025 by rpki-client