Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json)
Hash identifier: duvZqOBj9JmYTkz62za716tn06RFmzuvE5SRVOwZYJE=
Subject key identifier: 6A:C1:13:69:C2:06:BC:B8:19:B8:14:58:03:27:97:49:42:AE:7C:26
Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Certificate serial: 0194BCAA20139CDEC76FF4D5C96F70F20DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: NJmmW764rdnW_zIUswA3g-8-n2M.roa (hash: uNbv9sZggt1kjUfoR4Ji7KAa4WT9RRySZVjN33ZdWTA=)
2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: NiI5jFumPn65n6/4tk/rcor+fPjjj0TnANAvpI6SWOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:20:13:9c:de:c7:6f:f4:d5:c9:6f:70:f2:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=6ac11369c206bcb819b814580327974942ae7c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:a6:dd:6e:e1:3d:43:63:5f:35:5d:e4:df:
0c:66:b9:e0:ab:05:f7:0d:92:00:63:8b:44:af:c9:
1a:8c:27:37:40:3d:51:62:d3:f7:0a:a0:e4:db:0e:
7b:3d:f0:6f:5b:a0:6b:9a:a8:43:70:a2:a4:37:14:
79:f4:09:69:22:71:2e:8d:bc:8e:92:b2:dd:0e:23:
6c:ea:37:09:e6:02:08:25:18:30:72:36:4e:b3:e2:
c9:8b:0d:56:bc:4f:5c:9c:9f:39:3f:5c:c4:4a:af:
f8:af:4c:1b:fe:a3:93:86:6e:1c:da:f8:ee:2f:bd:
fd:5a:dc:98:48:ca:d3:0c:1c:0d:ec:95:84:66:61:
5a:42:79:0e:80:bf:03:fa:51:42:a4:35:25:22:2a:
03:4b:78:f3:c3:eb:ea:3c:ed:89:b4:8a:62:65:2c:
73:46:82:9f:31:17:b5:66:05:2f:90:b6:d8:f8:2b:
84:8a:01:4e:35:56:12:36:69:22:0d:03:1f:64:67:
62:67:b1:41:a5:18:ce:0e:1d:23:93:be:f6:e4:05:
76:71:64:54:05:d5:90:7c:7c:bc:cf:80:c4:1c:76:
e6:77:70:fa:ed:14:2b:be:e1:86:45:78:04:18:85:
c7:a2:08:ee:4a:63:2f:60:d8:32:ce:f7:20:e4:c3:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:13:69:C2:06:BC:B8:19:B8:14:58:03:27:97:49:42:AE:7C:26
X509v3 Authority Key Identifier:
keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0a:2d:62:51:67:50:7e:54:89:9a:a2:9d:49:a4:72:3a:d5:
26:67:bd:4f:f2:e1:58:78:e4:2a:3c:bc:be:9f:2a:ef:7a:c7:
1e:3e:ee:2b:84:a4:cd:ff:8b:07:7c:12:ef:2a:23:0e:1a:ea:
bd:4b:29:50:6c:5c:7d:26:34:81:50:ae:72:dc:8e:df:5d:13:
cd:e0:ea:dc:a2:81:f4:18:f5:06:3c:ef:15:d1:60:db:d0:53:
02:41:29:f0:04:55:d7:ea:3f:fe:b8:bf:44:a7:2d:cf:07:b4:
f4:bc:0d:c3:74:94:1a:3d:65:4c:28:79:1c:8e:10:6d:ac:48:
28:44:3f:83:10:be:9a:76:a7:1b:8a:90:3c:f5:86:08:86:a5:
08:39:13:8a:6e:86:15:bc:e1:26:66:d1:7e:2c:2b:34:48:f5:
16:5d:1b:2d:43:e0:c0:1a:ea:ff:5e:89:3f:c6:16:8c:62:5f:
2d:71:16:e1:55:76:fc:67:7b:8a:56:03:b5:f3:ec:76:ba:c6:
a7:79:da:c1:c4:d0:a9:87:93:ac:b7:ba:05:b8:2c:ce:5d:b4:
cb:31:1b:4a:38:4f:9f:6f:25:4d:7d:93:64:43:bd:04:39:dc:
34:95:15:6d:9d:48:c0:e5:92:a1:01:e9:65:fd:43:83:c2:84:
8f:01:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:45 2025 by rpki-client