Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: jLGUREl4Jp36SSNDkYrTmHJ7mQSKlZGxcgb1CVj4ZoQ=
Subject key identifier: 34:49:45:E1:88:9F:9B:27:03:16:0C:9F:90:8D:2D:B6:89:08:8E:C6
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 0194BC3BE72B903C165A5FB5158C7686AA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0B4B
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: tSdZ18A1mK21II6rLJFVazc/rNg8HhvXAhIQjJZBhmU=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e7:2b:90:3c:16:5a:5f:b5:15:8c:76:86:aa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=344945e1889f9b2703160c9f908d2db689088ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:2d:5c:a8:26:52:62:f1:08:18:bf:52:c8:
cd:ec:77:dd:26:28:8f:e0:ab:47:c1:0f:37:f8:c5:
77:92:d0:20:d1:03:63:2f:5b:49:f3:62:7e:05:0b:
34:ab:13:a9:b6:87:fa:57:4b:24:c4:60:e9:9e:e9:
29:be:9d:2a:59:64:13:1f:fa:72:64:c3:66:be:48:
37:d1:b3:ee:15:89:46:ca:57:cc:99:fc:98:2c:61:
d1:33:f9:38:0f:20:41:75:ef:33:a1:8e:e9:3e:e3:
fb:a1:67:85:ab:40:8e:43:ce:f9:e6:35:22:2e:e5:
e8:c7:46:b2:cb:8e:9b:c5:9e:c2:78:a8:c5:d5:55:
b5:ee:b9:f0:0f:d9:b2:2b:47:8d:db:a0:b6:a8:67:
0c:a4:c8:e9:c3:b8:c9:8b:12:9a:8b:de:73:c4:55:
f0:1a:65:45:b2:b0:5a:dc:b3:46:0c:16:3f:5c:e3:
7f:34:62:72:5d:d8:43:0a:9c:8e:22:b7:42:98:5f:
8d:8b:81:75:86:67:79:7c:78:5a:8e:69:28:de:e6:
95:86:84:1a:cc:26:ed:3a:7e:03:a9:73:e2:38:77:
c6:a7:2d:52:2d:eb:fd:a4:06:b6:1a:2d:ac:0c:9e:
a6:f0:ce:2d:5b:3f:ff:75:fe:b2:c5:d4:20:07:f9:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:45:E1:88:9F:9B:27:03:16:0C:9F:90:8D:2D:B6:89:08:8E:C6
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7b:c8:cf:83:fe:40:58:3d:13:c8:fb:45:c7:e2:b2:b3:42:
33:ef:ab:ed:44:de:36:3b:10:0f:a0:ea:2b:57:a4:3d:e1:73:
77:b3:e5:ee:53:72:6b:e8:9c:ee:8a:ad:11:40:ea:80:fb:66:
c9:27:b8:26:2e:ee:b3:82:10:5e:c6:5b:4c:7f:68:ca:81:85:
f0:a0:89:93:16:81:b9:8b:70:f1:bd:26:6c:99:b3:a9:8b:d6:
3a:91:26:c2:d4:16:7f:1d:3c:4f:06:4d:d7:18:45:0a:30:dc:
92:3b:51:4e:27:ec:71:98:9a:d9:83:25:c2:0a:ef:e1:47:78:
a8:8b:30:0e:e8:4a:75:56:49:8b:a8:9a:5f:2b:ff:0e:6f:0e:
22:fc:a3:32:01:36:b5:4b:aa:0a:54:d9:96:e3:bc:c8:dd:5b:
8a:54:38:f4:ec:53:cd:9d:d8:53:da:bb:16:4b:c7:77:69:d8:
b7:af:cd:b5:f6:0f:07:d8:3d:a3:90:55:9d:0a:42:5b:64:c7:
93:8e:96:56:a1:1e:9b:aa:9a:cf:52:3a:0a:a8:d6:f3:3f:49:
83:7b:96:fe:ee:e0:3d:14:4f:6e:e9:18:cf:57:9e:d5:1f:d8:
78:f8:ae:2c:62:08:a9:23:eb:ee:75:01:be:57:74:26:d9:80:
d7:1a:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:37 2025 by rpki-client