Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: vuHrBF/X+MBxXabo2d6udBLJ4Iv7P4K2+Dl0hpxMI9o=
Subject key identifier: 0E:45:76:0A:6C:16:F0:84:54:91:82:05:31:70:E6:A4:F6:3A:6B:D2
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 0194BD4E7AEFADD7F815B191B96BD027B0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 143E
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: vTS7zlUZaAeg1K8ERsC6uqqGKEjw3RJfX+ozE9LIVjs=)
2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7a:ef:ad:d7:f8:15:b1:91:b9:6b:d0:27:b0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=0e45760a6c16f084549182053170e6a4f63a6bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:a4:1f:5d:8d:80:40:dc:b9:43:3a:d8:75:
75:35:fb:1d:64:ab:7a:11:46:11:30:9a:c1:d7:ca:
d9:d3:c3:e4:7d:65:ae:f1:dd:88:78:3f:35:d9:e4:
6c:91:74:be:10:a8:e8:08:b4:8b:2b:25:e3:37:ef:
78:23:31:c5:cb:b1:14:f8:08:26:9a:0f:04:7a:4a:
fe:64:83:ef:b4:e1:cc:cc:40:36:55:0b:97:c5:80:
b1:85:7c:07:ee:9c:59:d3:f1:2d:74:6d:7f:99:0f:
fa:79:14:e5:00:48:6e:fa:14:65:1e:77:70:fe:0a:
61:48:04:35:8e:51:98:4a:1b:59:f5:07:bf:89:c7:
9c:b5:a4:5b:41:68:eb:af:a0:c0:c4:8c:65:98:66:
67:6c:dd:3d:25:74:b3:c1:4f:d1:b7:e2:91:a9:d1:
95:d1:58:a1:f7:00:ca:3b:60:59:8e:0a:a8:13:7c:
7e:5f:f9:a3:39:ce:6c:25:38:2d:df:d1:e5:4f:a3:
c0:d4:bc:a1:43:0e:8d:87:4c:6c:64:a1:b6:a2:ac:
88:20:2b:94:e4:62:56:73:01:49:5c:f1:00:8c:df:
af:73:89:ab:c0:07:47:5a:6d:8d:20:1b:32:81:5d:
47:50:a6:38:f2:8c:47:9b:bf:5c:5e:e9:98:80:66:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:76:0A:6C:16:F0:84:54:91:82:05:31:70:E6:A4:F6:3A:6B:D2
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b2:4b:47:ee:e1:79:0b:94:7e:4f:14:3d:ed:45:fa:21:43:
e2:0a:ab:33:2d:3e:36:94:54:c5:f2:05:ca:dd:11:94:42:0e:
6e:f6:fd:ff:a8:53:34:5d:ea:b6:3e:22:2a:15:5c:9a:22:5b:
86:8d:3f:19:8a:f3:c7:bb:71:60:ea:2d:12:82:0c:2d:ba:3c:
6d:49:68:0a:0e:ca:5c:58:78:bc:1b:9a:f5:44:9c:6b:cc:3f:
4d:5e:5c:63:cf:35:a7:97:44:71:b5:9a:4e:17:d1:6c:eb:d5:
58:db:a7:86:a1:17:05:28:3c:92:2c:b5:3c:04:e7:1c:d5:4c:
8a:7d:f0:9e:fb:19:94:9d:04:f9:c6:9f:45:44:7a:e2:c9:4b:
84:40:f7:7b:34:4e:57:49:9a:cc:4c:b7:b9:9a:a7:8c:a2:d0:
be:99:6b:62:0f:a2:52:85:b6:b9:88:66:d8:52:b4:18:0c:48:
3f:e4:2f:3f:98:37:c7:b9:61:4a:0b:05:69:f1:47:2e:41:01:
f9:d3:a3:f9:05:7d:58:d3:58:1a:fa:93:3e:ea:87:81:ba:fb:
10:26:f5:b9:38:9d:ea:b8:f8:16:5e:07:50:e0:85:c9:8b:cc:
0d:b4:f3:05:89:e1:42:12:ae:08:8d:bb:6e:e5:5d:c0:ad:ae:
5c:ca:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:37 2025 by rpki-client