Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: XWdfSnmU1p9jOwiYNccEq7zSpR5nHTx95IXY8AdFChw=
Subject key identifier: 9A:3C:6A:F5:87:BD:04:DD:13:60:1A:C3:EB:04:50:28:74:F8:88:10
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 0194BC04D515BB7F71097CD418638B492837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 04B1
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: B9JQmcCgXHtPKDkdQknZ189D+8YYHdruJT61LrUJaXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d5:15:bb:7f:71:09:7c:d4:18:63:8b:49:28:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=9a3c6af587bd04dd13601ac3eb04502874f88810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:b6:ba:17:f9:4f:35:7a:12:87:16:c1:f9:
60:22:3c:5a:42:53:02:ae:f4:8b:f0:db:ad:8b:5b:
ba:07:9e:84:9e:ac:11:80:58:30:e7:c0:22:df:02:
8d:0e:ee:9a:c5:2b:19:80:cf:b8:b4:a5:0c:93:ce:
6c:d3:13:a8:48:c2:d4:77:bb:c6:19:d0:50:4c:6b:
aa:c7:85:e7:16:3e:ef:94:e7:d7:88:ab:f4:f5:d8:
fe:62:d8:37:a9:87:8e:11:a8:4a:bf:36:9c:ea:3a:
ac:c3:81:45:42:0a:2b:dc:74:30:c0:44:1d:77:8d:
74:a9:b1:76:a7:79:e9:58:7d:33:47:5c:c8:fa:71:
98:58:49:c7:e5:0d:9c:65:a3:94:7d:d7:9f:b3:20:
dc:ed:80:fd:37:9d:f8:5a:47:9e:12:2a:5e:62:af:
8a:ee:4a:dd:b0:46:61:82:45:6d:01:f8:10:2c:5a:
d8:75:03:27:1e:da:1c:d6:75:d4:08:88:5b:4f:9a:
45:5f:4d:75:aa:c7:04:ff:3d:58:cf:bd:db:fc:cc:
e9:0e:95:54:69:15:15:0f:85:c9:e6:2d:92:b6:41:
ab:bb:8a:82:27:fa:cb:a9:f5:c3:65:30:17:16:77:
a7:b5:55:86:5e:fa:0b:50:14:66:f7:fa:5f:fc:c2:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3C:6A:F5:87:BD:04:DD:13:60:1A:C3:EB:04:50:28:74:F8:88:10
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c9:24:7f:f9:ca:2a:94:4e:87:07:6f:f3:3d:4b:e0:ac:b7:
02:2a:48:48:ab:21:cc:cc:c6:33:4d:76:95:a7:ca:bc:11:40:
af:4f:db:12:00:38:6d:d2:a3:dd:17:f8:39:39:48:46:9e:51:
3f:63:45:eb:2b:28:99:d9:35:17:92:d3:82:c8:5f:84:8f:ee:
b3:1b:58:6b:c2:92:9b:61:a6:ff:2d:d2:88:21:9b:86:14:2c:
d4:37:2c:96:14:8c:33:e0:a5:eb:58:ae:a7:fd:13:38:8a:d5:
12:35:d7:76:39:86:3c:e3:6c:70:e0:e9:a9:c4:1c:db:10:eb:
e4:4f:e1:fc:9c:e3:84:aa:ca:7f:f1:8d:b9:a0:85:e1:54:59:
4a:c8:1e:cb:38:c4:64:13:58:eb:56:70:a1:01:22:05:2c:8d:
fc:7d:68:dc:9f:17:1e:dd:1a:fc:96:2b:33:9c:08:e4:88:a0:
c7:87:ba:6d:87:f9:c7:9e:94:da:2d:55:a1:be:a9:39:6b:4a:
16:bf:96:45:6e:e2:e9:53:b9:ab:02:70:26:c6:97:ca:ac:79:
32:04:a2:18:73:74:82:90:4a:16:aa:32:f6:fa:f8:2a:df:89:
86:39:23:0a:01:0e:c1:cd:84:bb:8d:4e:1b:bb:5c:0c:06:35:
eb:35:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:05:29 2025 by rpki-client