Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: Xd12kP2HNsUsTCMJKX8Wa+3o9s6UMFfGQq5JV2e6Alw=
Subject key identifier: 28:C5:08:DE:B5:A2:82:3B:D7:12:4F:45:CF:25:5D:41:05:0A:C3:B6
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 0194BD4E9643DD3709CBAF3FC17A405D5F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 0E49
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: 9b4HpEU6272U9dgCE6zKCPpPxYnqaOT2QaSf55YlYPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:96:43:dd:37:09:cb:af:3f:c1:7a:40:5d:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=28c508deb5a2823bd7124f45cf255d41050ac3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:fa:4f:ea:96:92:f5:86:b8:bf:ec:97:64:
9c:65:a8:51:95:03:85:64:ce:fa:c2:69:28:a0:48:
e0:28:4e:b1:30:e0:10:d4:9d:d7:bc:14:b3:9f:78:
1b:f2:6d:b4:38:5b:df:b3:45:dc:ce:66:1f:73:bc:
27:f7:60:23:12:7e:31:13:39:f7:1c:e4:64:e3:69:
aa:44:6e:a6:3e:be:a6:82:89:13:74:c1:23:25:a7:
97:16:ca:5a:23:71:ad:a0:36:ab:63:b2:25:1e:63:
ac:b1:4f:0b:be:eb:dc:99:1b:72:a2:73:49:7e:1e:
c3:62:d7:dc:20:af:d5:38:61:ea:b8:89:cc:3d:d8:
85:cf:1a:e7:d9:c1:f6:10:01:94:ad:2d:fc:33:17:
05:59:d4:a1:17:d5:1c:ce:73:97:fe:92:13:21:84:
32:41:3d:46:8b:69:0c:21:89:a3:55:9a:3e:83:c5:
6e:42:b8:2a:ca:58:81:46:4f:11:34:36:64:e0:fc:
49:6a:ef:43:30:27:cc:1a:f6:1f:23:98:44:6c:aa:
97:81:a7:dc:18:c2:a9:4a:83:30:34:ab:97:43:54:
14:15:be:42:81:41:d8:9e:0e:68:40:67:82:31:dd:
83:5c:72:9e:4a:11:e5:dc:5a:92:82:fa:be:60:0f:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:08:DE:B5:A2:82:3B:D7:12:4F:45:CF:25:5D:41:05:0A:C3:B6
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e5:f1:7b:5b:b0:49:d4:f1:52:77:19:f5:29:1d:ef:f3:49:
5a:21:e9:ac:dc:b4:68:8b:54:6d:0d:cd:ba:0b:08:1d:e3:50:
0c:ba:4f:ec:31:64:7f:51:10:b6:4a:4d:9b:81:64:0e:d4:4c:
9c:84:16:e7:35:c0:30:7a:cb:02:bc:2e:78:bb:f4:b0:ce:e4:
01:8e:1c:e0:ab:80:16:e3:2a:a1:85:2f:cd:9f:bc:31:01:33:
0e:52:20:b1:d3:fe:83:25:e7:cc:90:2a:6c:39:53:84:58:2f:
df:ef:f2:bd:8b:e8:e5:ca:8b:2e:99:69:ee:28:0c:f1:fd:7a:
2d:6e:34:46:99:18:91:8f:f5:81:0b:b0:80:8c:84:2f:fc:31:
71:48:c9:a9:f8:7b:46:be:74:55:4e:48:3c:eb:b5:9f:c9:3d:
44:f6:b8:be:7c:24:16:c4:d5:e1:96:b3:fa:76:a2:62:36:9b:
bb:34:15:d8:fe:f3:8b:bf:40:4c:56:cd:0b:fd:4e:a9:c6:f9:
b8:b5:cd:26:1d:8a:a7:24:a7:9a:b3:32:73:e8:17:0e:f4:d0:
8d:e3:7a:a4:fb:92:f2:48:2f:e5:e9:15:07:3c:89:2d:8e:2d:
6a:f7:27:7a:21:ef:31:4c:93:7c:45:78:25:20:5f:20:55:06:
42:96:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:15 2025 by rpki-client