Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: 2ymhTaxqLw3zvql31eHbdEHuepiKgp3hYE6p6iTjt4I=
Subject key identifier: 93:03:8A:11:D3:82:C3:DE:26:A7:95:6E:AD:3A:2A:C8:F5:8D:06:0C
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 0194BC04FC82CA7443331A59E88125F512CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 0573
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: 0v4Q3A_w9M1p1YcV4-7Pe389fdU.roa (hash: WhKTFW0tZdeh1NFz5izqlimm3sG/vP+EpF9M2Z10RmY=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: +Wme9rlmJ7GqirJDdPIeLtaxuGlchy74og8h2vfvyw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:82:ca:74:43:33:1a:59:e8:81:25:f5:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=93038a11d382c3de26a7956ead3a2ac8f58d060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:c1:53:03:6c:62:dd:81:d5:32:90:e9:f3:
94:f0:a2:73:fa:cb:5c:0f:ea:60:e1:30:c6:7c:c5:
a1:7e:26:71:60:0d:ad:4a:58:cf:34:10:97:52:71:
12:f1:94:92:1b:d7:12:62:f1:8d:b0:68:3c:1c:57:
ee:82:8a:90:50:d9:f5:cc:6d:a2:22:64:7b:88:a5:
cc:eb:07:8c:e5:4c:45:de:4c:2b:d0:bf:e8:ed:76:
37:f6:ec:2b:d7:8b:d4:6e:1c:c3:59:f1:9a:99:b9:
e8:61:16:5b:53:a9:70:2f:90:32:c5:48:5c:af:33:
72:5f:02:2a:36:cf:ff:c2:82:66:ac:41:c2:74:f7:
e4:6f:70:2c:2a:4c:42:63:7d:e0:b0:c1:20:dc:a9:
be:d8:44:9d:0c:55:72:44:d4:79:40:5c:f7:82:b4:
ce:e7:ed:1d:30:80:3b:2a:6f:5c:bd:54:8d:19:a8:
b9:38:3c:39:a9:24:2c:18:20:97:f2:a4:c7:71:59:
80:a1:07:4d:50:51:1b:8c:41:8a:41:b9:00:66:84:
43:a5:8f:5a:1d:24:db:71:6e:e6:ac:57:16:6d:e2:
65:de:7b:ac:7a:2f:34:cc:28:34:5b:20:c3:68:47:
5d:00:96:20:98:26:e0:fc:d0:e0:33:0b:43:27:b1:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:8A:11:D3:82:C3:DE:26:A7:95:6E:AD:3A:2A:C8:F5:8D:06:0C
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6c:15:56:c1:a3:e7:1a:ce:77:03:fe:c7:8f:ee:4f:37:ab:
54:46:76:39:16:44:84:6e:0a:28:9f:00:25:c2:a2:06:ad:59:
88:24:33:21:d4:21:29:22:b4:03:b1:de:da:e7:cb:d9:98:65:
8e:b1:b8:16:a9:40:b0:7d:0f:f7:00:f7:14:69:49:1e:5a:69:
4a:50:12:77:c1:c5:44:3f:a4:1c:ae:ff:41:33:c1:2f:d9:30:
8b:00:f7:69:15:b9:32:88:48:51:55:58:9f:ef:d1:fa:5d:b9:
7b:37:8c:0a:60:27:f3:39:10:43:cf:9b:5d:d6:75:11:66:b5:
30:82:a6:1b:51:29:dc:52:da:18:78:ad:53:48:40:c1:d2:09:
d6:e6:98:d5:dd:da:5b:8c:6a:a0:26:34:0a:a9:17:4c:63:1c:
46:0c:fb:29:71:49:20:f7:c8:e5:32:c6:7f:92:e6:c2:e0:4f:
0f:f5:54:6a:00:16:e6:f8:be:53:6e:e1:87:4e:07:bf:26:ac:
3f:db:37:13:39:1d:b0:53:67:b5:4f:d9:0d:db:0d:bb:c5:2f:
6c:ba:d5:1f:aa:01:c6:90:d9:1b:e9:2d:96:27:45:02:dc:bd:
51:c3:4f:e5:7a:33:00:02:dc:04:b3:53:ab:00:a8:ff:26:c1:
96:c3:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:20 2025 by rpki-client