Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: 3xI6Zylxz4dDlHcMWlz2IKCAtwuX/ZtybiJct8Xv41o=
Subject key identifier: DF:92:DB:92:0B:56:13:35:28:0C:6D:50:13:F7:29:6E:FB:A9:B8:D0
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 0194BD85253ABC128D43D9F2D1385380934D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: +l8j5vIRhsRdSOVz0DtLe4D/4BV/l70AfcXMBLhu5Kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:25:3a:bc:12:8d:43:d9:f2:d1:38:53:80:93:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=df92db920b561335280c6d5013f7296efba9b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:ef:1b:e9:2d:65:88:f6:2d:7e:69:c8:41:
31:9b:f3:6c:e2:c9:65:e7:df:db:46:3d:ea:7f:22:
c5:99:cc:5d:14:f4:fc:3a:6c:0d:77:68:a7:34:49:
d9:05:dc:89:fe:7d:f9:f8:32:5d:13:7c:99:ab:b3:
f0:69:4d:6a:3e:41:88:41:72:49:ad:9e:9d:f5:4b:
e7:82:4a:c9:3f:dd:8e:42:ec:f1:a3:99:03:aa:16:
9e:b2:fc:db:09:c8:ca:fb:ca:2b:b1:b3:fd:d1:ef:
1f:1e:40:6d:25:03:9e:9c:69:5e:15:32:cd:aa:23:
24:09:4e:0d:81:94:ed:4c:95:87:af:8b:9e:9c:cb:
46:b1:e9:df:76:1c:9a:70:40:7e:b4:25:e2:d1:ff:
f1:64:38:52:0c:45:28:eb:26:cd:f0:34:e3:33:33:
70:8b:3a:fa:31:ee:30:a8:a8:98:87:e4:5b:63:59:
dd:07:97:1d:42:70:d2:28:2b:a6:c0:fe:8a:3a:f6:
c0:af:f4:25:1d:c9:dc:88:e4:26:4e:fa:e3:fc:f0:
2d:07:ec:b1:54:e6:4b:e2:e0:c9:9a:7d:ae:a9:c4:
76:30:26:3c:63:af:99:99:11:5d:6b:d9:90:ee:be:
56:d5:0a:d0:cd:7c:ac:93:b7:b8:1a:0b:7b:96:40:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:DB:92:0B:56:13:35:28:0C:6D:50:13:F7:29:6E:FB:A9:B8:D0
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3e:58:69:c8:f9:34:ac:4b:38:2c:80:74:76:b2:3e:5c:d7:
36:4e:bd:92:88:d8:33:2c:82:2d:d0:5d:48:3e:00:81:6d:5e:
99:d8:0e:39:73:ed:d0:66:af:5c:23:94:50:f8:51:71:a8:e9:
63:93:dd:f7:20:28:f1:05:96:34:00:c8:db:1d:71:6e:d6:95:
9e:00:a9:80:70:83:aa:c2:60:f7:47:60:30:5c:81:ae:c4:a6:
ae:c2:95:c9:c7:9e:ab:d1:4a:8f:82:68:3d:16:e0:69:a0:c3:
e3:cc:26:3b:64:05:bc:76:7c:85:ae:d2:a7:52:31:30:30:fa:
4e:39:21:b3:78:45:f6:e2:57:ad:95:c4:90:e2:0d:ff:6b:4f:
c0:58:39:89:51:97:4b:07:91:e3:88:63:14:29:20:08:25:be:
e8:a0:dd:7d:0e:6c:ad:76:f4:ad:e9:98:8e:55:f5:a3:e6:8a:
31:ae:07:66:b1:8d:be:8c:1e:ef:30:af:d3:ff:4f:f7:77:5c:
a8:3a:b5:57:aa:b1:e3:fe:7e:0a:ba:3f:74:9c:ad:b9:81:ee:
8b:6b:f7:00:32:1f:67:31:c2:54:cd:64:27:23:c8:3d:b6:2d:
32:b1:b2:70:92:dd:37:26:16:4f:aa:c1:51:1f:e5:ae:51:ab:
c4:04:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:34 2025 by rpki-client