Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File: zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier: StkJSlG3iDFzEZEZ7cqexMPEBHcR/Z1VeNnbEc/3Vrc=
Subject key identifier: 27:2D:A9:EE:C6:21:E8:A2:20:A7:37:E5:F2:1D:D0:84:15:48:26:56
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer: /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial: 0194BC72AFE49A6F507FCDC7A54EF419BE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number: 07C3
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: CXaycMVQIz4mD7AGkHky2lc1t_E.roa (hash: XQ8QKr5tV5GANcYht5PHTQQD2/hz4d9yrWShPJMOBBM=)
2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: wAZboPq/1/oKLbBzuAlwfdNWcI55WpqzZ73biUVBWmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:af:e4:9a:6f:50:7f:cd:c7:a5:4e:f4:19:be:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=272da9eec621e8a220a737e5f21dd08415482656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:b2:f8:95:52:49:f6:2b:62:85:1f:14:83:
3a:f5:10:42:54:8a:27:29:f4:f8:f6:12:1f:0c:35:
22:d2:af:c1:1d:ad:32:5a:6e:f8:21:60:8d:89:8a:
09:fc:82:88:b0:2b:4c:03:39:a4:3c:2f:c9:39:1a:
4d:4e:5e:12:4d:68:fc:63:2c:a6:24:7c:df:7e:55:
71:7f:7f:ed:f2:19:2c:21:8d:8a:9c:08:93:26:b6:
0e:c4:1d:04:bf:1e:7c:e3:03:49:59:0f:d1:df:0f:
76:9d:82:60:c8:51:42:dc:20:60:78:22:18:ef:98:
cc:33:57:77:7d:c5:ee:b4:50:29:49:96:da:cf:59:
1b:31:98:1e:24:46:7e:7b:2d:fa:1f:3f:48:8f:9c:
83:74:58:4b:cf:71:3b:f8:54:ec:e8:1c:e6:70:7c:
e9:a1:64:a2:1c:3e:3c:69:49:d8:ac:20:a0:16:e9:
59:82:f6:c1:cf:44:5d:49:2f:b1:f7:43:ee:e0:47:
52:9a:f1:94:21:31:7f:5b:cc:4f:f5:ee:88:47:16:
c5:eb:7a:b0:8b:1f:74:70:9a:c9:70:85:69:ea:db:
94:51:5d:9d:a3:36:03:e7:a5:d5:f6:34:1d:69:e3:
2b:b8:f4:82:3b:ce:27:7e:b1:3c:6f:7e:00:78:71:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2D:A9:EE:C6:21:E8:A2:20:A7:37:E5:F2:1D:D0:84:15:48:26:56
X509v3 Authority Key Identifier:
keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c5:8b:78:13:63:90:4c:b9:24:d4:fb:70:d2:79:bd:38:2d:
f7:a4:4a:76:d7:42:7a:41:92:83:57:cf:ac:15:66:8e:e7:9f:
70:62:8b:0a:34:00:dd:be:ff:23:f6:d2:e2:0a:55:57:8a:8d:
79:3d:4b:98:29:a9:99:bf:a3:06:d1:bf:fc:5c:97:2f:c9:51:
af:40:da:21:b7:da:4c:c9:5d:d1:b5:5c:a4:7f:30:82:dc:45:
2a:bc:32:9d:46:7b:bb:dc:34:ed:c3:65:58:b1:5b:47:cd:39:
0f:27:5b:86:3f:1e:31:fe:12:ac:00:f4:04:14:e2:ca:f7:26:
87:11:5c:9e:4d:56:f0:2f:f7:5f:e1:ae:83:cc:b6:1b:24:53:
01:96:51:b1:62:54:c5:45:95:c5:6f:9c:25:a8:64:e4:a8:7a:
9d:df:f7:fa:e0:0e:94:3e:b9:3e:88:8a:28:e6:71:f0:bd:e5:
79:72:61:6c:14:db:66:16:ff:55:69:04:b1:0c:aa:7c:bc:e1:
1f:7a:88:91:62:36:d3:3c:2f:13:b4:a3:61:e4:41:73:85:8f:
95:02:4a:fe:5e:20:6f:db:f0:5f:47:bb:d6:d1:99:0a:42:23:
d2:25:45:63:a1:6f:3a:81:62:f9:7d:d2:2f:b7:ad:87:7b:cb:
d0:7d:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:50 2025 by rpki-client