Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: DvfQ6RB6vjlljpibqGTdDD3uTjwsNQAAXOljRd+lDHA=
Subject key identifier: B2:FA:DB:D5:F5:ED:11:78:37:2A:6F:70:A4:A9:C2:B0:7A:52:C3:E2
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 0194BC3C310A3801F2866032EBF8086584EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: a8ZfzxCQuKqs60WYI+9wVCvo+MyLI7Y82rISvYcQgD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:0a:38:01:f2:86:60:32:eb:f8:08:65:84:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=b2fadbd5f5ed1178372a6f70a4a9c2b07a52c3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:14:60:0d:7b:28:64:27:71:2f:6f:fc:36:
65:b6:10:93:81:59:c6:a5:05:96:fe:a0:24:56:99:
b4:46:28:7e:11:2e:21:68:af:d3:79:61:1b:1e:67:
5a:64:b7:ff:a0:5a:4b:9f:c5:b8:4d:3c:96:80:f0:
c7:d2:33:89:75:87:e4:4a:e1:87:9b:09:4a:85:98:
af:59:cb:51:89:88:0c:b3:5c:45:69:42:3b:c4:7c:
90:d0:e4:f1:43:13:63:2c:9f:ea:a6:ac:c9:94:a0:
16:af:75:39:a3:fa:a1:b6:34:76:bf:71:3b:27:d2:
25:e1:06:af:87:dd:fc:e1:e0:cb:06:b8:c7:c9:28:
b1:48:40:6a:ab:49:63:5a:d3:73:1f:2f:b2:73:15:
32:3f:ce:e4:17:44:f0:60:09:6b:1e:31:c3:f7:56:
90:30:0d:88:ff:24:0f:c5:17:c5:c1:93:3d:e5:93:
e5:7c:1f:93:79:ba:03:18:4b:06:bc:2a:7a:e7:c8:
2c:be:4f:b4:35:fd:ef:3b:0e:57:28:df:55:33:8c:
12:9f:78:53:39:bf:2f:f3:14:cc:72:e4:0e:f1:4e:
d5:fe:26:29:c7:7b:31:6a:12:e2:ce:49:69:32:a2:
5c:40:68:52:a0:6b:56:0f:b6:f9:1b:4f:e0:cb:04:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FA:DB:D5:F5:ED:11:78:37:2A:6F:70:A4:A9:C2:B0:7A:52:C3:E2
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:c5:02:ac:f5:53:aa:46:77:a9:dd:8a:1d:f9:6a:45:da:
da:b6:f2:c4:65:0c:27:a5:7e:f0:01:e8:0a:6a:a5:ab:ee:bc:
99:da:7b:bb:66:ee:15:51:65:ca:6b:14:23:e4:28:11:16:a9:
ed:b0:b8:e3:9d:b5:3b:4e:e5:a5:2b:3b:6d:1c:6a:b7:91:4d:
4e:69:1b:ae:4b:4c:28:d9:5c:38:86:2c:9e:c2:a4:43:ba:42:
46:4f:3a:5b:8f:4b:21:c8:c3:7e:20:56:c0:1d:0a:66:8c:aa:
3e:c5:bd:51:c9:36:60:ca:6e:25:7e:aa:7f:a7:a3:9f:d5:4d:
4f:b9:d9:ca:3c:cc:67:4f:c5:71:c6:02:ed:ff:a8:11:1c:dc:
84:23:d9:fe:43:e0:a4:a4:ea:ce:db:89:96:04:50:76:37:39:
45:fc:7d:79:1b:bb:42:48:1f:57:05:32:a0:e2:de:97:c0:d8:
59:82:ab:11:95:b6:64:b7:b8:26:bc:8b:ea:26:c5:95:99:7d:
31:a2:28:b7:37:28:10:72:02:0d:98:44:4b:c0:2d:e3:f2:ff:
79:77:95:30:9a:6f:39:0f:6c:1c:b8:60:86:84:35:dc:07:23:
b4:22:7f:c3:1f:d6:3f:6d:64:1f:d8:4a:bb:f6:1e:48:39:66:
a2:4e:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:09 2025 by rpki-client