Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
File: ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft (raw, json)
Hash identifier: zf1PKYCPMHo5hySvsdOl55ueMI7fCDMhkd0/5tIHFBc=
Subject key identifier: 2E:F6:86:DC:96:14:1E:09:7C:E1:37:AE:A0:75:4C:B1:CE:07:58:4E
Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
Certificate issuer: /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Certificate serial: 0194BCA9921A360EB092AB37888EAD30538E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: KWbEbWMWx8GsR8Asb1Hi7iVj3A8.roa (hash: w7QiyqZy99cacAStF09i7GMZP3QKH24tEZwntPEoeMs=)
2: ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl (hash: x70xBKDsf2fXOm1hUHvfMXf2NqSImfp95oJz3/TLE1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:92:1a:36:0e:b0:92:ab:37:88:8e:ad:30:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=2ef686dc96141e097ce137aea0754cb1ce07584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:0a:db:7d:2f:70:54:b2:07:dc:80:62:85:
65:04:9e:bb:f5:75:e4:97:96:f1:d6:8c:c1:72:1b:
34:a1:7c:15:db:e1:2c:cd:47:bc:45:42:84:a8:5f:
52:20:89:9a:40:5f:d5:7f:b0:82:00:b1:bd:76:0c:
2c:c0:90:ee:5f:1b:c9:5c:2f:18:55:97:76:7b:c8:
bb:71:27:d0:c4:a9:0a:22:5c:64:41:51:38:e3:08:
fa:50:fe:71:6a:61:e4:f7:48:16:7b:bf:df:ae:06:
0e:a0:9c:75:1e:a7:ef:d3:89:a9:98:61:77:ca:96:
33:5c:a0:7f:0c:53:93:31:59:1d:2f:91:d8:62:36:
de:60:73:20:78:9c:b5:af:c7:89:8c:1e:f0:7b:52:
e3:da:10:cd:3d:70:39:88:0e:92:ac:61:70:31:9b:
d6:5b:9b:f4:d4:a9:09:05:b2:87:7b:f1:89:9b:47:
21:92:27:8e:e4:c5:bd:6b:c5:46:a6:a5:80:9d:47:
48:66:50:a0:75:26:74:3e:b0:85:7f:e6:65:15:ce:
7d:62:97:c1:2b:d3:44:04:63:2b:71:1f:54:b2:15:
31:8a:63:a2:4f:78:a7:3d:e4:a5:0e:a1:c0:c7:11:
36:c7:4b:fd:2e:87:f0:cd:5c:c3:47:06:b5:28:77:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:86:DC:96:14:1E:09:7C:E1:37:AE:A0:75:4C:B1:CE:07:58:4E
X509v3 Authority Key Identifier:
keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:97:8a:80:52:e9:60:cb:99:ef:d1:b7:c9:9f:90:38:2d:d5:
bc:da:df:63:d2:5e:79:6f:8e:1a:1b:d0:54:46:a7:34:82:43:
a8:be:f7:15:4e:f1:16:1d:6e:61:0e:5f:c8:2d:f3:99:a6:9b:
97:3a:c1:11:e1:c6:c5:53:69:87:ac:47:2d:c2:4e:46:bc:17:
b0:83:b2:ac:19:3e:68:82:55:60:7e:86:8f:0e:04:78:d5:fc:
73:cd:ff:65:4c:f1:f2:36:2d:84:1a:c6:05:b1:f2:3d:28:53:
f3:37:26:76:80:1d:61:bf:c5:a2:34:80:10:2c:77:4b:af:9c:
d6:19:54:12:dc:85:29:f5:dc:d0:c5:5f:a8:c0:ba:7d:46:ad:
99:75:ff:8e:92:94:1d:3f:fc:ba:6a:4a:b7:5f:53:e3:a1:dd:
c3:b0:e1:0c:2e:3a:08:19:1d:8b:98:13:3d:e0:b3:26:e6:e9:
d2:48:f7:28:f4:2a:56:25:35:70:ee:9a:ed:57:f3:9b:cc:c8:
69:fe:b6:2c:32:46:c0:2a:3f:5f:1f:2c:54:d6:9a:dc:f1:90:
eb:2e:64:c4:5e:02:66:c2:c1:84:06:81:11:12:4d:bd:24:b1:
00:98:17:71:aa:80:a6:0a:18:7f:50:03:98:26:1f:d1:d9:fc:
bd:49:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:12 2025 by rpki-client