Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: hIBrjmDkWUFLm1mWzsxQg8Dv0ZutIJjCNs+iaeEJm+c=
Subject key identifier: AE:62:F5:08:FB:4F:AA:CD:C1:1A:68:D0:30:BE:68:E8:E3:A8:10:95
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 0194BBCEC863CF88461940F81647ED2EDDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 137B
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: g7ZJOZ/ZNZuGBnySfhe8xf9+Mt3eALrWmAmU0g6tiQw=)
2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c8:63:cf:88:46:19:40:f8:16:47:ed:2e:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=ae62f508fb4faacdc11a68d030be68e8e3a81095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:93:b9:07:ad:8a:cb:93:a5:4f:75:6a:1e:
77:5a:e4:17:cb:1a:6c:50:92:5b:56:d8:57:8a:2d:
a2:a4:7b:67:1e:a2:b2:41:37:d8:a7:03:72:96:d7:
e5:dd:79:a4:6f:63:72:cc:1d:68:5d:4c:2b:32:c3:
3d:4a:69:ec:89:43:64:48:51:88:2f:4b:d1:34:c8:
f6:85:85:1e:46:91:96:b7:19:e2:81:6c:85:d9:cb:
f0:02:43:33:06:1e:36:01:ad:49:04:5a:be:f0:33:
4d:90:0a:93:0d:22:fe:84:26:8b:a4:f2:68:a1:dd:
f1:a1:59:28:c5:9c:04:eb:1a:3a:28:c6:13:5d:22:
19:06:da:de:b1:54:0e:a0:78:a9:f3:57:ff:69:f7:
8f:b3:b3:88:90:58:ad:0c:28:88:c8:6f:c2:9c:2b:
78:ee:77:91:52:33:f0:b5:b5:b9:61:a8:c6:7d:f3:
78:be:02:6a:ab:8d:21:3e:ea:40:fe:fe:d2:68:f2:
8d:49:94:29:14:e9:1a:7c:dd:38:03:57:7c:62:e4:
2b:9c:29:f8:00:6a:c9:58:59:4b:6a:45:3f:2c:de:
4d:ae:42:96:29:e0:2a:a4:31:79:2e:e6:7f:4c:d9:
2f:a7:f9:85:20:e8:48:9b:dd:db:20:78:cb:a3:bf:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:F5:08:FB:4F:AA:CD:C1:1A:68:D0:30:BE:68:E8:E3:A8:10:95
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:98:b9:f1:c3:fb:4c:b9:a7:80:fa:d4:62:90:b8:57:f7:d7:
c9:96:28:6b:99:0c:fe:bd:97:bd:e6:94:67:08:1b:94:23:67:
bd:58:da:f2:78:3a:64:2a:33:dc:f4:13:ee:f9:65:79:0f:ac:
5b:be:3e:80:c2:f7:2b:13:b7:3a:dd:ad:87:f3:56:99:c6:65:
cc:9d:83:25:b7:37:d3:c6:83:53:a6:c3:16:2b:1a:11:0e:13:
95:df:8c:43:09:df:4c:9a:56:45:db:c0:9c:c3:76:bf:99:d3:
09:81:f1:31:5c:de:4b:fa:04:88:55:85:53:ba:cf:96:a1:a4:
58:d1:c7:39:32:03:78:3f:78:a8:5b:a1:0a:fe:98:e3:d7:05:
93:f2:c3:d3:cc:7a:5d:12:3c:c5:ab:c5:97:09:bb:2b:f5:b4:
23:bd:1e:ff:fa:46:a6:37:20:48:98:b7:dc:82:72:20:22:56:
c9:28:8d:89:f0:1a:19:81:bd:81:30:ef:ba:d1:96:3a:af:33:
a9:56:46:c3:ae:38:9f:d0:1a:ec:f6:b9:2f:cc:5c:3d:16:5a:
e1:a3:d1:70:3c:84:7f:af:00:10:19:be:a4:6c:ce:81:dc:88:
72:1f:b0:38:b1:1e:9b:c1:be:c5:33:45:dc:b2:e7:0a:b8:29:
3b:9f:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:21 2025 by rpki-client