
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier: 1kG0Ln537veAZOSqo+PafnLuzOe23yDLAKh7FdaK3sg=
Subject key identifier: 7D:CB:BB:07:8E:C3:CF:99:41:48:16:19:31:7A:7A:42:4D:88:4C:2E
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 0194BD4EBE5A96CAAB6A08B05A2E6045F088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number: 10BF
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: 0ez5-37GJP5iy1QIJwf_IO-WQhE.roa (hash: QEZ8/KPLqz/9+BOZvTWpaYfcSae/bnuyUVUksCn5Y6M=)
2: 3t2CVo8lZxK05qVhWuiu4c8sgzo.roa (hash: stXOtWs8A5ImkqXvcLQ61uhzCWwyOQe5BXcDJYFxYKQ=)
3: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: etN/7cPdmeOKWN5oUYNQGkNowu6qJjsUqhOyMClX4ZU=)
5: sSpzjHD8juEFwmAVJ-9kZDaT1ek.roa (hash: 7SLV5glKGePLniqHW9rAB95C/r7wSCzkCmA4YMo9QI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:be:5a:96:ca:ab:6a:08:b0:5a:2e:60:45:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=7dcbbb078ec3cf9941481619317a7a424d884c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:75:35:98:49:08:11:b9:00:d9:d5:92:17:
53:1d:64:2f:67:be:6d:1b:fa:8d:3f:16:a9:0b:51:
ff:ef:4f:99:51:92:15:ba:57:3c:22:32:9a:42:55:
bf:15:c9:9c:cd:90:14:c5:6f:d0:cc:09:09:a9:5c:
88:b5:81:27:0c:0b:ad:06:f2:78:b4:09:db:6d:64:
5c:15:72:67:6e:3f:04:e6:40:f9:f7:16:62:a1:a9:
e7:68:94:d0:2f:02:18:2d:b0:d9:5e:10:da:20:e1:
45:27:df:8e:60:1a:a7:61:c6:e9:8c:1a:cb:70:d2:
ca:ad:98:7b:b1:12:2e:f9:05:69:e0:43:da:a2:7a:
b3:a0:8f:82:b6:27:c3:ed:23:4b:a4:3e:44:49:61:
95:6e:36:99:2a:df:f0:e0:f0:56:d0:f6:e8:20:10:
00:84:db:1b:3e:b2:ae:0e:1d:b6:82:de:a1:e2:a1:
00:b0:3e:4b:90:ce:5b:a7:86:51:c7:08:c6:a4:5e:
fd:41:6e:d5:f7:83:1a:e1:ff:5f:ef:34:d2:65:2d:
46:7e:a9:cc:e2:af:a9:86:28:19:a4:aa:d8:20:a3:
44:f6:4d:72:d2:16:14:0c:7c:48:31:96:df:65:8a:
fc:64:48:45:6d:89:0f:53:dd:08:03:90:4f:87:9d:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CB:BB:07:8E:C3:CF:99:41:48:16:19:31:7A:7A:42:4D:88:4C:2E
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9c:cc:33:19:ce:e4:54:7c:1e:41:cc:fe:ba:99:d2:75:81:
7c:2d:44:15:2a:17:d4:c5:1e:c2:f0:e4:2c:cc:ba:56:42:b1:
5c:d2:a1:8d:1f:04:67:ae:f2:0b:43:5a:1b:c3:34:ec:9e:f8:
9b:64:32:c4:78:31:00:db:dc:73:ff:a7:aa:e8:06:6a:20:45:
83:59:1a:fd:0c:5b:07:44:40:c0:ea:28:03:58:ce:f4:87:84:
55:31:15:96:1a:9a:55:1e:54:a4:22:79:e1:6b:73:3f:b0:d2:
d3:5a:88:1c:eb:0d:eb:80:0d:31:3c:5e:59:af:df:5f:41:92:
6d:a9:eb:a6:5f:4d:a3:c9:5b:9b:e9:8f:e0:a6:2d:92:53:81:
ca:3f:ad:cb:82:84:20:c2:df:b2:a6:02:af:4c:d0:13:a0:5c:
f2:da:de:98:51:4c:25:aa:bd:fe:cb:b0:15:72:d6:ed:f9:00:
d9:4f:f9:98:34:4c:d0:2c:dd:0a:49:b7:d7:12:29:81:c1:16:
34:88:67:df:32:2c:8b:40:77:2f:67:0f:73:8f:15:11:c3:71:
1f:f5:4c:81:d0:ab:a5:ac:b8:5e:65:cf:81:a0:a6:64:e4:5c:
0f:e1:39:5e:5c:93:3d:53:4c:88:55:e4:c0:4a:3b:6a:91:8d:
be:53:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:43:16 2025 by rpki-client