Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: MmAyFJCtvHwdf1GygDemckpR7Vz/XaQUiQMfEt/3X/E=
Subject key identifier: 4E:7F:0D:49:4D:F1:FE:88:00:15:0C:E8:33:B7:13:3A:1D:F4:BE:C1
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 0194BBCE74D63F54AF3B70B773E22B299B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 117B
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: HB9vx+kTEygChF9uKc3k0qXfWhQD7NYCw08ErhNOP4M=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:74:d6:3f:54:af:3b:70:b7:73:e2:2b:29:9b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=4e7f0d494df1fe8800150ce833b7133a1df4bec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:8d:91:72:bb:d6:07:9d:fe:a3:09:12:15:
1b:13:7a:58:44:0a:ca:01:49:e0:8b:a1:de:42:c0:
d4:d3:35:92:f8:67:c3:77:d5:0b:0c:d8:cb:87:ff:
15:10:fb:c7:bc:ca:74:ce:ef:9b:e7:03:21:bc:c5:
60:4e:0d:69:27:39:f1:ff:ce:b7:85:ef:c5:4a:d6:
c6:7b:34:3e:66:92:11:32:93:3e:4a:a3:26:b9:39:
bd:8a:9c:30:10:b6:e6:6b:fd:1f:de:fb:78:80:30:
c0:07:c7:67:58:a3:72:ad:0b:d8:14:2e:0b:5a:55:
fd:af:fe:0e:8c:7f:15:bc:af:ef:63:f5:ab:66:00:
c9:1c:ea:95:5d:56:b2:06:2b:90:75:49:11:38:07:
ba:e6:fb:33:7d:1e:8f:98:f4:1b:4f:36:26:cd:0d:
e4:0e:84:ad:78:12:72:de:a5:98:04:17:7d:43:16:
80:6c:57:43:f1:fe:7b:74:c5:cb:78:f7:0f:85:af:
ab:cd:6c:b8:05:6a:c6:9f:c5:87:47:7f:6f:0a:fd:
f1:99:b3:51:17:b1:23:08:16:f6:84:fb:3f:fa:78:
b9:32:0e:3f:26:cb:78:1d:ad:5b:d7:3a:af:b6:c8:
dc:6b:52:a3:f7:18:56:79:35:4e:55:06:e5:62:86:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:0D:49:4D:F1:FE:88:00:15:0C:E8:33:B7:13:3A:1D:F4:BE:C1
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:49:52:fa:3d:8f:a4:7b:98:1d:bf:a3:df:aa:94:29:ac:e0:
a6:da:b4:3f:5f:bb:5e:cb:2b:ed:9d:75:80:dd:7a:7b:54:98:
3b:f7:db:26:30:c6:ce:5a:c9:d0:ec:2b:40:40:85:bf:ae:96:
d4:d5:a8:cb:b2:2b:ae:8a:c4:c2:ee:45:ab:b5:c1:8a:de:d7:
5b:17:31:ed:9e:81:9a:0b:f9:6c:a6:67:3a:c7:11:1c:e6:58:
67:a0:34:80:b0:a9:33:a3:00:a3:62:01:25:b4:60:32:80:79:
4d:9b:58:24:8e:b9:f9:f3:9d:ba:ef:17:8d:75:6c:65:b5:27:
ad:27:bc:5c:d4:42:c8:df:05:ad:91:d3:57:9e:d3:49:27:ab:
9b:d9:55:7d:48:26:e9:3b:4c:94:b7:00:b7:d0:8c:77:42:70:
87:21:a9:fb:77:58:61:b4:27:cd:7d:e7:02:07:75:a6:ce:71:
01:8e:c0:6f:dc:16:ba:37:2c:81:99:aa:cb:be:f5:0c:4e:fe:
58:6c:73:11:50:d3:23:ad:bc:97:43:e9:18:7f:5c:dd:12:a4:
b9:6e:6e:99:21:ad:13:fd:ba:39:13:1d:76:e4:7b:29:51:1a:
9e:3a:0b:dd:29:b7:3c:11:18:53:84:2b:85:85:6d:89:de:9e:
f3:bc:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:45 2025 by rpki-client