Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: MpAJSjcX7ZO1qlFfPgoLomhpA4N/wcHApihuJQ+sCJI=
Subject key identifier: FA:BB:6C:79:34:06:F8:50:F7:F3:96:51:3D:04:68:DC:54:AC:93:1A
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 0194BD8579A8158972AB9BBC2B0E24AB7455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 09DD
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: pbWUlF6kph4C-luLlJFzTT778aw.roa (hash: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: OxSzOAluT8UYA2GUFmvtUFhJUCNvHOAxNil8pvxbQrU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:79:a8:15:89:72:ab:9b:bc:2b:0e:24:ab:74:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=fabb6c793406f850f7f396513d0468dc54ac931a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:47:38:2c:2e:f9:62:63:61:58:69:84:99:
58:53:f9:0c:03:1c:0f:c7:4b:a9:3e:00:4e:2e:d2:
30:d3:0b:f8:0e:ca:ef:46:3a:7a:e3:c5:fe:23:5c:
23:f1:7b:bc:c4:d4:f7:02:bb:5f:bd:95:56:fc:f4:
fa:d6:44:8d:10:93:23:56:e0:d0:fa:fa:a4:3b:99:
21:02:6b:4d:4b:7c:1a:1b:03:d3:41:b4:55:3d:51:
74:e9:e5:d3:9a:69:53:fd:a8:33:7d:a4:22:e2:f9:
e4:6b:27:56:47:fe:ba:9a:69:80:97:93:c1:1f:dc:
d0:30:8a:30:9f:4e:bf:71:00:00:d1:64:8d:6e:f8:
f8:8f:58:55:f5:f2:71:e2:09:62:7b:c0:8f:a6:12:
f4:0b:81:de:ef:71:5d:f2:3a:65:fc:65:b9:8d:57:
2b:2a:d9:63:14:49:b5:75:6d:bb:0a:77:91:4b:46:
68:0a:1e:bb:d2:99:3c:d0:3c:04:d3:cf:ad:97:b9:
56:b7:f4:37:6d:45:47:cf:2f:d3:83:67:32:5b:f0:
80:fe:17:29:d9:09:6f:66:4a:f6:d5:fe:08:8a:93:
a5:b1:47:b5:b6:41:d8:16:2b:c3:bd:77:e2:7d:c1:
80:e8:ae:ba:d8:8f:6a:a3:e1:c0:64:92:52:ba:e9:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BB:6C:79:34:06:F8:50:F7:F3:96:51:3D:04:68:DC:54:AC:93:1A
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:49:f1:c5:29:59:3d:0e:81:23:66:4d:d9:41:d2:c3:80:cf:
c3:e4:41:4d:0d:91:ff:68:82:b3:28:35:06:14:86:3f:06:af:
51:87:b2:e3:60:65:03:19:d4:e0:c1:0f:c7:fb:11:bf:f5:4b:
4b:5e:81:8d:dc:c8:4f:e7:8f:af:c2:a3:2d:f9:45:b0:14:e8:
75:dd:fb:fc:df:55:53:62:a0:d4:67:a7:9a:11:ad:fb:47:ec:
c9:85:ed:41:c0:0c:83:39:ad:3d:85:bf:1b:d1:29:a9:cd:5e:
55:79:cc:a3:c8:e8:a9:70:0e:fb:4b:b2:e6:a7:72:63:a7:75:
5b:5e:23:0b:86:bf:2e:27:28:a6:fa:f5:20:e8:1c:ad:19:2c:
77:34:75:f9:68:03:a3:e2:22:58:23:0d:d8:07:ec:a4:46:7a:
44:35:57:c4:17:e0:d6:48:74:d9:97:fe:37:77:6c:d2:ac:85:
fe:f6:29:a4:18:bb:62:78:a2:32:41:37:2f:9b:96:6d:7b:21:
b9:a5:8b:95:88:41:4f:c8:e1:b2:ae:f5:54:f7:81:eb:3d:67:
13:76:d6:68:7a:fc:65:2d:85:4f:a0:18:39:74:50:81:4c:7a:
4e:c1:b9:5a:8c:3f:05:99:d4:dd:8a:97:aa:09:40:d3:13:3c:
bb:d6:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:30 2025 by rpki-client