Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: ansV5Kg1/J2RoV15twctvyUfrFSFmUiqXFhb7j4LV08=
Subject key identifier: C7:A1:FA:C2:09:B0:6E:76:63:06:BC:93:FF:CC:BD:7A:4E:D7:78:8B
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 0194BD4E3957162B04F7B09DCCDD8AE91D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: n1OYYD4HZs3NiukSvYKnxndAwFn4Y3fziw2UnuiHX4U=)
4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:57:16:2b:04:f7:b0:9d:cc:dd:8a:e9:1d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=c7a1fac209b06e766306bc93ffccbd7a4ed7788b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:0a:eb:f5:48:22:75:5b:04:b7:e8:49:22:
86:7c:a8:f3:6a:e1:e2:6b:f9:8b:58:2e:bb:67:69:
6a:ae:bf:5e:fb:6f:3d:d5:a9:86:78:a9:72:f8:7a:
9c:c9:1e:5a:1d:84:5c:34:18:49:59:f8:c8:fc:9c:
fa:ca:b3:81:29:74:03:94:e9:96:f0:f6:6b:56:5e:
31:19:a9:b1:d2:54:de:0c:6b:b9:f5:b9:00:23:6c:
eb:d0:24:c9:45:dc:ba:a6:13:a2:83:56:6a:52:d3:
fa:fb:e4:24:27:99:af:9d:d1:a4:9b:13:24:42:b8:
65:22:b1:4f:24:62:7f:59:1a:f7:27:57:4b:6f:04:
6a:8f:7a:50:65:f7:da:24:08:d0:fe:ad:41:e0:5e:
7e:96:20:7a:3a:83:a6:73:55:3d:e9:65:b9:89:77:
ac:df:24:e7:1b:16:73:d5:e1:37:03:13:75:85:67:
18:63:11:79:fd:ba:6b:bc:e4:63:79:e3:ba:2a:86:
1e:83:c0:ff:ef:e0:95:3c:66:e7:3d:e7:3b:e0:9a:
dc:4d:76:92:73:35:f5:43:d4:5f:58:b8:06:83:fd:
bc:85:d7:be:87:e7:1c:b2:fc:fb:6a:78:04:40:6f:
5b:be:b0:11:d9:54:34:75:5e:5e:01:3d:3a:15:19:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:FA:C2:09:B0:6E:76:63:06:BC:93:FF:CC:BD:7A:4E:D7:78:8B
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:61:0a:48:65:f4:5a:d8:8b:58:c3:3c:e6:43:5e:4a:2d:61:
a7:f2:95:d3:3c:71:67:e5:81:42:93:88:ac:6e:0d:b4:4f:91:
65:1c:eb:6e:18:fd:cb:10:4f:3f:f2:d9:ca:68:56:b1:b4:c1:
dc:f0:72:42:2b:87:eb:f4:79:75:9d:03:06:63:cf:10:71:ef:
a2:8c:18:61:f4:73:8c:79:30:75:c0:94:a3:27:08:a7:49:2c:
01:41:c4:75:b7:e7:40:25:de:47:98:6e:ac:37:82:b1:09:dc:
04:55:57:2b:74:e8:80:c8:03:7a:2e:f3:64:13:83:0c:fd:18:
04:0d:d7:11:a0:32:6a:7f:17:67:4c:96:92:20:30:2c:24:7b:
81:dc:a1:e7:33:b4:25:99:f5:90:a0:d8:55:6b:bf:b5:10:71:
d4:65:9b:07:b0:10:4b:94:57:91:1d:3c:2e:fe:96:7f:c0:04:
fe:6e:52:fb:ba:35:20:c6:77:13:48:86:89:9c:bb:81:7a:6d:
95:b0:ee:dd:84:6c:f8:3d:f2:b6:ed:80:be:f7:c1:2e:9e:92:
2d:39:36:48:44:95:64:29:74:23:94:4e:7b:9b:70:18:fc:b0:
29:89:2e:77:37:db:6d:a5:8d:f8:ca:0b:fe:45:73:42:7e:cc:
ac:51:0a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:32 2025 by rpki-client