Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: ZJomGqoxkcivACGLwBddcMsRSsV4wengwPQO1dQOrzI=
Subject key identifier: AF:0A:3C:9B:B5:8A:61:C0:E3:5E:7D:E4:8D:A5:8F:88:72:E6:F8:7E
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 0194BC3BED10F2E7F3799A8F553E01B29F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 0398
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: PYhNNzuk9SlKthV_33iOWNORmCM.roa (hash: 8PTIGwrPsJPGQk8kIZHLm7NCCrY0xp7lDA1kLSNWPlg=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: 7WO/jzoax+V/6ekXAXS3VADcYRrQLZcMZtJMxokgrM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ed:10:f2:e7:f3:79:9a:8f:55:3e:01:b2:9f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=af0a3c9bb58a61c0e35e7de48da58f8872e6f87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:ec:7e:f8:bc:b5:57:6e:23:43:e2:0b:12:
5c:07:d9:94:85:1a:0b:d0:13:f5:e5:14:aa:3e:02:
e1:50:93:c0:0b:f9:6d:1e:82:fd:fa:cb:f2:d9:24:
20:9e:cd:1c:c5:fb:06:66:64:36:64:84:5a:7d:46:
63:76:8f:1e:50:1f:39:8d:d1:19:34:9c:6b:12:b3:
6f:ac:f3:bc:9b:06:45:73:63:c1:46:92:51:13:e0:
0f:6e:b9:88:8f:06:60:59:ea:81:a8:46:3e:f3:c2:
fb:e4:17:dc:ee:82:3a:1b:93:24:8a:98:a6:0f:58:
b0:28:73:4f:25:c5:db:3a:d3:fe:7e:3e:ee:ef:86:
3c:57:04:96:80:3d:0b:7a:1f:19:23:71:10:e4:db:
ed:3c:dc:e2:7a:94:23:3a:cb:37:93:a1:61:59:2f:
05:32:f4:1d:3e:87:08:b9:17:aa:90:70:e3:29:0d:
4e:38:85:50:ed:cd:7c:e2:41:95:c5:f9:4a:fd:d0:
04:78:cf:52:57:fa:3a:b9:cd:12:51:8a:6d:84:6e:
f7:95:ad:ef:a6:60:e5:fa:25:f8:79:5c:cb:34:57:
3e:73:df:c3:56:ab:e7:83:3c:8b:ba:96:1b:f5:b4:
4d:34:6a:91:f2:14:30:63:85:cc:0a:22:7e:93:30:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0A:3C:9B:B5:8A:61:C0:E3:5E:7D:E4:8D:A5:8F:88:72:E6:F8:7E
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:f4:b8:2e:a1:2e:87:0a:71:61:ff:b0:c8:47:8e:74:26:07:
97:52:c1:93:85:25:c6:50:d6:87:1f:ec:cb:11:9c:37:8d:a9:
3a:25:bf:9f:cc:8c:ea:2c:7b:49:77:ad:92:e2:9d:31:19:1b:
1f:b2:91:ae:66:a1:fb:0d:77:5d:a0:24:43:b0:9e:c2:3d:d7:
f7:96:c3:1b:ef:9a:33:f3:bd:f0:d3:7b:3f:c5:22:b4:97:ed:
3a:f2:e6:b5:8c:81:a9:2d:3a:a9:71:29:f6:da:1f:55:4d:92:
b6:f7:22:71:96:54:24:b2:0e:47:e2:bf:0a:3d:64:af:21:be:
72:1a:a2:1d:a5:2b:d2:82:0b:00:b7:68:f4:79:46:3e:62:70:
42:ff:82:a2:aa:ea:d1:b6:b0:93:3a:a5:ff:7a:6a:4b:72:69:
77:4f:ed:89:b8:9b:f4:d8:f6:2e:9f:d7:cf:25:e0:2e:d6:82:
62:b3:0a:29:21:d2:9c:6d:33:eb:39:a1:e3:56:71:14:9a:ee:
80:30:56:17:ed:48:32:6e:23:03:1f:5c:04:c0:78:19:75:49:
df:e8:6f:a6:3c:3d:94:cb:57:f1:f6:47:d8:67:5d:12:01:45:
8c:cc:5a:88:76:a3:a8:00:9e:b2:29:02:5d:f2:cf:39:1e:19:
fd:b7:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:40 2025 by rpki-client