
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: HcEcYJ1CRHwveAuh8a00lKxYtS5CuhHPpBhwaig6p/A=
Subject key identifier: 6C:F7:C1:8D:81:E1:78:B9:EB:FB:E6:62:11:70:42:35:C6:55:5C:A5
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 0194BC04A10A780BE09117EF6B18AA4293B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=)
2: aPpnczwc4j1JvO2eWOLdAVwWYqU.roa (hash: +J8FGzdm2h6ir6gGWJRFYFJaNDYSWIeOcHIUVt+JT3U=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: pE9DPS9566Mbgw7KbO+gEBKFVr+fCiGDs/NbWYcbIgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a1:0a:78:0b:e0:91:17:ef:6b:18:aa:42:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=6cf7c18d81e178b9ebfbe66211704235c6555ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:60:ba:b7:15:71:9b:ad:57:04:57:b1:5e:
de:6a:be:a8:95:a9:65:1c:33:b2:a7:9d:1d:4f:88:
fe:8e:69:05:ec:49:82:d8:84:b9:0e:37:16:64:60:
10:61:5c:fa:d0:57:f0:28:29:0d:2e:ed:b7:eb:16:
31:4c:88:67:27:eb:18:3b:73:75:79:60:10:13:db:
1a:5f:4e:bb:65:62:c2:e2:c1:df:78:db:43:e4:3d:
2c:6f:69:79:c8:c7:2d:5f:af:5a:6e:ab:e0:98:25:
5e:51:e7:00:4c:6e:be:3a:23:0e:4f:89:d4:93:be:
7f:6e:b7:df:ee:a8:4a:fc:ea:27:9d:fc:8b:8e:c6:
d4:8d:10:74:32:6b:fd:d8:3a:60:0f:35:f6:38:12:
09:8f:87:46:4f:b3:da:9e:ce:14:9c:66:8d:ba:a1:
46:42:03:36:98:e2:67:a7:4f:12:0b:25:df:10:af:
76:2b:ce:1e:19:07:65:00:c2:26:63:14:1b:18:a3:
be:2f:29:c5:c0:9e:eb:43:ab:dc:19:bd:63:59:f4:
ee:87:4c:a8:61:6d:36:ad:12:f1:ea:09:f2:a2:ab:
71:8b:12:15:17:e7:e5:c2:71:c8:dc:10:55:1d:d8:
7e:18:40:1d:07:95:37:8f:96:3b:82:7d:c2:03:91:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:C1:8D:81:E1:78:B9:EB:FB:E6:62:11:70:42:35:C6:55:5C:A5
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:62:4f:5f:3d:25:d8:4f:6c:2b:bc:2c:58:ed:62:30:e4:14:
4b:f8:1b:d9:8e:01:00:16:f6:7d:61:8a:e8:c1:77:eb:b2:c1:
b0:7c:e4:66:a2:ce:bb:70:8a:c4:f1:98:48:ff:8f:37:04:a8:
98:4f:1b:67:e3:20:ab:a0:83:62:c1:b0:e6:1b:2f:b0:ba:b1:
2b:87:43:84:bc:1d:c6:98:77:45:1d:00:a5:be:60:55:e2:90:
3a:59:51:9f:34:64:33:c2:76:14:7e:a6:8d:3c:ae:de:3a:1b:
7c:91:46:79:22:2c:f6:0e:ed:5a:ab:07:5c:06:99:80:d5:b0:
44:09:3f:85:58:29:a1:7e:8f:ef:55:00:07:ba:58:ce:28:a6:
28:03:6d:7f:69:34:1a:13:df:92:5f:91:e1:51:18:46:96:a0:
e4:18:72:cf:1c:46:92:0b:91:48:b0:92:60:7f:58:ec:2d:62:
a2:7e:52:25:d6:0d:d6:6a:0e:31:26:98:e6:7c:30:aa:b8:08:
47:4b:18:c8:9a:a1:b2:62:8d:2f:c8:8e:f7:63:f2:c2:c7:39:
f1:5f:0d:82:c0:83:c2:98:70:40:84:cb:ad:d0:99:8a:6d:6f:
c4:b3:c6:f2:88:0c:c4:76:92:af:f0:2a:62:95:a9:f9:c8:0c:
59:f3:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:27 2025 by rpki-client