Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: 7SQlQL/BSl0yhC5MhkW6Va1b6QGODKdySSlq3XFxKbw=
Subject key identifier: D1:9E:C5:D4:AF:FA:FE:4A:C6:08:B7:ED:8D:40:51:0C:0D:5B:AF:0A
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 0194BCAA075CBEA0DE12FDEB5C94F1A1EE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0A80
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (hash: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=)
2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: +0XjJvmsJ+qZKkVw22gVTsu2ArlXFGuGiA19qpbvkHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:07:5c:be:a0:de:12:fd:eb:5c:94:f1:a1:ee:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=d19ec5d4affafe4ac608b7ed8d40510c0d5baf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:bc:29:e5:e6:c7:fd:e1:12:95:f2:02:af:
cf:c0:b7:03:9d:0b:7f:a9:97:1d:f3:95:1e:6d:20:
10:ad:c4:54:82:39:22:8f:ca:e9:c6:6c:1f:2c:2f:
d0:04:13:ec:af:0f:c7:2b:8d:e9:cc:54:a6:54:66:
a3:b0:81:a0:e8:f3:5e:4d:e4:74:6c:a9:36:f9:f4:
78:91:84:e7:9b:7e:6d:45:69:27:bd:f0:34:0a:59:
47:96:2a:6a:35:36:2c:71:c9:f2:b5:99:e2:08:5f:
7e:ff:7a:ad:8a:0f:11:aa:48:d7:c1:2c:20:da:44:
7d:62:87:80:c2:e9:08:a0:87:ee:07:29:46:b3:b7:
e7:25:90:de:04:50:30:d8:cb:d5:36:d0:29:ac:f0:
d4:2c:1f:01:74:b2:38:a5:ed:b2:27:2e:a1:54:af:
d3:ab:5c:69:5a:71:3f:d0:5f:64:3a:3f:e1:f9:7b:
80:69:a6:06:aa:11:3b:9b:0a:e6:40:31:e2:a7:09:
c2:89:94:8a:f4:1c:fa:36:da:eb:a9:69:d4:a6:d7:
28:a9:7a:00:b3:0a:ec:c4:5c:50:09:2c:1e:ea:55:
fa:3a:0f:09:c0:60:8f:97:57:3b:bb:5e:c0:56:9e:
18:ff:7c:26:46:17:a0:4d:ee:bd:bf:f5:83:51:f8:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:C5:D4:AF:FA:FE:4A:C6:08:B7:ED:8D:40:51:0C:0D:5B:AF:0A
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b6:5b:a4:c2:5a:33:99:c1:e6:a1:d7:ff:c0:ab:ef:f3:75:
12:9a:92:25:6b:e4:36:18:9f:b7:c2:42:36:2a:8e:ca:d2:21:
81:81:1c:5d:cb:24:0f:68:f2:92:83:30:eb:29:2e:47:d2:c9:
dd:6c:0a:a0:fd:01:97:07:0b:41:f2:99:f9:6e:c0:fc:3f:5f:
cb:18:69:43:5e:99:44:92:aa:af:6d:0a:e2:fd:f5:95:87:3d:
22:2d:ca:0c:ea:2f:21:ba:f8:2e:94:87:34:67:74:7b:e8:66:
e6:b0:25:36:08:ff:84:1c:cb:dd:2a:9f:fa:af:6d:d9:98:63:
02:2d:a5:7b:1d:10:37:eb:3b:e9:e3:89:82:c1:7f:84:d6:01:
d3:43:83:77:f2:ad:51:88:3b:b0:05:79:f5:8d:54:d4:3b:91:
eb:3d:4e:60:cd:f2:f6:79:f2:ee:93:41:f0:2d:35:03:ff:a3:
59:b5:c6:05:18:ca:e1:7e:46:47:1f:cf:01:6c:08:fe:7b:31:
f7:db:a4:aa:42:03:18:95:d7:d4:6e:4e:47:38:cd:26:b9:34:
62:0d:3a:ec:fb:96:99:19:04:a3:e0:3e:05:de:64:77:ac:82:
6c:2c:7e:73:77:db:f3:69:58:26:62:05:d9:c2:e9:55:7d:5e:
65:17:ca:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:28 2025 by rpki-client