Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: JrzCA9pL3pHF6uqSSbP9mYA18f0Z8YAva/bKtbH3wt8=
Subject key identifier: 85:E3:BC:D5:3B:F6:0E:71:6D:BC:46:7B:4C:69:7B:D6:7F:95:AD:CC
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 0194BBCEC2C6E9ABC1A18DF9EF9255D3B93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 035F
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: ClD6XJpZOQb9nr2bEdEPJ2ltEeKv2BJxhFkwCn/zUMM=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c2:c6:e9:ab:c1:a1:8d:f9:ef:92:55:d3:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=85e3bcd53bf60e716dbc467b4c697bd67f95adcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:62:97:74:0b:70:d5:88:8f:37:fb:36:c1:
ee:62:85:07:48:16:d3:f0:d7:9f:a1:52:52:f6:d1:
4d:f7:80:70:24:c5:58:19:64:17:d7:06:73:bd:13:
9b:c1:2f:5d:3e:f9:c7:0f:a4:ff:86:38:d7:e9:fa:
ff:15:b7:f5:ea:6a:56:a6:8e:05:7b:56:5c:32:39:
83:c5:e6:fd:cc:f0:d7:5c:ce:fb:1f:71:03:da:a0:
23:8b:48:07:ff:73:7d:dd:f7:ba:4a:7e:56:49:36:
07:49:5e:cc:49:c5:79:cb:67:04:a5:0a:f3:10:7d:
47:23:71:1d:e1:12:06:f7:55:ef:39:15:9e:3a:b0:
71:3d:c4:01:8d:e9:f1:91:bd:6b:eb:6d:ef:72:14:
b5:da:92:ad:4b:a4:28:b6:8b:4d:ad:8d:76:97:1a:
ee:51:05:72:5b:02:45:4b:ee:8d:35:3a:a9:05:d7:
da:71:12:e7:a7:59:58:0a:12:00:98:4b:ec:38:cf:
50:05:c9:af:66:4d:27:4f:9f:58:b8:74:ce:9e:5f:
d1:29:a6:03:dc:80:c6:b1:05:29:73:9c:d3:e2:4a:
14:b2:30:2a:09:d8:e3:7c:07:fb:2c:9d:7c:8b:74:
9c:76:67:f6:18:bf:20:8a:26:eb:77:a3:26:70:89:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E3:BC:D5:3B:F6:0E:71:6D:BC:46:7B:4C:69:7B:D6:7F:95:AD:CC
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5a:96:a4:42:9b:bc:66:9d:b3:94:64:56:64:c5:54:da:c2:
89:55:b2:b5:ea:43:35:e7:ed:cb:10:f8:71:bf:c9:68:90:49:
f9:1a:81:94:ad:b8:e0:89:5c:32:97:23:40:94:71:c0:13:44:
78:9c:5b:10:5b:dd:8a:32:6e:66:c8:fd:8b:de:d2:18:99:5c:
6f:6b:77:25:4c:17:3d:d1:d8:b2:92:09:24:57:d1:54:d1:a9:
23:15:8d:d9:b5:01:3d:4c:18:cf:62:77:34:9f:74:7c:23:2b:
a9:28:81:68:a5:a9:4e:d0:02:3f:3b:7f:46:a1:19:20:48:c9:
f2:0f:00:5c:01:49:66:ce:8c:5e:b3:b6:98:76:19:94:47:9f:
9c:9f:64:fe:7f:6c:cd:13:dc:5d:53:06:b4:27:ca:5d:3e:64:
4f:19:d7:83:a3:44:49:d3:50:36:ff:71:ce:81:66:4f:f9:68:
a9:05:a7:8e:d9:54:81:3e:78:60:67:e4:11:7d:b7:36:61:c0:
1d:c7:71:d9:e8:b9:16:dd:aa:06:3b:ef:74:71:c4:ec:57:36:
22:e7:40:c0:57:5c:01:89:46:27:03:65:4e:e1:af:d7:81:05:
e2:bd:c5:e4:77:31:c5:c1:4c:fa:b7:32:d0:89:3e:26:77:cb:
9f:79:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:12 2025 by rpki-client