Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: Qzi8BghnKIMhg2KRaBaygk3t0JL+V8MMESEAclYJy1Q=
Subject key identifier: 57:A5:B5:34:B4:0A:EF:D7:B9:40:D4:E6:29:23:19:6D:73:6F:A2:0A
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 0194BCA9CB1D9A1B765D3A0E8330D2F6D48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 0EE0
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=)
2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: gESR2xeMX5xDE0mr2dPJ54FCjMqD2HpN1uMPvsghpj4=)
3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cb:1d:9a:1b:76:5d:3a:0e:83:30:d2:f6:d4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=57a5b534b40aefd7b940d4e62923196d736fa20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:8f:d1:83:33:4f:16:48:f4:b3:23:20:49:
7f:f8:83:0c:03:45:12:eb:1a:b5:71:0c:78:a0:82:
e7:92:56:73:ef:2d:14:8d:f2:aa:60:82:2d:4b:56:
1f:df:36:5a:0b:57:68:8f:ec:89:99:f7:cd:d8:22:
d8:d0:73:54:75:31:3b:53:65:91:a1:68:37:7c:db:
3c:ea:6a:5d:02:63:61:82:ee:47:99:8e:69:93:e5:
a1:fe:61:14:0e:94:b1:65:13:09:8d:c5:4c:82:6d:
5b:fe:56:25:5b:53:d1:fe:db:54:39:77:62:7a:7e:
f5:1a:85:81:c0:d1:c2:50:c0:00:b4:90:10:d1:4f:
15:80:ed:72:5a:d8:4f:d1:c4:c3:c1:8f:74:59:c1:
94:c5:7c:54:9f:69:20:2a:e5:34:ba:2f:46:03:9c:
08:75:5a:cd:a4:9a:ed:c4:8c:72:52:25:4c:1d:77:
f5:72:18:ec:03:3a:04:59:97:8e:e7:57:6f:0c:22:
9c:5b:65:6c:3f:8b:0b:32:4e:aa:7a:88:fa:b1:24:
d2:74:19:a4:e9:17:f0:77:6b:3a:e6:02:c7:0f:7b:
45:e8:20:04:e2:0f:3f:08:e0:90:0f:bd:81:7a:33:
be:32:0b:bf:49:01:57:cf:aa:c9:b1:72:e7:6a:a3:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:B5:34:B4:0A:EF:D7:B9:40:D4:E6:29:23:19:6D:73:6F:A2:0A
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:22:73:bc:9b:1b:1c:c3:f0:cc:c9:cf:48:82:b3:df:35:bb:
41:21:fa:e4:12:26:ae:f7:11:ad:7c:22:ea:b5:18:92:d9:59:
99:9d:e9:9c:79:2c:db:73:bd:b1:51:49:9b:95:54:c1:2b:b1:
4c:d1:5b:0c:9b:f0:95:2e:ab:75:f3:2d:fb:e0:c2:1a:cd:ab:
f1:f5:83:9d:32:0e:4b:19:54:b7:2f:86:6b:25:8a:84:1d:6f:
0c:c6:c0:53:c8:21:37:c5:10:8c:2d:97:38:79:60:9c:0d:9c:
52:e8:be:dc:b2:ab:9c:bd:c1:40:e8:10:e5:04:9b:b5:fb:a1:
d6:3d:e3:06:08:0e:94:21:7a:3f:8a:03:15:6b:f5:74:44:37:
53:da:01:5e:9a:23:61:f1:fc:d2:68:bd:fb:f6:dc:c8:00:b2:
e4:d4:9a:51:b7:ad:d7:6a:b0:6f:e7:da:37:a4:08:c1:57:58:
78:11:0d:4c:53:bb:e6:36:7a:76:19:1b:fa:69:9d:e5:c9:32:
ed:ca:0b:cc:74:a8:07:dc:03:13:da:c6:09:c1:ad:a3:06:bf:
f8:aa:57:62:fb:37:e5:e6:89:71:dd:d7:3d:c2:c8:86:98:16:
38:ad:b6:28:dc:3f:bb:5b:93:f0:a5:49:43:73:76:1a:08:eb:
58:b7:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:44 2025 by rpki-client