Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: Oe4/AK3jY+tfzOqi58Tq21fupQyik8AB1X3KrsNbdmw=
Subject key identifier: F8:5F:83:97:5F:88:03:D6:13:77:CB:D1:2D:FD:01:3A:E7:CB:24:FD
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 0194BD4E664B79EDF1A24940E530A53C32F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 0FAC
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: PFeNJh8bIvJJwrVhFdjbJ_6nA0g.roa (hash: W4rdrOFBoEPSrsA/68rwM1dn+xMkx/R5IFg9Z22sqH4=)
2: gYsgEjcsJ5b6Y89gLZhDUu4yzyU.roa (hash: wwYZAzswQQucDNHWr9ELIR74MfsXt5OA2p0+wzD+2Vc=)
3: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: b2eM30zcLYjYY9obVw49Fdgb0z5maELKqG/vzEX3IzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:66:4b:79:ed:f1:a2:49:40:e5:30:a5:3c:32:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=f85f83975f8803d61377cbd12dfd013ae7cb24fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:5f:b0:1d:e1:45:ec:66:72:12:30:57:9c:
a7:3b:c8:5e:4f:f0:78:97:f7:b4:af:de:de:7b:3e:
98:8d:00:df:a2:d4:04:6f:4f:1b:8e:d4:72:07:c6:
86:02:48:19:67:74:f8:2c:08:96:7e:52:83:57:dc:
44:44:e3:59:fd:54:0e:cb:de:bf:36:59:e7:22:7b:
70:20:84:c6:d4:c1:64:cf:08:41:01:6c:91:f4:46:
0e:07:ff:66:05:2b:49:72:39:ab:59:10:63:a6:62:
53:3e:e5:5d:97:ab:bc:1f:40:49:04:d3:99:98:3c:
67:b6:d2:4e:87:41:b1:70:ed:7e:be:34:ce:d5:1b:
66:a6:77:5d:72:61:02:4c:2c:ac:f9:c7:92:5b:b6:
d5:9c:b2:b0:38:46:6d:e1:65:83:dd:87:ae:76:7a:
e4:99:9c:13:89:9c:f7:2c:13:4a:5f:73:0e:79:43:
f7:00:7c:3a:60:18:9b:33:62:be:09:c1:c9:91:5d:
99:94:9d:dd:70:7a:35:69:90:1d:28:65:b1:7f:84:
72:e6:ee:e6:e9:8e:2c:cc:5b:64:d3:89:75:08:9e:
5a:87:72:67:6a:44:41:5b:0a:bf:e5:10:97:cd:e0:
35:2e:d4:53:27:ce:d7:6a:f0:9c:af:6d:1a:f0:ed:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5F:83:97:5F:88:03:D6:13:77:CB:D1:2D:FD:01:3A:E7:CB:24:FD
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:de:1e:07:ae:07:00:b9:e9:66:9e:ac:80:f2:9a:33:cd:34:
8c:19:78:83:e8:5f:31:ae:b9:64:0f:f1:45:90:da:07:e3:44:
46:4b:1a:b7:03:79:c7:f1:6f:d6:22:8c:e0:fb:2a:a9:21:4c:
65:4b:b8:d7:de:cc:a2:9d:47:56:72:58:20:16:8e:0d:6f:ba:
80:91:a7:62:96:ad:13:38:ba:ef:b6:f0:a4:2d:6b:d8:01:f9:
06:19:8a:e8:e4:dc:16:84:bf:d1:16:00:f2:db:fe:43:6e:94:
1f:d5:3f:69:e0:a6:13:20:d2:a3:09:26:4e:40:1c:c1:db:6f:
02:ad:15:77:fc:cd:d3:72:21:fb:2f:31:08:ea:4c:aa:53:df:
e2:8a:cf:eb:70:b0:fa:1a:ee:8c:9e:5b:d4:ad:72:3f:29:ed:
f4:31:90:ed:ec:97:7e:12:cf:5b:a0:8e:cd:6c:9e:44:0f:98:
77:8f:17:a0:3b:c9:bb:f7:b7:67:33:77:a2:17:33:74:d2:bb:
d2:76:f0:52:35:ee:43:42:7f:61:67:a8:ce:c8:dd:0f:38:b1:
d7:3b:73:80:78:13:10:73:cd:ad:89:0e:72:d5:1f:f7:2f:0c:
0d:29:5e:9d:da:12:8d:49:af:2c:aa:8a:98:26:62:a8:3f:97:
d6:c0:87:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:52 2025 by rpki-client