Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: fzVQU7EPZc1cJ40o3QJThKiGYBgFzmxORBK7+his31k=
Subject key identifier: CB:FA:34:04:D4:FD:8B:A2:13:0B:EB:87:16:2A:24:1D:4B:66:6E:7C
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 0194BC0514338F3B295902935ED86A8784F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 01E8
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: 8RBv+q2te715TLTI8ACAHeYXsJt9eXGVopjdcvMUxhg=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:33:8f:3b:29:59:02:93:5e:d8:6a:87:84:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=cbfa3404d4fd8ba2130beb87162a241d4b666e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:86:c0:bb:c4:fb:69:16:3c:1e:61:0a:cd:91:
21:dd:68:20:2f:01:6b:20:ac:1a:bc:e8:09:d6:c3:
0a:b8:2a:59:46:39:aa:82:0c:11:fd:1c:f7:09:51:
52:a1:36:db:45:68:df:38:f6:58:88:49:77:56:a0:
51:a9:72:a6:50:c2:89:f2:20:96:c0:76:78:8e:86:
f3:88:de:42:a3:ee:af:b1:56:6f:b5:80:e5:48:bb:
fe:84:57:f1:76:cf:d5:b3:2c:1f:64:d6:4b:c0:a3:
e9:e2:bf:ca:2c:56:49:09:71:a6:05:59:b8:0b:0a:
0c:02:a4:23:b7:0b:f8:be:3a:84:bc:a1:7f:40:a3:
53:85:be:98:41:87:63:df:2d:df:3e:da:43:8f:6a:
d3:dd:20:03:1b:3d:3f:d6:f8:07:00:b8:e9:1c:f1:
ea:14:e6:36:6d:f8:57:a3:dc:d1:5e:e0:23:3d:94:
bc:34:01:49:fe:e0:77:05:e4:31:68:18:fc:f0:1c:
ef:02:3d:95:d2:d6:c6:a4:97:a0:2e:f7:e4:7f:27:
09:4b:19:41:35:7a:a6:41:14:35:3b:3b:9a:7a:b5:
8e:01:f8:71:68:a3:be:87:1c:32:59:8b:66:e6:ad:
fa:19:1e:16:41:74:9c:29:d6:c2:37:07:18:f1:db:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FA:34:04:D4:FD:8B:A2:13:0B:EB:87:16:2A:24:1D:4B:66:6E:7C
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ed:46:6c:b3:21:19:fc:a8:24:2f:6a:f5:6e:4e:4f:8e:8d:
95:ef:7c:ec:e2:cb:89:34:e2:07:c6:66:c3:28:41:7f:76:f7:
0c:eb:fb:6d:25:2a:98:36:6a:28:0e:5f:d4:ac:fe:72:d3:37:
fa:b5:fc:02:bd:68:46:a2:8e:37:7c:10:1a:a8:1c:93:86:a2:
65:9e:e1:3d:47:2c:fe:9b:56:75:5c:a7:dd:ec:7e:07:8c:5f:
80:01:15:8a:52:ba:4f:71:39:a0:03:8f:bf:4f:a2:1b:4d:76:
b1:45:82:13:7a:eb:e9:77:ee:2c:df:7e:e9:9a:5c:32:48:40:
77:79:ea:fd:44:68:e0:06:79:11:32:13:9e:f8:e7:b8:23:c8:
39:47:db:6e:7d:03:4b:8e:e5:f2:8d:ff:12:7f:44:e3:24:c2:
ad:21:ee:17:28:65:98:a9:7f:59:ec:bc:61:17:c0:26:70:c5:
c0:44:e7:23:f0:e1:a9:be:26:ea:d5:a3:da:0f:e2:57:b2:31:
f4:67:90:b5:e3:07:2e:5d:0c:5a:ad:c6:df:e3:27:1a:5c:bf:
7b:ff:32:0c:71:8c:fc:22:73:87:99:a9:fd:f3:d9:3e:78:3d:
91:ed:a6:e4:1c:b1:4e:ec:a3:49:99:c0:3b:00:71:d9:dd:d6:
5a:0b:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:56 2025 by rpki-client