Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: x4JG8apBqu9HugTw5aBFhYKAcaWgJsXAkLfzSZLXNRI=
Subject key identifier: EA:5A:A6:F9:A3:C2:5D:B7:B8:4B:8E:69:CE:CF:52:6D:C1:37:63:DC
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 0194BC3C94008C2AA5E05132AA4879844053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 0CD9
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: NP7rwd5mw+IusG5Hz8SSaZlYYZNYFnG08J9tRx+JYJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:94:00:8c:2a:a5:e0:51:32:aa:48:79:84:40:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=ea5aa6f9a3c25db7b84b8e69cecf526dc13763dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:ca:d2:db:b8:7c:88:3c:86:a7:67:bb:69:
32:e8:62:9c:6a:15:44:f6:ff:ae:86:56:d1:c9:77:
41:e7:d4:5c:7f:c4:01:5b:30:f5:b0:a5:4b:e3:c4:
3a:33:1e:67:85:d6:72:db:97:73:c6:fe:f1:f5:ed:
1a:13:94:77:97:63:ca:69:1c:66:8f:ff:66:1a:ad:
b8:5a:b6:c7:93:cb:ab:9f:4c:b6:d8:bd:cf:b1:f5:
13:14:e0:db:35:1b:bb:05:d5:04:79:44:d5:0d:e7:
04:15:6b:42:9c:1e:fd:6e:65:79:cb:f2:e9:8b:dd:
ee:3c:71:5a:b5:5d:9d:54:85:b5:70:ac:68:8b:10:
b7:60:0a:c3:59:fa:14:4a:b2:71:77:a6:9f:27:89:
aa:e1:ed:82:14:10:d1:1b:35:65:84:f7:f3:b1:fc:
a2:e0:3c:4e:4a:f4:58:6e:d1:0e:36:68:86:ca:72:
26:5e:81:dc:ad:35:ec:37:5e:82:e9:cd:25:e8:b4:
a5:f5:67:36:f5:dc:af:8c:87:03:31:6a:7b:c4:36:
ee:0d:7b:03:eb:fb:0f:41:41:21:3f:91:f7:8c:03:
ce:4a:aa:72:42:ba:f4:29:1e:23:eb:cc:1d:3b:aa:
48:58:11:d7:14:ef:7e:97:22:56:79:d2:84:c6:c1:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:A6:F9:A3:C2:5D:B7:B8:4B:8E:69:CE:CF:52:6D:C1:37:63:DC
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:56:d6:4f:e5:b5:2d:65:ac:11:48:fd:60:e4:bb:3b:32:
81:bb:a7:b8:83:ca:e1:46:88:d8:bd:23:b5:da:32:d8:6c:52:
86:32:ea:8c:e0:21:99:00:47:93:fa:ee:da:ac:26:52:14:ea:
32:79:c3:1b:44:13:52:d6:d7:32:5f:9d:ee:fa:03:56:ed:f2:
dd:4f:b2:6a:6c:20:36:66:bf:47:31:4f:e7:ad:a1:9d:e8:da:
3e:27:16:32:a7:8f:51:a9:96:e7:1b:8f:14:9d:02:5d:c4:21:
ef:ca:8c:d2:df:26:c6:4f:a5:43:31:a7:17:3e:3e:e6:1a:6a:
12:36:99:3c:b9:de:b0:ee:04:ea:57:6d:b8:b2:6e:d6:c2:49:
8a:8b:e8:81:d9:24:45:da:99:f3:ff:83:92:f1:e5:8c:8c:17:
fe:d1:e9:71:63:a7:10:58:a5:e3:5f:e2:d8:d4:17:94:f9:60:
a7:60:d0:ac:31:84:19:4a:c3:7a:b2:05:8d:bb:e1:d6:04:4f:
4b:c5:96:6b:7a:df:26:94:7d:f9:8d:10:83:88:8a:45:fb:f9:
8e:ac:e5:03:9a:98:78:c8:a2:c8:f5:ee:b3:54:37:49:12:65:
0a:e4:9f:92:85:f1:88:b6:f6:59:c9:87:bf:7b:1e:5a:20:11:
a3:cf:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:27 2025 by rpki-client