Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: ZvplRuzDqWIJd1Fu7VgIJ6lkGuFFLBiFRdIhdNERdEU=
Subject key identifier: 94:05:56:1A:73:D2:86:DC:54:7C:39:05:D4:BF:F9:AB:AD:09:57:BD
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 0194BC730E64AE8115933D14D12F7DF22BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0A1E
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: ZIl-tGPYsmILe8aUvhHfFRisBTg.roa (hash: ELX+nfW5VdhOFYsiqhpPo4rEHXv1DoXfvUrKNYNv+iU=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: I005wx+qsTPujFceuvyFkqSBBF0fJCB7qjqTdkL7jvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0e:64:ae:81:15:93:3d:14:d1:2f:7d:f2:2b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=9405561a73d286dc547c3905d4bff9abad0957bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:05:f9:9a:b1:ac:7a:57:4d:e4:9d:8e:45:
b9:76:5f:60:99:9f:f9:62:f6:a7:3a:b6:92:91:8a:
ee:17:29:8c:81:97:ba:c1:99:e2:48:96:31:24:08:
e1:3b:a2:60:2a:95:e7:b4:62:03:9d:62:7a:14:e3:
19:1c:f5:30:3a:69:98:7b:32:86:50:ef:22:ef:41:
1b:d3:25:0f:90:91:19:8a:5b:3f:89:bd:32:21:01:
05:43:10:1e:d8:47:51:9e:a0:86:5a:9a:d2:1d:56:
85:43:2e:6e:d2:4a:d5:f0:a1:31:42:1e:b1:7f:f3:
53:20:aa:38:0f:b4:2c:7e:1f:14:dd:a1:e6:b6:a0:
93:00:ec:23:b9:6f:ae:98:20:45:ef:fe:fa:2e:f5:
b7:71:70:82:5d:75:25:4b:de:e8:eb:8d:4f:d4:35:
8c:b4:3c:06:e3:d3:8b:67:f7:5f:74:3d:48:06:e8:
22:f3:25:5a:42:62:7a:cf:7b:62:44:c3:8a:37:aa:
2a:a7:ff:97:49:24:6e:aa:2a:50:e5:ab:da:ce:de:
ab:2c:58:80:d9:86:79:ed:86:b1:67:7f:c6:fe:13:
91:ea:85:10:1b:8e:a5:63:8c:a6:b9:61:d1:34:be:
54:9b:52:0c:ce:8b:56:a0:e5:77:f5:42:37:c5:d2:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:05:56:1A:73:D2:86:DC:54:7C:39:05:D4:BF:F9:AB:AD:09:57:BD
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bc:d6:80:73:97:93:d9:24:90:b5:90:87:c3:94:19:0b:20:
fe:da:b0:45:d0:87:ab:79:da:08:f1:82:e0:dd:26:7a:e5:64:
c0:5e:c0:94:4d:f5:ac:41:6a:e1:c4:56:ff:91:88:19:f1:50:
70:21:d1:27:7b:73:0f:c3:bd:5f:52:21:70:ea:54:94:cb:f2:
ab:4c:21:d0:5f:21:1b:85:c4:bb:b5:d3:d3:69:eb:44:98:01:
be:04:66:d9:57:9f:11:0a:26:7f:51:d8:7e:09:dd:2b:38:75:
fc:23:74:74:c2:96:02:c8:f0:7f:8c:72:66:73:ac:7b:a1:f0:
21:23:d7:d0:13:81:41:4d:b0:c9:51:29:c7:56:92:60:29:51:
dc:34:b0:13:bc:b9:e9:aa:bb:85:30:d4:c4:8a:31:77:56:b9:
21:03:ed:ee:7c:c9:05:26:9c:16:68:ee:52:dc:7c:76:0d:3b:
1e:13:1a:d8:bf:ce:d4:fc:88:8f:bb:85:5a:aa:97:c8:9d:62:
c3:a6:fd:ed:23:51:32:93:b6:4f:c1:38:04:c7:d9:cd:3f:51:
5b:63:d6:38:cc:c6:5a:ab:93:e8:98:16:52:65:63:77:ce:84:
82:3b:73:2f:c0:26:6b:5a:49:98:9e:da:6c:c0:e9:53:a7:93:
75:93:83:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:27 2025 by rpki-client