Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: vXp5DbDSeoG/3UZiOn1Z/01ZgpoXJzwPCnN3Pse9TSA=
Subject key identifier: BB:FA:D7:63:F4:60:BC:64:90:2B:EC:66:FD:42:B8:09:DD:20:0C:0E
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 0194BBCE453D191D2AFB6D1BBDE23862B7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 04EB
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: XdSHryzxColXwLL8wK6lgtvngvD5WKe669b1Drb/T5o=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:3d:19:1d:2a:fb:6d:1b:bd:e2:38:62:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=bbfad763f460bc64902bec66fd42b809dd200c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:6c:09:dc:d6:54:50:37:bb:9c:07:dd:47:
08:76:90:2f:c0:42:33:27:89:4a:78:00:be:de:db:
bd:9a:fa:4a:ce:9a:1c:48:12:05:1b:dd:ec:18:d8:
81:df:5d:07:00:02:29:c7:3d:1d:15:ce:9b:0f:34:
83:65:e7:9d:48:97:8b:87:ef:fb:a3:3e:19:ad:e8:
07:41:31:3d:0a:4f:a5:be:98:2d:e0:4b:6d:3b:fa:
56:c8:43:cc:ab:ff:da:a1:7e:64:8b:27:c7:57:8d:
1e:85:14:b0:17:55:de:43:26:7f:79:ad:aa:da:72:
bb:1c:b2:1c:93:6c:75:ca:f1:75:9f:a4:32:26:6b:
b0:9e:a9:1b:74:df:fa:b0:2b:0f:28:87:f8:08:06:
50:ac:3f:ab:03:d3:1b:e7:2d:ec:85:a8:b6:19:bd:
ac:19:b1:ef:92:90:4c:d0:f8:5a:fe:ea:7b:23:98:
d1:0f:85:3f:40:8a:a7:ac:c2:bf:59:73:57:d3:8a:
67:c5:34:85:8c:bf:01:68:dc:c0:d1:da:e2:cc:f9:
af:42:86:ef:7b:46:64:d2:00:61:d2:e7:9e:1a:fa:
2c:41:59:e4:fb:9c:16:5f:e5:ee:77:1e:b7:c7:71:
b8:15:f3:89:91:6b:8c:6c:59:4e:cd:cf:c6:59:b2:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FA:D7:63:F4:60:BC:64:90:2B:EC:66:FD:42:B8:09:DD:20:0C:0E
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:70:d7:77:ea:bd:9a:99:a8:41:95:49:74:b5:cb:8e:5d:04:
c7:80:37:56:d9:ec:6e:9c:9a:cf:7b:e2:b7:30:43:4e:00:c9:
d5:9a:6a:1a:b6:54:59:2e:ea:4f:cf:33:24:28:c4:b5:a8:b4:
12:8a:66:c7:ac:6d:fc:5f:90:7b:c4:e9:aa:88:42:2d:95:c4:
65:1f:8a:39:44:4b:fc:d0:da:31:84:19:e2:4c:02:b9:f5:0b:
d6:a3:96:af:28:df:85:12:45:78:53:c8:92:0d:e2:46:56:84:
84:44:24:3d:99:34:ad:f0:4c:81:81:b3:f3:d6:43:05:da:82:
0c:9a:14:0c:32:eb:35:45:b5:46:20:cc:8f:e5:44:83:6f:d5:
7f:92:32:48:5a:de:14:9f:d4:6b:87:78:fb:5f:53:39:3f:0f:
bb:99:59:46:70:b3:29:58:9e:da:92:80:ec:ec:38:b9:03:f1:
d3:df:37:c6:3d:08:40:54:5a:09:36:5c:49:b0:a8:19:cd:d7:
03:01:6f:b1:b3:e8:53:14:08:23:58:a5:fe:f4:e6:4f:2c:68:
82:e6:dd:a6:f6:a7:03:0a:09:62:f5:5d:84:38:49:a4:ff:36:
cf:60:06:97:88:b7:0c:33:8f:36:88:d8:74:87:b0:2e:4b:e7:
03:c6:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:43 2025 by rpki-client