Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.mft
File: zo2SrOCAEcTQrsjyKGVxW9kaASI.mft (raw, json)
Hash identifier: JsUcD3BHWWGNJKOp1tQVGPT4/6mwDI1X9ugPa33ZESQ=
Subject key identifier: B5:28:A8:FE:69:A6:B4:11:B5:0E:3E:29:DF:B2:91:E9:DA:AB:C1:8C
Authority key identifier: CE:8D:92:AC:E0:80:11:C4:D0:AE:C8:F2:28:65:71:5B:D9:1A:01:22
Certificate issuer: /CN=ce8d92ace08011c4d0aec8f22865715bd91a0122
Certificate serial: 0194BCE0820192A25E4FE3FAA6128F4E4356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo2SrOCAEcTQrsjyKGVxW9kaASI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: c9T1Kx5A7nWBX74YKnmxrK2YxWk.roa (hash: z4gK4/Y9ltoru7dKh2/m8n1YWOzp0cICAUx0PffNJmo=)
2: zo2SrOCAEcTQrsjyKGVxW9kaASI.crl (hash: MI+7Hh0ocCemuIMud6gA8jT8EqDP83XH7b5MYPPvvGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:82:01:92:a2:5e:4f:e3:fa:a6:12:8f:4e:43:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8d92ace08011c4d0aec8f22865715bd91a0122
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=b528a8fe69a6b411b50e3e29dfb291e9daabc18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:64:bc:91:65:cc:61:2b:d8:d2:59:1a:3e:
c1:99:f7:24:97:61:e4:ed:a2:93:50:6d:f7:47:c6:
cb:c2:5f:0b:52:45:55:40:fc:3c:de:ff:0f:74:8c:
0b:f8:4a:54:af:c5:11:68:2c:59:77:80:df:2d:9e:
b3:63:1f:20:f7:4d:3e:85:68:2c:3d:ea:36:ac:fe:
27:36:91:9c:2b:84:be:c8:1e:10:0a:d8:e0:8a:39:
18:7d:11:0a:da:e1:b7:5a:2e:1f:77:58:17:eb:32:
68:19:d9:f9:7f:d9:15:d1:9d:73:5f:4b:15:a0:6e:
ab:23:46:d9:c9:b2:ff:46:cd:c8:2d:34:3b:d4:44:
6d:65:f7:91:89:4c:6d:11:83:22:5b:cd:a7:54:ee:
b3:39:87:af:c4:a9:36:c5:96:2e:c6:52:2b:e4:a9:
3e:c8:5b:ed:1e:49:9b:22:58:f5:2b:14:ea:67:5e:
51:62:cc:94:2f:f3:3a:c0:9f:48:95:58:06:8f:86:
17:79:84:8d:73:22:11:8e:d4:06:c0:41:ee:71:ed:
dd:d1:ec:b7:2c:a3:68:f0:a4:14:6a:62:bb:e1:5d:
21:e7:4d:d9:36:6c:06:f8:57:17:ee:96:66:05:f7:
f7:a1:7a:a9:2e:e3:42:b6:9b:14:c8:27:58:7c:33:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:28:A8:FE:69:A6:B4:11:B5:0E:3E:29:DF:B2:91:E9:DA:AB:C1:8C
X509v3 Authority Key Identifier:
keyid:CE:8D:92:AC:E0:80:11:C4:D0:AE:C8:F2:28:65:71:5B:D9:1A:01:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo2SrOCAEcTQrsjyKGVxW9kaASI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/143d0b-7755-4250-8a8c-545449e49f73/1/zo2SrOCAEcTQrsjyKGVxW9kaASI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b9:b3:e7:8f:9b:b2:ac:00:51:e6:26:11:01:23:bf:91:60:
ee:f7:62:1f:2f:75:fc:0d:1b:84:88:ed:84:70:55:eb:2b:64:
37:8e:a8:90:59:f5:b8:3b:39:e1:17:29:25:22:42:3b:4f:79:
25:c1:61:e8:36:6b:05:3d:cf:8c:dd:d5:9a:15:a5:ad:85:da:
fa:67:86:1f:bf:57:fe:90:95:79:13:b8:c1:08:57:d5:89:5e:
e6:f9:c0:64:a3:1d:2c:70:d8:86:73:aa:f3:4f:ee:cf:da:f5:
2a:db:d1:53:4f:b8:a5:ef:57:a4:91:33:07:fc:3a:fa:a4:5e:
4c:07:98:86:e0:d1:f5:47:61:47:2e:11:78:ce:c2:95:32:f8:
74:0b:29:6d:92:91:7c:de:27:4b:bb:75:1a:e0:8b:1c:db:d3:
2a:40:70:a7:c4:ac:9e:ba:aa:39:dc:48:b7:1b:8a:ed:5a:f6:
2b:25:a1:c8:f0:75:05:a5:8b:87:31:47:82:ab:26:f4:ef:a0:
44:85:8f:f6:14:f0:13:60:76:36:e0:f3:c3:84:3c:53:07:95:
9c:e5:d8:93:8f:89:98:82:b4:0d:c2:29:42:8e:ac:ca:41:fe:
a5:5e:6f:0a:51:01:50:b6:4d:f2:c1:44:83:46:51:4e:94:84:
e9:37:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:47 2025 by rpki-client