Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: Ge4FDyAgVx5s0gD+MJreRXttCTdHKG3thf0fZPYOHhg=
Subject key identifier: 65:2B:75:09:1B:E5:9E:8A:09:FC:74:EC:B1:69:10:9E:F5:29:8A:33
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 0194BC3BC2209B3BF242A31DC2C46D4A4D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0732
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: FKggqYhkKsZJLpvcaDN5oGj3WGpCapj4QpXKbqlfua0=)
2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:20:9b:3b:f2:42:a3:1d:c2:c4:6d:4a:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=652b75091be59e8a09fc74ecb169109ef5298a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:d5:76:21:4d:2e:a0:8d:41:9e:fa:36:db:
58:05:e2:05:ff:1a:9c:2b:a3:cb:21:0f:1c:a5:c1:
93:e0:3c:51:5e:52:9e:2c:05:2c:a1:65:12:6d:f7:
a8:6b:48:f1:4d:c9:33:00:40:5d:03:62:51:77:40:
69:ae:02:3e:7e:0f:e9:26:e8:2d:1a:f9:c0:80:47:
d8:bb:e7:59:23:ec:c1:81:28:bc:99:e4:d8:4f:fe:
ce:c3:e6:98:82:26:4c:9c:5a:eb:98:7f:1d:ac:3a:
f3:2b:9b:35:9b:3b:b9:aa:2b:2c:fc:a0:71:ab:e6:
83:4b:b3:ae:14:12:61:df:cd:ae:80:a1:32:e4:b0:
cc:ff:36:35:65:99:f0:86:26:ac:a5:d1:39:95:3f:
9d:e9:36:5c:63:32:6b:b3:8b:e9:a0:d8:9c:e3:19:
76:96:8d:38:f5:86:23:ad:a4:f8:d0:79:c0:f2:09:
ed:e1:35:c7:cb:f1:5a:a2:77:11:61:b4:22:7e:8f:
32:6b:8f:64:b0:cf:e7:ca:e3:9a:e9:31:d0:cd:17:
ba:7c:58:a9:1a:cb:af:40:38:64:07:fb:56:ea:b5:
fd:9b:1b:de:76:b3:56:a7:67:8b:4a:c7:95:59:52:
16:a5:db:c9:bf:e7:63:64:9b:a2:c3:52:a3:7e:6b:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2B:75:09:1B:E5:9E:8A:09:FC:74:EC:B1:69:10:9E:F5:29:8A:33
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:56:6e:84:56:a6:50:37:87:61:5a:f0:6a:44:54:7b:86:a5:
18:8e:da:13:06:5a:8b:c6:ed:61:19:60:fa:4c:50:c4:af:4b:
ab:e2:5e:bf:ea:d8:8f:c9:43:89:71:db:f2:ab:c8:9a:10:06:
b5:4b:58:f1:c4:1f:c5:18:04:7f:51:41:8f:43:b7:bc:89:18:
02:eb:53:95:16:86:af:8f:10:01:a3:62:d3:91:00:ee:25:38:
34:80:bb:88:8f:b3:91:7c:04:92:9b:d2:b1:df:fd:15:1c:b3:
9a:57:f3:15:4d:03:65:73:06:16:cd:ac:72:1f:f6:40:72:25:
51:2a:cb:12:af:15:2a:b3:f2:7b:70:8e:3b:52:fb:4d:01:d0:
c4:36:72:64:c0:be:b8:1d:0d:4c:c6:7d:bf:64:18:f5:51:d3:
0d:f9:ad:97:5d:f0:f5:d6:78:44:18:e2:9a:b1:ea:6e:82:c5:
e2:d5:13:c5:f4:d9:c4:97:4f:a9:96:51:ce:00:89:8c:04:f3:
62:35:76:44:f7:7a:b0:4b:09:02:a4:c4:33:6e:05:df:69:9c:
be:2a:74:e0:4a:e3:77:56:e7:9a:30:f3:6d:6e:e4:63:83:f1:
2f:99:b4:ae:bb:5e:fa:ea:4e:e8:8b:45:20:72:74:91:d2:a0:
67:22:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:50 2025 by rpki-client