Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: PHDzJHCy24LJDNMUxZaiZGooVJR+7uTo/rV1FvbguIg=
Subject key identifier: 48:B8:C3:AE:ED:51:C5:A6:CB:DB:0A:3A:A7:82:90:78:84:8F:E0:5A
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 0194BC051373BA817AF3220402ACEAB27616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0979
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: KvzmElJM+D17Y2h7SFh54NLFlS0qgo4jpZhiPwKRNIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:13:73:ba:81:7a:f3:22:04:02:ac:ea:b2:76:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=48b8c3aeed51c5a6cbdb0a3aa7829078848fe05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:b4:86:90:88:3c:fc:37:c7:a0:4b:21:d2:
ea:87:1c:94:2a:36:e6:a4:83:24:0f:a5:38:61:9c:
4f:62:4a:0b:4c:dc:3d:be:0e:92:8d:4b:0c:79:e9:
b0:8f:40:48:f3:59:3c:44:2f:71:34:5c:02:63:45:
b5:90:20:fc:27:cf:7b:fa:9d:37:51:13:a5:fa:d5:
52:cd:8c:db:e1:4e:2f:17:6d:79:b5:7d:17:f1:af:
d0:ce:bd:a6:16:d5:25:21:5c:e3:5d:01:34:9f:3d:
7a:01:ce:f1:7b:b6:8c:b4:51:46:15:45:ed:f7:42:
de:69:cd:e9:1e:a0:c1:75:de:d7:ef:2b:32:a2:c3:
85:da:44:96:f1:7e:cc:1f:fc:34:0d:ab:b4:52:6c:
d0:6a:48:2e:cc:03:3a:8b:87:70:62:0f:17:49:19:
00:7b:9a:ec:44:e8:06:fe:1a:c5:72:e1:a5:7b:b3:
26:83:40:9d:43:48:d3:81:16:66:11:5c:63:cc:83:
00:47:8b:02:94:3b:d4:83:28:8a:21:6c:9e:5a:15:
74:e7:0d:6e:3a:a1:3f:ce:61:e8:da:1a:a4:6d:6b:
e9:37:0b:ad:9a:bf:28:44:66:78:92:54:7a:84:c7:
6e:92:85:02:56:43:db:2e:99:0b:b3:98:ff:6d:fc:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:C3:AE:ED:51:C5:A6:CB:DB:0A:3A:A7:82:90:78:84:8F:E0:5A
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:63:09:38:99:eb:b9:9e:d3:8f:27:50:bc:4e:47:d0:b6:5b:
32:f3:c0:9d:e1:2c:43:6f:36:8a:9c:29:e7:ee:ba:cf:d9:4d:
f6:de:40:da:73:da:5b:07:ac:1c:45:e5:49:fe:3d:1a:1d:d8:
04:f5:53:34:d6:f8:cd:a7:ab:d9:1b:26:9d:1f:e5:6f:94:ec:
72:27:24:17:a2:cb:b9:5c:0e:ab:cc:5a:e9:8e:8d:ee:99:07:
ca:0c:78:cb:ef:d2:44:36:9f:7c:fb:8f:b6:d8:02:e0:0e:e5:
d7:90:d7:26:4a:9a:07:57:0f:58:83:a7:55:9d:1f:2b:46:28:
ee:92:3b:85:b7:ba:47:9f:18:06:e6:83:75:12:7a:e3:5c:1e:
0e:f5:fb:36:f7:31:75:60:ba:3f:3c:ab:7a:0e:0c:55:55:7e:
1f:77:f2:34:68:e3:f5:4c:cb:4c:81:44:17:17:15:f6:10:60:
05:15:04:92:88:8c:7a:0e:3a:c4:a2:e2:ac:34:48:41:e7:04:
e6:a5:31:0e:32:45:e5:ac:0a:f3:b3:2d:37:71:ee:8e:10:78:
f2:79:bf:47:14:42:1f:8f:3c:bc:e5:f3:53:5f:d7:6d:15:cb:
c4:46:8c:c7:8d:30:48:59:ae:59:35:b8:19:6c:2a:06:5f:38:
6f:91:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:26 2025 by rpki-client