Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: DQYWbYclcf8S1PAmn0CqaFXSMKqCtd7Th1923WEZFQw=
Subject key identifier: 92:42:43:9E:FA:F7:5A:EC:9B:5F:A6:EE:7B:75:6E:51:1E:1C:10:7E
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 0194BBCDBF418FB7D6E8D7BC5E8117D22835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: YTvMkmlQy+ip8MSGlOMJ0Bc3LbnPKx+uRutrSxyvcJs=)
2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bf:41:8f:b7:d6:e8:d7:bc:5e:81:17:d2:28:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=9242439efaf75aec9b5fa6ee7b756e511e1c107e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:95:e5:1f:0b:61:75:6d:65:cd:80:34:c0:
e7:aa:32:68:7a:fa:c9:67:51:8e:32:7c:25:51:2e:
98:7b:11:4a:01:a6:64:b0:d2:dc:f7:d3:59:33:d8:
56:92:ad:47:37:b6:99:09:a0:37:35:6b:11:76:bf:
20:7b:0c:06:dc:67:a6:bb:b4:54:14:81:2a:4e:a2:
e5:b8:a5:7d:86:a2:6c:a9:12:b7:11:4e:5e:d4:bd:
55:87:7d:d2:ae:e9:dd:42:56:81:42:b1:de:83:e6:
29:5d:56:7f:18:41:d9:fb:5b:e7:e7:eb:11:88:83:
39:11:07:aa:2c:29:a2:97:be:52:25:b8:a8:73:10:
f4:d6:8b:95:c9:80:81:9d:3c:73:2d:ca:8b:06:1d:
76:12:64:96:bc:d0:db:e6:11:93:74:6d:7c:e3:b2:
29:66:fb:51:49:a9:8b:4d:3a:e0:40:3f:bc:8d:b7:
09:9c:d7:04:4c:a2:ca:76:50:4e:6b:8c:b1:d7:17:
6f:98:f6:cb:d6:1d:3d:d4:2c:92:b0:ee:ad:aa:1e:
00:0c:27:63:dd:fb:b7:7e:4d:a0:bd:76:35:e0:03:
a0:4e:16:e5:41:1c:77:46:d3:ad:6e:01:21:9d:39:
e9:fb:89:22:33:a0:9e:54:60:70:c8:87:08:38:1b:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:43:9E:FA:F7:5A:EC:9B:5F:A6:EE:7B:75:6E:51:1E:1C:10:7E
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:36:45:b7:24:af:5f:26:89:a6:fb:00:64:8f:b5:1e:21:ab:
bd:ee:ee:c1:c0:e6:b0:76:73:a7:64:a4:7c:79:b5:a1:54:bd:
e5:04:98:3d:43:29:2c:09:36:aa:17:5f:24:d2:e2:c7:e8:51:
2f:c9:0c:ab:98:c9:99:a6:0e:2a:02:81:1e:64:cb:fa:98:a6:
8a:9a:58:06:b1:08:89:da:dd:e2:d6:67:1f:d1:3b:cb:dc:9b:
8f:40:8c:ba:3d:0c:18:ab:e3:f1:49:8e:06:9f:f5:fc:6b:9a:
0b:de:a8:1e:d2:ed:95:97:c0:ff:74:8a:6f:e7:05:cf:4a:a5:
02:bb:b9:22:d0:68:53:af:3f:d5:c6:80:9c:fe:61:23:4b:a1:
e2:8b:30:21:3d:c4:7d:d4:a1:46:fb:94:bf:f7:9c:ae:18:1a:
38:e3:cb:58:66:9d:89:4a:a8:b0:a8:87:41:ab:54:5a:35:13:
77:b3:87:4a:6a:0e:fb:ba:01:12:a8:4f:7b:b7:16:f7:2a:cb:
cc:81:e8:05:eb:3d:3c:a7:98:fb:08:a2:3b:33:66:35:2c:64:
3c:f1:74:e4:d1:c6:12:1b:5a:e2:f6:b6:63:76:50:58:32:31:
8f:f0:0e:91:1a:18:10:40:b3:45:99:d8:a6:3b:e6:b8:ab:9f:
27:60:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:50 2025 by rpki-client