Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier: /Q738huv/x1FPPtyEgSmpXNjUblr8oarQ09fofxSeIU=
Subject key identifier: 93:0E:9C:9C:96:CF:D0:69:C1:34:73:8F:6F:20:2D:E7:56:A5:47:10
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 0194BC7310F743D53155D369D6FADF58568F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number: 0A18
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=)
2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: bz/kAyM/nqnvsH4sfgLRP7fCJev0EUdDv3SpLxP63Qc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:f7:43:d5:31:55:d3:69:d6:fa:df:58:56:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=930e9c9c96cfd069c134738f6f202de756a54710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:45:4b:1b:4b:09:5b:99:d0:d6:ee:b9:8d:
b1:f6:eb:30:12:f8:a6:58:e1:2c:69:f4:a5:91:7a:
d5:36:ed:a8:eb:7a:9d:e2:9c:4b:99:2a:3f:48:6f:
fe:b1:30:ec:ac:5b:5d:da:54:f9:78:ce:a6:60:00:
04:26:60:df:ed:10:8e:a1:9f:41:97:5f:ef:fd:06:
9a:99:d7:47:0c:09:7a:27:43:3e:a2:e3:91:43:0e:
1e:4d:ef:6f:3a:b5:d5:65:60:44:12:27:62:3f:f4:
62:60:a7:43:88:2f:75:00:db:37:38:c9:b1:b5:c5:
87:71:77:d6:05:c8:f1:6e:72:2d:80:22:f6:4a:80:
50:2e:6b:70:ec:be:26:07:7a:27:08:3e:03:25:0b:
bf:c1:e9:c7:9a:6e:51:c1:0e:ca:f0:c7:c6:5e:11:
11:c0:07:ff:38:dd:5e:c3:33:4d:aa:01:bc:09:31:
45:8d:6a:0d:01:76:4a:00:d6:b4:04:c9:09:d4:37:
7c:b8:50:87:2c:1a:13:8f:49:52:fc:6c:37:9a:7b:
88:d3:30:97:0c:c7:d9:94:40:10:5a:92:df:8b:d1:
49:ad:84:3a:3a:db:bc:47:84:b4:29:b5:11:32:ee:
51:2d:4d:47:0f:5c:7b:69:79:84:b5:47:99:ba:22:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0E:9C:9C:96:CF:D0:69:C1:34:73:8F:6F:20:2D:E7:56:A5:47:10
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1b:dd:00:0e:31:3c:0f:b0:af:3d:0f:c8:3d:c6:4d:4f:95:
4c:74:d4:31:15:c9:d4:94:e2:43:4b:61:d5:a0:81:0d:6d:1b:
4c:b9:12:e2:c8:86:f0:74:81:e4:ce:3f:75:e8:0a:c1:4c:04:
92:b7:ad:af:96:38:1a:a2:cb:7b:1e:0b:93:1f:98:dd:69:6f:
b5:92:09:23:93:ab:4a:3c:12:6d:48:31:e0:d6:20:c6:85:7b:
25:ab:f3:0c:a2:87:67:e4:a2:25:24:db:af:7f:09:3d:ae:57:
a4:09:dc:90:80:ed:08:e6:68:6c:21:90:da:a0:5f:5e:77:2b:
11:f9:e4:85:7d:5c:eb:4f:0f:6b:e7:d5:84:f2:42:1b:3a:09:
05:7f:19:4e:a1:ef:0a:21:da:8f:d6:f5:f1:ce:df:28:01:5c:
27:83:0f:b1:f7:3d:91:74:93:11:c3:30:3d:4e:ba:df:73:fd:
9e:ab:7c:01:75:05:82:e6:18:14:d4:83:3f:8c:11:2b:da:4e:
d5:05:a9:82:54:ee:60:84:8f:a3:fa:dc:71:76:34:7a:7f:c7:
f9:f2:f2:54:66:b4:93:aa:f4:8b:c8:50:13:3f:6f:f5:a8:ea:
2d:8f:cc:c4:97:6d:76:b0:8e:60:7d:4c:9e:ed:b6:9b:e7:88:
80:d0:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:06 2025 by rpki-client