Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: Asj+T3GqcyLxNToZcHW+sqgY++10xS9+eTGnrboaU3k=
Subject key identifier: 4F:58:FA:14:14:21:19:6F:67:CA:51:C6:1F:4D:49:89:46:0B:C4:50
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 0194BC3BD5B328445D087FC98DE5788084B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 01FA
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 1-jvgd6RnvKghGloVJb1Iw3eDs48.roa (hash: B7s4SajlBd3EvNe+3zoLXiT8A5U0bChHVGW9zyQgNFY=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: C4dDbkCk0UBnN3Rhu7kQVEosvQXmrbfKQyLBPZwvRB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d5:b3:28:44:5d:08:7f:c9:8d:e5:78:80:84:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=4f58fa141421196f67ca51c61f4d4989460bc450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:ce:bf:40:b7:8c:7d:98:90:ad:46:4e:42:
38:4d:fc:36:6e:4c:3e:e4:19:5a:41:74:4c:b9:d7:
28:4b:20:be:91:cb:20:45:51:18:f0:0c:30:a4:8c:
4a:10:9e:24:b4:f8:c1:6e:22:5c:bf:9f:9f:30:2f:
c2:6f:e7:09:5f:70:30:35:18:5b:ef:04:f0:fb:36:
98:99:b2:69:d8:12:75:e1:3e:a9:55:00:89:a9:fd:
1b:14:a9:ce:4e:f3:49:67:02:57:28:43:52:c5:c6:
58:db:84:0b:79:9c:77:a1:8e:6d:13:de:9e:49:78:
6c:62:b7:db:65:dc:f3:5c:b3:6b:28:b7:a9:65:80:
96:28:8b:9e:2e:bb:66:59:22:6a:a1:d9:01:61:71:
6c:3e:5b:2f:16:19:82:01:b3:7a:d4:89:92:59:8e:
23:35:90:91:26:d2:13:75:30:73:42:04:cb:f8:e9:
1a:b3:1e:26:8d:ed:81:b7:45:a9:14:9a:fd:d8:be:
4d:f2:77:3b:f8:5a:df:ce:61:4f:43:b1:90:56:4c:
b4:9d:c6:ec:4b:8e:2b:9e:c4:bb:b9:1a:c1:af:68:
8d:1c:5d:40:65:e2:9f:fd:fc:b6:55:a4:35:5c:1b:
fa:5b:8e:e1:4d:de:23:75:73:ed:be:ab:a6:24:44:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:FA:14:14:21:19:6F:67:CA:51:C6:1F:4D:49:89:46:0B:C4:50
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:9e:1b:08:b2:e6:b2:83:50:72:e7:43:f4:a0:e2:aa:42:
a9:36:4a:4b:fe:8f:98:36:28:01:e7:0f:08:89:1a:30:ef:5a:
d4:dd:61:31:44:78:b1:b8:9c:0e:39:5d:6e:db:a9:12:af:f2:
dd:78:8f:3b:d9:11:0f:15:da:aa:1d:32:d4:64:0b:d0:f5:bf:
10:66:10:40:00:a7:4f:5d:36:80:6a:27:c1:6d:f3:d4:4a:7b:
c3:2d:a6:f4:1e:41:67:0c:e0:58:fe:39:cf:34:be:13:f1:e2:
74:a0:22:9b:7d:39:a6:8e:50:a0:48:36:1b:cc:e1:d8:b8:1e:
20:2c:1d:00:ca:38:37:5b:8b:ad:e1:9c:0d:34:97:9d:e6:6c:
27:c1:99:93:47:69:7c:7a:bc:9b:2b:ad:08:e3:d7:e7:f6:bd:
a5:9b:0e:79:ab:30:3e:ec:14:34:83:66:cd:c6:44:07:61:b9:
dd:19:f0:75:a8:a8:9a:b6:38:03:36:5a:5e:fa:bd:08:28:e7:
16:40:22:7c:99:f1:34:53:0c:f9:c3:0c:e9:b5:bd:33:7c:9a:
0e:bd:0c:7a:2a:2f:80:62:dc:af:49:9f:6c:1a:c8:10:5b:6b:
c9:15:db:80:f1:e2:e7:50:0c:42:59:cc:e8:0f:f9:71:82:03:
8b:1b:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:43 2025 by rpki-client