Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json)
Hash identifier: DFMCH0eb6R1yZlddeMNfWFGrlCtlzdK+GL1Le+it9VA=
Subject key identifier: D7:E1:66:DC:28:4E:4F:67:CD:F7:66:57:78:84:F2:82:59:32:2E:F3
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 0194BC3C02523EF936B411EB42575B0FF61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
Manifest number: 0BD9
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: L12pp1a9PB7G6CgvFQ/rafPdgAjalYAsI9ZtZyDZFAo=)
2: sbSQyxPLmKWv0FC39S3HHM2xa6w.roa (hash: u170yX0a6Jii29O1wm6n/a3vhANGyQ5cbWVo8PIFFwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:02:52:3e:f9:36:b4:11:eb:42:57:5b:0f:f6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=d7e166dc284e4f67cdf766577884f28259322ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:27:e1:7a:51:5c:0f:ed:79:30:47:43:90:
67:43:6c:70:e0:db:83:30:38:b0:4f:36:76:00:6a:
7d:00:53:6c:d7:7f:a4:a9:7a:b2:bf:7a:82:d8:ed:
f9:56:ff:07:9d:89:2b:e6:75:17:e3:33:62:22:3f:
fb:67:fb:4e:9d:4f:f6:03:cb:43:df:41:32:74:37:
d4:da:bc:49:89:9d:53:f0:38:b6:0c:05:da:e3:0f:
30:b9:38:7c:b5:b8:48:4c:d4:b3:2e:15:80:56:49:
52:fd:22:d0:39:af:7f:40:99:b7:35:7a:31:ff:50:
f6:1d:cc:f5:a9:2b:00:54:ab:98:bc:1f:e9:57:42:
09:f2:a7:7f:a6:b2:4a:18:ea:87:13:17:ff:8d:46:
84:33:61:b3:2c:f9:4d:d6:12:7e:d4:19:de:40:fa:
ef:bb:c7:8f:d4:ff:2c:ee:a5:04:38:99:09:04:75:
47:17:d0:a2:9d:4a:42:e7:4c:49:59:4a:45:f9:04:
d0:fd:84:06:2a:af:98:08:be:6c:71:23:7a:72:87:
a6:e8:51:5b:7d:f2:63:92:28:a7:8e:c8:6a:3a:40:
81:34:59:2a:75:59:65:10:9d:8d:57:c0:83:83:42:
1b:54:10:3c:f9:01:09:e8:21:3d:54:aa:da:9f:a6:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E1:66:DC:28:4E:4F:67:CD:F7:66:57:78:84:F2:82:59:32:2E:F3
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:23:67:8d:85:26:fe:d6:6a:3a:85:da:6f:3e:b0:65:de:07:
ee:cb:e7:1a:d3:bc:32:c2:59:b3:67:af:a3:58:70:49:a6:e4:
08:5a:56:c4:4d:36:25:37:d9:2f:7d:ff:b9:cd:d4:bf:e4:ed:
63:8d:51:32:c9:a1:b8:a3:d6:a3:0d:45:e4:4d:26:07:97:35:
c9:4b:2f:06:0f:ec:1e:b7:a0:57:9f:fd:b1:65:32:89:d0:41:
4f:72:92:09:e2:35:71:9f:37:ec:02:3f:61:bb:4b:13:82:d3:
da:c2:3c:94:c5:68:bb:45:72:a3:f5:2b:9d:1f:68:4c:5f:39:
b5:24:c1:de:2a:fa:8b:a5:09:b8:fe:cd:85:48:c7:25:ee:d2:
55:93:de:13:24:45:20:94:6f:68:9a:2b:b1:96:49:3f:39:9a:
c6:bb:39:45:67:9c:e2:d6:ee:31:35:a7:ca:54:68:65:55:d1:
f5:d5:1e:77:85:75:1d:ac:00:91:ce:49:a4:bb:20:c9:a1:38:
69:cc:fe:29:a3:88:6f:2b:4e:57:80:33:60:3a:28:d7:4c:35:
ae:99:fe:0d:b7:cb:bc:42:df:1d:06:87:c7:54:4e:87:2f:f5:
9d:58:db:71:e6:47:ff:15:81:e3:f6:41:c5:ff:d7:d6:79:74:
af:01:f6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:24 2025 by rpki-client