Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: MnCSr2IFHq1KiH2KA46QnFkQp8x1/VaGEhxuZlQWtSk=
Subject key identifier: A4:7B:43:98:AE:DB:85:1A:A6:36:14:45:EA:A6:A1:81:C6:70:B9:37
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 0194BC3C2AAD8AFFAB94FFCB1ACA87DD30D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: /iVmLsZBsm11a0eybsNjzXnvJYWEy6fzeb5B1XUdx8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2a:ad:8a:ff:ab:94:ff:cb:1a:ca:87:dd:30:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=a47b4398aedb851aa6361445eaa6a181c670b937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:4e:95:84:f7:76:37:9b:34:61:6b:da:4a:
40:4d:47:e2:78:19:94:28:dd:04:fe:33:69:53:eb:
42:32:27:a6:42:0e:60:03:1a:44:bb:78:88:1b:ef:
90:29:bc:d7:c8:9f:00:75:29:a7:bf:05:1b:c1:75:
65:c5:ed:8c:e6:75:fe:b7:b0:8c:0d:d9:31:2c:a5:
ca:e9:e9:26:27:f5:ac:80:3f:ba:1b:ef:a2:08:13:
af:6e:d5:c3:f4:e7:11:cc:ed:d2:85:91:86:80:69:
ae:b0:3e:e2:59:67:e0:12:f1:9b:64:b0:03:07:8f:
ee:b3:93:27:d6:f0:78:88:02:f4:12:9b:a8:2e:58:
04:4b:f6:1d:57:9a:7b:0a:9e:f6:a0:f3:8c:fa:2b:
47:50:af:8f:0c:2d:8a:5d:50:d3:e0:a0:73:07:ca:
50:7e:e4:fd:88:bf:9b:89:bc:67:8c:e7:74:78:c1:
ff:25:11:f7:58:69:76:40:c6:f0:53:dd:a3:04:e1:
d0:39:f0:4f:2a:ca:13:4a:ae:96:17:e7:f3:15:05:
58:99:2d:04:49:13:7e:9d:c7:cb:60:69:ee:68:54:
c3:43:00:8b:eb:97:f9:88:93:57:08:df:1f:af:a2:
96:f9:b7:b5:22:56:d4:34:bf:6f:78:fe:9f:63:d2:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7B:43:98:AE:DB:85:1A:A6:36:14:45:EA:A6:A1:81:C6:70:B9:37
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:eb:27:b3:af:a4:85:b5:b2:51:ff:4b:20:5b:7d:a4:e3:c7:
0d:a8:e5:51:f8:a5:82:71:89:30:0d:91:0d:8e:cc:78:96:c5:
29:1f:2c:40:e8:54:1f:ad:55:49:f4:13:4b:1d:14:6d:a4:75:
9b:e4:85:67:22:55:82:82:07:ef:cd:a8:ae:42:b2:40:30:76:
a6:75:37:1c:2f:e5:b4:00:98:57:e6:0d:15:d8:30:d9:96:b9:
af:bf:58:cd:94:81:ae:a4:b7:8b:b8:d4:23:2f:9e:04:10:57:
f0:22:7f:29:98:02:3c:fe:7f:8c:41:af:08:9f:56:4d:66:13:
de:99:3e:9a:0d:ef:5d:9f:9e:4f:b3:ce:85:cc:49:89:bd:ea:
31:d0:b4:01:f3:d8:c2:4a:ff:86:65:56:67:f2:a0:b4:3e:ae:
bd:ae:b3:fc:1d:94:09:08:c3:21:4a:5e:d2:31:12:46:eb:9a:
78:06:4a:09:c8:86:4d:dd:e7:0a:df:46:90:0e:8e:a1:0a:cb:
b5:aa:79:e6:fc:83:68:a5:e2:14:f3:d6:2e:95:d4:c9:e5:f5:
a6:be:b6:d6:dc:c4:02:f1:2c:e4:31:dc:69:97:24:e8:d2:28:
80:f7:8d:e1:85:b2:9a:f2:65:f3:08:f3:e5:6c:74:ab:cd:5c:
b9:d7:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:32 2025 by rpki-client