Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File: zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier: ru4nG9B5OOLgsU3uVGrJ3o/Z/DpZxvMPlDQXJZX0XbA=
Subject key identifier: E4:9E:3F:F3:F8:CB:69:FC:66:2E:91:5E:DA:66:45:B5:A5:8E:61:0E
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 0194BCE09F049CD2C930C11F61C17943D2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: 8oT7fOBgdsUIIWZBhypDTwG_INQ.roa (hash: WRDiXAITdWeeibEg69ylgGin7yKTe8ComkxuvcQwoIQ=)
2: BkPt0aJALr6XVU6twrxQRhczZl4.roa (hash: GquW1GHGVn0JJFYtKkWU3g1jrNnF5g+2QT4CBc2mNJo=)
3: CT-3l0p9gg6VPqpkvwK6-YeB6pE.roa (hash: RUIJZLk9xg0lGoyDdhD+bJMX1WkdWP7lO6yMUzIdGIw=)
4: QE0murogrnfrhBNI-lIB055tOnQ.roa (hash: Ksxv7cylSwkoYU8exidDycgsWvNKpl/+njghNlj/jds=)
5: XgCZLSw672Y4fHLKF3VdR-oVpqY.roa (hash: ZVPJim/tPagRJuy806SzJxw1pNpmAJ8WphC4x+fYVdY=)
6: dPQfoA35Gpb11fSOLi6nPVp7H2I.roa (hash: X2zxEmCkV2bmI4Ai/dqf9r0pDpMKOTmxsA77tOPqEAo=)
7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: 9+/ziu6F1RFqFkh7+u3Uabz1Q8QHb2ynikj6bI6hTbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9f:04:9c:d2:c9:30:c1:1f:61:c1:79:43:d2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=e49e3ff3f8cb69fc662e915eda6645b5a58e610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:0e:77:5b:45:cb:83:9d:70:c0:45:2b:32:
19:28:0e:52:cc:73:f5:4c:8e:74:22:41:8b:4d:71:
88:1c:17:f3:42:f1:5c:ad:77:68:63:fa:2a:ee:d3:
d4:32:0f:51:d1:cf:de:1b:3a:3b:c5:f5:d7:45:d0:
74:34:a3:1e:c0:73:b9:f3:57:aa:27:97:84:14:7b:
f3:1c:37:65:0d:82:a2:b7:f9:93:2c:00:66:79:29:
20:77:03:4b:f6:47:d6:c2:c5:c2:c3:43:6a:c6:8a:
b6:2e:f1:8f:ca:e5:66:9f:d1:43:d2:c7:a1:42:a5:
3d:a1:33:a9:f7:28:db:50:48:3f:0c:c6:46:a5:0f:
79:bb:7a:0e:d5:94:78:7c:b6:f9:7e:c5:5c:fa:e6:
9a:07:2e:27:7e:38:62:67:d5:94:8c:6e:b5:b6:27:
90:a4:bb:e0:41:66:f5:7f:eb:b8:cd:69:2e:f9:cd:
77:46:a9:52:c1:80:b9:f4:f0:b2:d0:e2:cc:93:e1:
ee:24:71:0c:52:2a:dd:a9:02:27:ba:4e:43:5c:f3:
a0:35:c6:b6:e0:bd:58:d6:13:db:f9:dc:9f:87:c1:
5f:45:a2:0e:af:e1:87:fb:b2:0e:4c:b9:75:18:d5:
5c:53:2b:63:5c:88:0a:f3:4c:4c:69:da:7b:3d:c8:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9E:3F:F3:F8:CB:69:FC:66:2E:91:5E:DA:66:45:B5:A5:8E:61:0E
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:65:57:20:f5:a6:a0:e0:7b:6d:8e:8e:6c:e7:3a:f8:09:4b:
7b:de:89:c3:76:0d:80:68:2d:34:74:87:59:95:ec:72:a0:33:
98:95:8b:be:e7:d4:de:61:e5:5a:87:49:b6:3c:88:e6:08:f0:
e9:5f:06:84:cd:39:4d:af:88:4b:29:66:cc:8b:ad:21:ee:b4:
f3:3b:db:5c:0f:e9:a1:54:e8:55:2c:25:91:83:96:d2:51:11:
42:8e:de:44:18:e5:ca:14:11:28:80:35:ce:fd:4c:4e:ff:51:
14:fb:01:5f:f8:c1:06:cf:66:c6:f5:a4:61:e6:be:e6:54:d3:
6f:f8:68:75:48:48:6f:c0:ca:cc:b9:b5:7b:f9:eb:89:1c:34:
cf:51:04:ba:be:60:30:ca:9e:1f:1c:ad:c5:3e:20:37:80:bd:
3f:01:55:42:ae:0a:d3:96:50:44:03:2e:53:c8:d3:29:48:38:
4b:e9:6e:cc:24:65:19:6a:92:45:7c:f6:39:95:50:7e:73:de:
1a:fb:08:00:4b:2f:ac:00:71:44:e7:a8:6e:b3:df:37:77:a5:
7d:67:f3:31:72:49:26:cc:f9:a8:d7:00:00:9b:10:08:c1:4b:
23:81:5c:0e:d1:60:90:08:94:d4:ef:9e:e4:94:82:5c:59:04:
9b:ca:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:32 2025 by rpki-client