Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier: FE7yaM37jMjT0/254PI44BhOQ+Lfz/sklnKQqhHtVtw=
Subject key identifier: 90:02:DA:EF:2C:42:B7:20:F9:B0:6D:51:63:84:13:CF:9A:38:AF:C4
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial: 0194BCE05E2DC6F0D88DD4A5B310C84956FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: PAu794NhVgoGNZdRg43v3q/yRRVVdNoDLzUvhlJf9GM=)
2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5e:2d:c6:f0:d8:8d:d4:a5:b3:10:c8:49:56:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=9002daef2c42b720f9b06d51638413cf9a38afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:bd:f1:b3:34:0c:a1:97:4b:eb:29:09:ab:
35:40:f1:24:76:6f:e2:96:3d:c3:64:2f:63:d8:41:
78:37:6c:aa:a3:cb:6c:47:59:12:ab:f2:3a:ac:f7:
43:f0:ad:2c:3d:51:db:34:1a:d2:5a:8e:7e:f4:e1:
be:a4:6e:67:55:a2:37:64:47:06:5f:c8:ba:4e:a9:
39:e8:2b:e5:b1:1e:8c:7d:a1:37:86:f0:1a:36:74:
b8:39:15:3a:7f:2c:20:b5:b6:7e:12:f4:b9:61:b5:
24:2e:94:20:a0:e2:b2:d2:59:10:fc:dd:0a:b9:c9:
49:e9:bf:b3:c6:77:b3:92:ca:e3:4e:aa:34:b1:b8:
06:75:58:b0:f5:cf:d3:6f:b5:75:9d:64:6a:fa:0a:
f0:fb:50:29:c6:88:2d:0b:ef:e2:33:d4:75:56:49:
da:d1:5d:64:91:2f:c6:52:ac:10:ff:aa:68:49:7e:
ca:9a:70:12:e7:4f:42:eb:be:cb:40:49:08:4f:32:
5d:40:9f:97:6b:51:f8:c3:53:86:e5:40:5b:38:88:
fd:0b:01:0c:7a:0e:77:c9:3a:d5:70:fc:42:0d:d6:
70:df:aa:df:b5:c3:06:3e:cc:aa:d5:0e:d4:bf:42:
84:d8:d7:a4:cb:c2:b5:64:20:b0:58:26:10:45:40:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:DA:EF:2C:42:B7:20:F9:B0:6D:51:63:84:13:CF:9A:38:AF:C4
X509v3 Authority Key Identifier:
keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5a:39:91:be:ff:3e:cf:52:60:1a:4b:57:c8:1c:9a:fe:c0:
dc:6c:dc:88:e5:2b:2e:6b:51:fe:4e:83:40:0b:34:79:83:75:
99:ae:b9:53:42:2f:13:0e:05:55:fd:01:95:d6:59:22:f9:20:
85:27:0d:24:8b:3f:8c:95:27:5b:8c:5f:b7:c9:7d:85:62:8c:
52:14:a6:7a:38:cb:fc:05:4a:58:9f:e8:03:52:50:6e:14:b2:
65:3f:f2:e9:43:ff:27:17:ec:c7:a5:84:51:cf:6e:dc:08:80:
d7:62:2a:fa:73:6b:2f:69:88:ac:86:19:20:f7:65:54:7d:cb:
e1:63:a6:0c:7c:df:70:da:a1:fd:ed:10:9c:fc:90:1a:d5:b6:
1e:bd:a2:91:cd:f0:34:05:4c:5d:75:4a:46:b4:54:5c:cf:e0:
67:f5:cb:8c:9f:79:dc:80:be:9d:4c:01:cb:e1:5d:f7:61:e5:
79:0c:88:58:ef:20:b4:2d:a2:65:02:1a:91:a3:78:1b:ad:22:
b1:0c:37:b2:e8:04:f7:82:40:ef:0e:9e:9d:e4:e9:e7:a3:a6:
fe:ee:6e:d2:6f:ee:7f:22:98:82:9f:e4:e6:b6:20:d4:78:bb:
c2:e1:14:da:0e:db:a2:31:63:2c:e8:41:10:3e:ca:6e:fc:92:
5f:0d:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:28 2025 by rpki-client