Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: RpL8U9C6hrkVwO/43On1SjieQatYUFS4+LOvr1PdimA=
Subject key identifier: 8D:37:C2:12:A8:8D:F8:E7:3A:64:13:2F:AF:8A:40:BB:73:6A:F6:20
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 0194BC3C25DBD0ACBF5EE6C377CF7A084CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 0DA7
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: /v4s1dgeDoIYZXjf5iHzVJUfxRtBsX8cSOTkJtnJ3TA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:25:db:d0:ac:bf:5e:e6:c3:77:cf:7a:08:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=8d37c212a88df8e73a64132faf8a40bb736af620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:60:73:5a:97:d9:e9:01:85:1f:02:5c:83:
4c:8d:a6:82:73:8e:94:4d:09:7a:ba:7c:cf:00:e8:
64:84:bc:6a:bd:58:da:1d:57:2e:4d:26:46:12:ca:
21:f5:e9:f2:00:70:30:9c:71:66:d6:54:26:12:0b:
ac:4a:93:6f:1e:77:ed:f0:44:6c:59:e7:2b:31:66:
6d:24:9f:9f:2e:2e:63:90:c6:2b:a5:19:e0:61:c2:
a4:c3:69:86:1f:e6:94:d1:1f:04:64:61:48:a3:c1:
b5:52:45:f1:c7:54:5b:28:34:ed:34:56:f9:8d:21:
cc:3d:57:bd:20:4c:ac:20:ab:bb:57:ea:35:c6:d1:
8a:82:23:4e:f7:73:68:d4:2b:ab:7c:20:aa:3b:07:
e8:ab:03:37:db:3c:54:72:a6:be:a0:ca:e1:bf:fc:
33:90:3d:cb:27:af:9e:6a:86:6a:26:9d:d3:f3:5b:
77:50:85:ed:00:f8:14:87:b4:ae:8a:ab:94:7c:ce:
34:1e:82:c7:3c:58:f4:d6:36:f2:25:4e:3b:55:2e:
7b:88:a4:e5:6e:99:eb:19:81:dd:9e:96:95:1f:9f:
c1:cb:2a:8c:ea:df:17:ae:d1:a6:c2:ad:6d:ef:09:
8b:03:73:fb:1a:70:c4:7a:83:1e:3d:12:40:76:b1:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:C2:12:A8:8D:F8:E7:3A:64:13:2F:AF:8A:40:BB:73:6A:F6:20
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1d:ab:0c:cb:2b:a4:a1:07:0b:5a:20:d0:4d:fe:32:ec:40:
d4:7b:fa:d8:8c:b5:36:81:4c:34:f6:79:06:fd:a3:a4:09:85:
4f:0b:52:8d:04:15:48:3d:21:95:6f:7a:c8:f4:03:43:d6:0d:
df:d2:59:60:5a:73:9b:59:10:ed:6d:83:23:ef:75:13:93:be:
71:7d:80:f4:fe:69:47:0d:f9:44:bd:cf:c3:f3:ea:2e:77:05:
06:e9:aa:bc:6d:70:09:8a:d6:73:d2:7f:b5:97:67:f4:05:ff:
17:65:6c:e1:8a:77:68:ae:a0:a4:ac:db:8b:b3:10:bd:d3:ce:
11:a0:a5:0e:0f:d2:7f:df:61:cd:4e:b0:97:ad:8a:58:56:1d:
90:41:1f:cc:38:b5:4c:fd:4f:b8:de:ea:56:48:92:73:d3:f7:
72:77:22:03:eb:fa:93:82:c3:29:c1:33:a6:5c:ac:b8:b4:63:
d4:93:d0:74:34:ec:f9:ce:3a:fb:09:e1:a3:33:a5:bc:58:f5:
aa:4b:61:d5:07:e9:61:bf:cb:f4:a7:3c:ed:2b:c4:20:69:3c:
51:8d:aa:84:d7:ae:15:df:13:8f:97:0a:1d:52:6a:65:65:05:
a1:67:63:b6:f2:71:f6:08:8e:5b:41:60:98:c6:9f:c7:1f:40:
70:1c:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:12 2025 by rpki-client