Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: 2E3oheHLtty/zICCZZVjjEAzzHr+TNkcn/Pqop+At4s=
Subject key identifier: DD:11:5D:D5:77:EB:7F:B8:F5:59:19:A6:63:D3:30:EA:4F:DA:3C:73
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 0194BC3BFC6746B45910CA665220F08E576F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: s8m/bAeaBH9niNIrMSyxYoBpBoV+GAkGh3S0ZayUsSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:67:46:b4:59:10:ca:66:52:20:f0:8e:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=dd115dd577eb7fb8f55919a663d330ea4fda3c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:94:f8:31:a3:7b:75:00:73:22:11:f8:59:
06:7b:fb:ef:a7:cf:df:41:13:a4:cb:6b:04:c3:8e:
15:85:c6:eb:68:7d:84:fb:8d:c3:38:e9:e9:e4:dc:
e4:f6:44:8e:87:89:94:f5:94:bd:da:e2:85:51:22:
10:59:98:2b:2a:86:42:ba:7e:12:84:55:5e:84:b9:
46:1e:c1:be:f3:d2:f7:95:1b:16:81:e7:4d:5f:0d:
00:61:2d:4e:19:94:e2:73:a3:e0:41:f6:ce:83:f4:
2f:4f:e9:ad:5d:63:6b:18:5d:f1:ef:89:95:cc:b3:
f2:37:0d:d2:ce:ed:02:f8:91:2d:2c:40:12:6c:0a:
2a:f3:a7:39:e2:e7:68:df:58:eb:64:31:e3:f8:fc:
5b:d1:ce:21:27:9d:19:05:11:e0:7b:85:4f:48:75:
4f:b9:75:f9:b9:a4:10:79:99:2e:3f:bc:a1:99:19:
a9:d0:63:5f:c5:fa:4e:a7:97:76:48:51:e9:c2:71:
ce:82:91:dd:58:46:3a:c4:2a:fc:fb:0c:43:55:74:
0a:ae:84:3c:12:2a:98:33:95:14:6f:b8:3e:da:5e:
5b:5e:58:d6:fc:46:13:c5:45:52:9f:40:8b:6a:2f:
81:0b:ab:91:f8:d1:d7:c3:e6:2c:9a:7c:34:2a:be:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:11:5D:D5:77:EB:7F:B8:F5:59:19:A6:63:D3:30:EA:4F:DA:3C:73
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:58:79:fc:b8:6b:4b:c9:75:c6:15:eb:65:b4:ca:45:12:85:
4b:bf:26:87:5e:31:c2:be:3d:80:fd:5b:70:b5:d0:53:a1:b9:
97:bf:2e:52:5e:e6:d8:0c:91:d1:40:c6:d0:75:5b:0a:ea:cf:
0c:2d:d4:ac:a9:9c:ed:6f:39:c2:dc:d8:82:43:73:f3:1c:59:
c5:34:01:d9:88:e4:ea:fd:b6:36:2b:93:0d:20:73:49:f8:0c:
8b:65:39:d0:ae:e4:0c:f8:07:ca:3c:2b:c0:67:a9:97:d2:8f:
af:f5:8e:2b:3a:95:db:99:b0:ee:86:8b:af:f2:67:5d:da:ba:
75:fa:23:14:45:7b:79:fe:b8:c3:65:84:3a:6a:e5:88:71:69:
9a:f7:33:bd:df:18:b0:bd:d6:ba:83:32:d9:8c:0a:93:78:46:
ce:1c:31:1f:fd:96:b8:01:3c:ed:e0:00:3b:0f:bb:16:73:b3:
23:1b:a9:a8:8f:4d:c0:e0:ac:f8:0f:68:67:4b:7b:bf:fb:2e:
82:3e:b8:4b:b2:53:41:29:5b:5a:b1:1c:79:72:6b:75:9c:4f:
64:13:21:71:8c:ef:be:4e:9e:ac:19:1e:23:b0:35:cb:3a:4e:
8a:e1:26:9b:44:0e:db:0e:d1:77:42:b8:74:92:e7:9f:2f:ce:
67:2e:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:04 2025 by rpki-client