Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: jfj5PLOp5Gf9YIt8g15f+yYsfzfbuOwwNuX9E8b/Eik=
Subject key identifier: 5F:8B:A0:D1:C6:86:A8:0A:F9:D8:1F:DF:C6:AB:04:4A:63:9B:D0:82
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 0194BC3C9FDCE3880020792D3300D25714AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=)
2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: tuosx4BAzHw+qQkY/WOrCo0Roru+azDbtFgnT+LPa08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9f:dc:e3:88:00:20:79:2d:33:00:d2:57:14:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=5f8ba0d1c686a80af9d81fdfc6ab044a639bd082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:6b:c7:1c:5c:00:25:fd:ec:ba:3e:22:87:
9a:8d:59:4c:19:4f:ef:92:79:1b:d8:09:fd:87:20:
51:6f:35:2c:01:0d:a9:4e:ff:87:fb:4d:12:ae:27:
98:b7:1c:f6:41:bf:9d:2b:7a:02:46:3c:85:a4:1d:
d3:de:3d:8a:77:9d:c9:58:5c:94:41:8f:55:b1:47:
5f:ac:83:4f:d7:ff:74:8b:77:b5:75:f7:c9:0c:66:
06:8b:e1:6d:c1:20:46:a0:62:bb:0e:21:3c:cd:a2:
db:ae:5c:72:66:38:a3:15:34:68:01:10:68:3b:41:
c7:7c:04:7c:1a:e2:61:fa:d0:ee:bd:c9:76:8e:ed:
69:fa:71:06:f3:98:60:23:e9:40:2b:e8:37:55:75:
0c:6b:56:65:6a:c0:21:01:a7:86:d7:9f:44:e4:6a:
4d:d0:0c:e6:a6:ad:1c:dd:00:20:52:75:56:50:98:
6e:96:eb:85:96:c0:16:67:96:b9:08:0e:f3:d5:c7:
8c:1f:4e:41:79:3c:71:46:f4:de:e8:bb:14:b5:4c:
e0:3f:bd:b0:8b:17:47:25:43:2f:54:d1:68:9f:dd:
b9:2b:5d:26:de:58:e0:94:a8:9d:a7:1b:a1:d5:61:
cc:af:22:72:b4:cf:b8:e0:be:bb:e5:eb:99:82:1b:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8B:A0:D1:C6:86:A8:0A:F9:D8:1F:DF:C6:AB:04:4A:63:9B:D0:82
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:48:f7:d7:b0:41:19:07:5b:43:31:63:6a:86:de:12:c6:33:
10:c8:7f:81:48:e2:f7:23:24:ee:82:29:2e:20:a4:5b:d6:a7:
63:d9:65:f9:a6:4a:fe:a1:24:9d:9c:10:74:ee:0a:e3:71:82:
d7:f4:94:8c:fa:32:7a:59:5b:57:4d:98:1c:91:4b:10:c5:80:
8e:8f:f2:76:d9:0f:99:07:ea:01:e2:38:11:23:0f:ae:c9:78:
83:69:7a:62:9f:10:78:20:6e:e1:e7:2a:96:92:26:96:34:81:
38:4c:4b:5c:6f:e1:23:2f:a7:97:17:92:7c:a4:65:dd:a5:81:
3f:16:6b:68:4e:ae:fc:2e:54:57:93:d4:be:db:12:e9:c4:02:
98:63:bc:b0:1c:56:f9:00:ab:75:5b:c0:e0:f1:fb:8a:ed:0c:
4a:20:96:a7:a7:f5:df:96:e5:00:03:15:bc:97:9e:fe:96:18:
df:27:b9:b3:73:a1:8d:2a:36:77:53:9b:a2:91:a0:6b:ce:99:
ba:5a:2d:f8:b5:3f:6c:ec:a5:0a:f5:d3:0f:28:f7:0a:cf:5e:
a9:e4:71:d2:bc:61:82:e8:c4:b5:ed:1d:45:a8:e8:f1:5b:07:
f5:1f:96:85:1f:4f:55:c8:ac:c1:39:3c:94:ff:1b:43:ae:ee:
23:07:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:23 2025 by rpki-client