Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: WJh6K84Y7TGba+HGo4VYTgVdvvSAd4h9JPhXUnLyew0=
Subject key identifier: F7:6D:7A:5E:30:35:15:02:2E:C6:7C:01:E1:75:EA:76:08:67:68:D2
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 0194BC3C8AF8CE33F472F443249CEB9B68C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1471
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: YrSG8iS4KKWAsBmNwODHiTRKqSg.roa (hash: 1IWZloQMhvNIDdmdcUEOzGMSXHvRkyP4lSKlPzCP3W8=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: QOSkfrNwdT/uRwVebXBDK5SUuc+mM3LK+C+TF1zmfIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:f8:ce:33:f4:72:f4:43:24:9c:eb:9b:68:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=f76d7a5e303515022ec67c01e175ea76086768d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:4b:68:67:5d:47:79:31:f9:0c:33:2f:c9:
83:db:5a:20:41:82:e6:b4:5c:cd:98:16:fb:60:ac:
cb:70:d0:4a:9c:40:d8:10:db:29:d9:d9:32:8a:6d:
33:fc:6a:41:69:48:0e:b5:c0:dc:28:f0:6c:bb:bb:
9c:01:52:3b:df:17:7b:9a:6d:63:89:2d:3c:51:02:
6c:cc:0c:9b:49:4a:b6:43:f2:f4:7a:01:61:8d:90:
33:1c:e2:85:2f:af:5e:ef:38:9f:82:eb:93:bd:75:
3a:7a:2e:0e:61:24:66:92:39:95:67:d9:66:10:e6:
fb:78:ce:49:0e:42:d1:ec:49:56:3d:bb:49:eb:e9:
68:c6:6e:a0:a2:a6:5d:8d:8b:b0:04:a4:89:77:0a:
d5:0a:f7:44:84:b2:2c:16:db:6e:7a:85:a5:87:f3:
a0:70:86:99:36:d8:d8:57:f9:08:54:30:39:ec:91:
cf:7f:3f:7d:51:79:b5:33:d4:70:39:b9:e0:aa:0a:
e2:d5:a5:5c:11:12:bb:d3:e0:69:ef:63:9e:40:9a:
0d:19:04:6e:66:3c:d9:b6:89:70:f9:50:a5:37:8a:
5f:71:ce:57:96:36:c6:60:f7:0f:cc:2a:d6:7e:2c:
44:71:2d:d4:62:00:cc:c6:42:73:9e:8b:8d:ac:94:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6D:7A:5E:30:35:15:02:2E:C6:7C:01:E1:75:EA:76:08:67:68:D2
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6f:c0:a9:ac:1d:0f:39:fe:f5:86:82:cf:ed:8b:29:87:e4:
72:e8:94:55:bc:b4:98:c8:19:60:95:58:19:a9:43:25:a7:a6:
cf:3d:6e:18:df:d0:ca:4d:15:30:b5:78:ed:82:d9:29:11:62:
89:b4:8b:97:fc:54:28:74:e0:db:ff:9a:31:77:a9:e5:3c:7d:
3e:38:64:0a:8c:5f:69:85:1c:26:63:b7:6d:e5:49:78:6a:c6:
08:43:6a:27:6e:eb:96:04:92:70:1a:b3:60:3e:00:16:87:64:
b5:6a:6a:a0:f7:1e:38:1e:95:a6:a5:28:3a:3d:a5:90:ea:2d:
1d:81:27:da:0f:49:ec:e6:ac:38:e9:31:87:e2:4a:8b:83:f0:
cb:5d:8b:a8:4c:20:2c:58:ab:09:c8:d3:52:c4:d4:e8:95:eb:
d8:b4:47:4d:1f:d1:c9:47:8a:22:d4:9b:ea:ab:db:bf:25:78:
47:a8:88:d4:75:4a:c4:d5:e6:58:13:d4:5b:8c:74:34:be:6f:
c0:13:f1:1e:f1:24:8b:5d:65:b1:e2:ac:fe:a8:3a:c2:28:54:
cf:28:ed:f9:41:1c:ab:f0:cc:cf:3b:40:6b:2c:1b:0f:af:05:
5c:82:c1:68:67:2a:b6:1b:64:61:11:1b:03:ea:6e:3e:12:64:
ee:37:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:10:46 2025 by rpki-client