Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: pFQ1C8A/6/3kbll55SPVPjS+aFpRw4+FvjYOJZBXMA4=
Subject key identifier: 42:82:5A:56:88:BB:5C:01:A7:4C:D7:66:42:02:82:4D:C6:00:5C:BD
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 0194BC04BF8BE7F43F213624685521711A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: /EIVSycAi+FRSpm8JD9JkDI71sSIicRYDPpIt4xZv2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bf:8b:e7:f4:3f:21:36:24:68:55:21:71:1a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=42825a5688bb5c01a74cd7664202824dc6005cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:95:da:91:e7:14:1b:8c:88:c1:4c:fb:64:
16:f5:c4:d6:6f:8b:78:2d:65:4f:5a:81:82:e0:fb:
ff:14:94:47:cb:15:ca:32:a7:34:db:04:8e:73:87:
f0:be:c0:66:20:df:26:1d:e6:bb:c3:6f:5f:85:45:
c5:b3:7b:b1:19:de:c8:d8:51:1f:b6:bc:53:03:3c:
b5:80:00:40:df:bc:32:e9:58:4a:33:1a:40:31:a0:
be:ea:d5:27:85:1f:52:60:8b:c2:be:db:a9:a5:73:
74:dd:44:dd:39:e1:7d:8c:c8:de:ac:99:f9:70:df:
ca:79:74:7d:fd:d3:e9:4d:bb:bc:46:9a:de:59:14:
df:1c:90:19:76:10:9f:da:89:1f:e0:94:d3:08:54:
56:da:0e:99:b4:ad:ce:60:52:32:40:21:47:bd:3c:
60:8b:ff:a8:b2:43:2f:91:54:c4:c2:e5:19:48:76:
c9:83:31:c3:13:b3:d1:a8:45:07:1b:d8:30:98:6c:
89:6b:97:31:11:0a:c0:90:de:06:45:03:8a:74:8d:
61:a1:2f:23:dd:22:12:a0:f1:6c:b9:6f:f0:25:b2:
c5:2b:e2:a9:a2:02:94:8b:85:99:1d:a9:16:e4:df:
cf:14:d1:84:46:1e:d9:93:53:11:22:d7:97:d2:6a:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:5A:56:88:BB:5C:01:A7:4C:D7:66:42:02:82:4D:C6:00:5C:BD
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:61:0e:ce:d0:d3:28:7e:b2:db:e3:aa:89:98:64:ef:7c:62:
eb:5c:ec:32:6f:68:28:32:46:3c:ad:a7:d1:05:95:a1:84:70:
8d:2c:40:32:bf:fb:5f:1c:ce:10:c7:66:dc:18:e9:3a:57:9a:
01:f4:44:65:f2:b7:75:41:44:db:39:b3:21:d9:a2:2e:98:e2:
ee:c9:fb:35:87:ee:a2:16:1f:9a:3f:ff:05:23:19:5c:ae:0c:
9f:31:2b:ae:cb:ee:7b:31:0d:cc:a3:68:3e:a7:e4:11:9f:26:
1b:70:ab:de:7e:ef:e7:ed:c7:d4:55:97:01:f5:6d:21:86:ed:
8b:2d:9d:32:52:de:18:27:b7:fe:93:d7:b3:40:49:70:d2:03:
3b:8a:17:ef:8b:b3:31:db:d0:6d:94:8b:db:2d:bf:e5:8c:d9:
41:dd:6e:46:d8:66:44:51:49:c5:50:ae:ce:87:33:88:33:91:
fe:bb:f0:36:8e:7a:c5:94:6e:98:37:9f:fd:1d:ff:3f:0f:b8:
af:cd:ba:5d:fa:32:53:24:03:37:8b:83:41:ab:d2:d2:e5:5b:
d3:21:7a:b8:46:5d:c1:95:9e:8d:2d:b0:74:0b:43:41:8c:f5:
dc:01:92:94:13:02:4b:43:6e:ee:6f:a3:3c:5c:ff:97:b1:dc:
ca:31:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:35 2025 by rpki-client