Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: afgpARNQvTlObm8DvtYOnKi9rZwRtFNHB1cvx8WK6Zo=
Subject key identifier: C4:28:B3:4C:79:FB:0E:72:17:DF:29:0A:CF:4B:BB:3C:80:E8:E6:7E
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 0194BCAA2078A396D291693A188D59266D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 124C
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: uX7GBV7zJWhf4i05RytAE4Rd5TSS9kajK/8l4uMAf38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:20:78:a3:96:d2:91:69:3a:18:8d:59:26:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=c428b34c79fb0e7217df290acf4bbb3c80e8e67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:56:61:79:85:db:ed:40:96:65:63:92:ef:
db:46:61:6d:f7:7b:0c:e1:d2:69:9e:42:6a:0a:83:
4b:cf:4c:db:76:d7:11:2d:c2:24:b8:54:cf:56:63:
60:29:65:4e:db:f3:c0:6e:94:5c:90:30:41:93:8b:
14:e9:06:df:7e:1e:f0:75:8d:67:76:ab:be:a3:7f:
1e:4d:7b:8e:f7:5f:ad:ef:73:14:23:89:6e:c7:af:
f8:56:70:3d:d5:79:fb:bf:c9:44:72:2f:05:e0:b1:
f2:c8:99:93:86:ba:17:5e:bb:73:74:c5:49:2e:34:
df:be:92:98:b9:94:61:64:7d:0d:5f:e4:42:c9:77:
47:a9:d8:97:8d:a6:40:76:bb:eb:38:54:5e:aa:61:
19:5c:9d:71:f8:f1:f4:1b:cd:28:b1:69:5e:e1:b5:
ea:04:ba:bd:e8:e3:63:0c:ae:26:45:b4:47:67:a8:
98:a1:07:27:d0:eb:5d:6b:a0:3c:cd:56:5d:7f:ca:
88:a8:14:34:70:5e:7c:6f:9e:71:8f:d6:e0:fb:eb:
73:44:aa:e5:fd:87:65:19:e6:57:39:50:48:24:69:
51:38:5c:e1:47:7d:d0:70:50:eb:c5:e2:c2:e5:67:
45:f8:32:3f:9c:8c:78:e3:29:13:4b:12:73:85:ee:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:28:B3:4C:79:FB:0E:72:17:DF:29:0A:CF:4B:BB:3C:80:E8:E6:7E
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1e:76:2b:41:8b:df:0e:d6:69:d9:b2:c1:a9:e5:28:b6:c3:
f6:ed:57:43:99:f5:68:83:a5:3d:35:e0:c5:00:05:95:8b:11:
7f:f1:ee:90:1a:0f:e9:d4:44:b1:77:2e:3b:b5:7c:87:45:e2:
d9:75:0d:87:87:d9:d6:6e:37:8c:8f:ac:ce:5d:1c:d6:e9:07:
86:be:46:17:41:19:63:5f:db:57:8a:81:ba:18:28:29:34:6f:
97:ab:48:fc:6d:b3:8d:92:ea:fc:9f:5b:28:33:e4:0a:1c:c0:
b2:ad:ef:84:08:48:22:25:6e:72:ca:6d:7a:75:f1:3f:a6:2a:
8a:38:f6:26:8c:90:22:a5:79:36:5f:9b:f9:54:7a:25:4c:49:
76:2c:7a:00:0f:f7:85:aa:0f:1b:60:08:54:01:91:28:6a:8a:
c3:03:ef:cc:f7:a2:6f:0a:c7:cc:1f:d5:80:30:1b:d9:55:cd:
a5:3d:4c:af:c0:70:d8:b7:1b:13:e7:cb:86:8b:f0:29:0f:2e:
96:f5:31:9c:41:24:59:24:fe:38:85:5a:cc:0c:e4:8c:05:d9:
d4:08:be:bd:76:ac:1b:bb:d6:17:f7:d9:c0:05:a9:48:b0:37:
39:00:8f:ad:17:ca:4a:63:ab:c5:6f:9a:99:21:e3:19:68:85:
25:47:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:56:05 2025 by rpki-client