Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier: pP3ACUf65ZgUiELo/zuaPnbHB8bboexz9Uxb5Mz9y4g=
Subject key identifier: 93:4A:C0:6E:D8:31:D9:BA:90:AF:A9:7D:38:40:97:7E:D3:45:BA:63
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 0194BC050AF585C1316488382D2E9E101E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: aJAD7LFAueTLRVNm3RvPqaLMeYzuMXxUHrWaBfEYrMk=)
2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:f5:85:c1:31:64:88:38:2d:2e:9e:10:1e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=934ac06ed831d9ba90afa97d3840977ed345ba63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:3f:c8:91:ed:6c:05:2d:c0:1e:27:1c:bc:
c8:58:88:59:63:3b:64:d0:25:46:b5:18:14:72:4c:
64:2f:08:fb:c3:37:3a:67:0c:e3:54:b1:10:2a:a8:
a5:ab:cc:eb:15:64:80:3e:8e:47:c4:2c:9c:11:f7:
75:b4:91:c6:10:88:ee:95:8d:55:ec:cf:ac:c6:eb:
83:dc:06:6e:6a:ce:1d:4e:fd:1d:02:2e:2d:eb:4a:
b3:0a:25:6e:41:4c:8a:59:c6:73:44:d7:35:6d:a4:
b7:be:73:41:c4:4f:f4:96:8f:16:f2:74:85:dd:a5:
09:23:28:3c:75:1f:51:6e:15:ea:e8:22:25:9c:e1:
54:f0:6d:e3:ac:cc:e6:6a:ac:f7:25:2d:ff:80:33:
6d:c0:9f:37:9f:72:be:73:e9:1a:f9:cb:63:0d:ae:
11:3b:3a:b3:b0:3d:e6:d9:52:a2:04:04:03:a9:72:
3c:d9:b8:8e:7d:14:e6:39:65:8f:3e:08:9f:c0:3e:
f7:40:60:f5:f5:91:37:6a:40:eb:85:9f:51:49:2b:
db:a8:55:49:b3:53:32:c0:eb:5d:8b:bd:a8:a0:f8:
38:da:3b:69:a2:20:5a:a5:f2:a5:9e:9a:ff:df:c4:
8d:20:0d:9c:d0:2c:80:8f:3c:23:ae:2e:68:6c:51:
95:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:C0:6E:D8:31:D9:BA:90:AF:A9:7D:38:40:97:7E:D3:45:BA:63
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:38:4d:4c:a9:b5:15:86:75:f7:02:e2:a7:32:1f:14:3e:14:
c5:1f:0f:cf:87:b1:8a:1e:07:ef:e1:c3:3e:ed:68:3e:5f:c4:
a5:02:ac:72:cd:17:4b:6f:d8:62:7a:cb:24:91:0d:f1:2a:29:
b9:dd:94:2d:70:b1:59:47:be:86:6f:48:91:13:75:b3:fd:93:
88:f3:af:2d:b7:c3:7d:bb:0d:0e:ea:77:99:86:67:0f:d6:95:
0d:59:97:b1:5a:d7:bb:9a:67:5a:b6:64:93:9e:15:d7:f8:30:
09:4c:f8:cb:6f:cd:04:fe:ce:6a:54:a2:20:20:ac:ee:58:51:
3c:14:08:04:15:f4:1d:72:da:93:3a:e4:e2:30:b4:5e:a2:8a:
36:3c:1d:2a:65:aa:d9:b6:fb:a9:7b:0c:7b:0e:05:bc:60:69:
c5:73:98:1f:1b:c3:c8:20:df:6b:26:c8:25:99:d5:8a:89:8b:
af:f8:34:e0:04:03:dd:3c:7a:33:c5:5a:58:00:83:75:e9:2a:
e1:94:54:4d:1c:b3:ed:80:7e:8c:be:c7:a0:19:56:84:fc:29:
36:3a:95:6e:33:0a:88:dd:38:96:a8:da:d4:dd:8e:87:05:d5:
2c:93:8c:9e:c2:36:13:7e:a9:ff:5f:f9:83:4b:bf:b5:2b:80:
5b:0d:2d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:41 2025 by rpki-client