Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier: J3llW0fyngw8ge0CnoXdlfLAbPu3dZLnCXIdaqxcyNE=
Subject key identifier: 40:57:6C:FF:40:CD:60:32:E6:DF:0B:10:1B:61:52:C0:A9:C0:F3:52
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 0194BCE075A213A93AF91524A425B04AD0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: 6U3Xs040zPO-wT1n1ipqEnLqdc0.roa (hash: iVKPeVo4dn6/xoX4wf7rwRU8cdeCDU4NP9VqaFlc7Ic=)
2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: wzaSds+K3xzoIhajd5e6SgcNNiX/RHgd0oWlUDEEK9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:75:a2:13:a9:3a:f9:15:24:a4:25:b0:4a:d0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=40576cff40cd6032e6df0b101b6152c0a9c0f352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:2f:54:12:fe:68:34:b1:82:dc:35:86:b5:
d5:b3:43:d3:e0:b8:0c:d9:d5:f1:69:01:20:7d:6d:
b7:4e:3f:15:37:f9:74:c1:1f:b8:8e:b4:90:fd:f6:
0c:eb:db:67:17:e3:72:d7:3f:42:d6:65:76:4d:dc:
4a:71:74:d7:98:dd:2e:50:4b:5b:27:6d:46:f3:bf:
96:37:af:cc:50:1b:79:a7:35:ed:12:28:53:ca:bc:
18:6c:4c:5b:34:05:e0:69:4c:08:e0:ba:89:af:5a:
3c:24:aa:8d:29:d9:41:a0:de:76:ef:7d:ac:1d:d7:
46:d5:1c:02:0f:f0:56:9e:24:e0:11:9f:71:fd:f5:
fc:f3:87:3a:ec:0d:18:57:3d:c5:27:15:af:81:e8:
09:77:fc:ff:f3:6d:4b:4b:0c:27:9c:e7:63:5e:fd:
ae:1f:4c:7a:96:13:20:8f:a7:ba:60:1c:38:24:07:
c1:2f:05:7c:cf:39:96:f1:79:e7:e2:66:cb:26:ae:
68:90:5c:19:db:51:a9:38:2d:c6:1d:02:d5:8d:80:
21:3f:14:e8:44:9f:3f:e9:80:9e:4d:29:8e:be:c5:
f8:e1:f8:a4:77:a7:f9:ff:99:80:f6:9e:1e:18:81:
4e:d3:77:37:c4:29:ff:48:3a:a5:fe:5f:f9:f1:33:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:57:6C:FF:40:CD:60:32:E6:DF:0B:10:1B:61:52:C0:A9:C0:F3:52
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3f:16:d8:f9:a1:17:cf:d9:4d:7a:25:c2:5b:bd:d2:2a:0b:
82:36:f1:0e:50:59:de:bc:2d:ce:b4:24:65:c6:94:9c:0a:5a:
a7:4b:3e:20:28:9d:53:b3:07:9e:f8:b0:ca:eb:fb:00:c0:c6:
29:9a:a3:97:ea:23:20:fe:3e:c7:3c:d6:86:c5:72:65:78:38:
28:6f:36:03:ce:b7:af:ac:81:56:e2:47:a0:c4:11:4c:e2:de:
82:e7:79:82:e0:7e:38:f3:1b:60:2c:33:3c:09:60:83:0a:17:
fa:c3:78:89:e2:bc:7a:a1:56:f1:b0:99:bb:fa:3e:1f:7b:66:
de:43:25:da:3a:2a:1d:c5:2f:97:0a:84:f5:1a:15:ae:de:28:
52:8d:9d:49:5c:35:9a:1e:9f:4d:13:35:5a:cf:d9:99:0c:42:
53:99:3e:89:3a:81:98:32:60:98:bd:48:91:d7:35:8d:84:2b:
d4:4f:71:45:9b:6f:5b:b5:cc:48:80:c1:1f:d7:05:82:d8:b9:
fd:6b:28:e7:05:8e:a7:c7:42:87:87:94:66:66:95:a3:81:22:
f4:70:d1:34:05:ee:0f:d2:71:3e:f9:e6:b6:b0:77:88:c2:19:
bb:b3:4d:53:df:0b:d7:ff:a4:e5:5b:a3:bf:e2:63:3f:f7:f8:
f7:8d:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:06 2025 by rpki-client