Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: gE52eKUQCmgcbvF6tMV4LQQPEBwCBTzbL8u7oTBBglI=
Subject key identifier: 9C:6E:02:69:D4:AC:40:83:EC:C5:EA:1F:FA:88:37:7C:19:51:60:6A
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 0194BC730F66B2BEB3301D69E1B191E9D69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: UiOJxGxLj55iCl7qYf9ZMvJiZaeU4g/NEufbfslGYTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:66:b2:be:b3:30:1d:69:e1:b1:91:e9:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=9c6e0269d4ac4083ecc5ea1ffa88377c1951606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:3f:08:3e:62:28:0d:7e:dd:ab:01:ec:36:
1a:d4:64:8e:1d:16:dd:b5:76:d8:59:62:b7:cf:34:
29:e0:d0:d6:f9:d3:f9:51:95:84:1e:98:fa:55:db:
57:cc:cf:07:bd:7f:e3:9a:c3:09:b2:a7:7b:17:d0:
9b:82:7c:b4:64:5a:ef:57:ef:35:46:7e:fa:44:3e:
eb:13:19:4b:81:d7:e6:43:35:85:3f:98:67:5a:9e:
63:85:cb:e3:05:6f:51:15:d6:8e:7c:63:62:0a:93:
3b:72:01:4d:05:cf:a6:ad:3e:05:42:75:e0:20:26:
f2:da:cd:be:b9:85:b6:9f:33:15:30:fe:0b:f8:88:
22:16:b3:92:c3:5a:f7:f1:3a:7e:8d:52:9f:69:42:
e4:41:c2:79:86:62:08:a2:47:e6:bc:28:cc:2d:de:
67:ae:e8:ef:ca:c6:9e:18:42:d0:0c:c1:ae:99:c4:
b8:a0:97:00:06:26:67:29:d7:35:47:3d:12:6e:40:
64:7a:2d:57:28:1c:6b:b5:75:79:59:50:57:2c:2a:
be:8f:cb:54:b7:16:28:e6:f9:e1:f8:d0:c4:8a:52:
fb:65:d7:30:1b:80:2e:53:ce:46:a1:72:bc:84:bb:
95:08:75:ef:85:43:41:44:c3:40:0c:3e:3a:3c:ba:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:02:69:D4:AC:40:83:EC:C5:EA:1F:FA:88:37:7C:19:51:60:6A
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d8:93:88:d2:20:87:09:3f:a8:42:dd:93:4a:ad:71:fa:1b:
7e:7a:b0:b5:35:b4:8a:a6:b1:00:f7:3d:3f:a4:6d:c2:7c:8a:
08:4d:6a:d3:11:3d:1c:7a:ec:aa:2c:01:98:c2:c8:b0:12:88:
6b:61:6f:b4:15:79:e4:41:e2:95:d1:6c:9c:5f:46:49:65:21:
ba:81:22:4b:7a:eb:45:71:a8:55:1f:30:59:4f:4b:6b:a8:56:
46:68:b7:8a:84:2d:bf:e0:31:f5:a5:97:95:c5:01:f9:da:85:
23:ec:8d:2a:ed:2b:8c:77:45:03:ec:27:1d:3e:8d:be:66:db:
05:23:48:a0:88:11:8c:09:08:3a:85:cd:f6:9b:42:bf:94:5a:
3f:e3:02:89:21:c7:c7:2d:2d:37:77:9c:6a:76:72:24:25:43:
35:e4:15:00:2a:0c:04:b5:d5:57:f9:c5:75:c5:19:5b:a1:70:
b9:2a:1e:c2:ed:6e:a3:52:b1:f3:c1:6f:6d:8a:b4:44:42:86:
e3:a0:5d:aa:5c:26:00:4f:51:6d:d3:13:90:a0:d5:f6:0f:ac:
fa:53:55:2e:79:ba:01:65:2c:85:7f:e7:f9:b4:85:5f:f0:a0:
a3:8b:70:47:3b:30:23:ac:a2:e0:36:22:23:aa:4a:1d:12:ca:
8d:c5:7d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:52 2025 by rpki-client