Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: 6YezGEWkcUYrxBuwZMsNOry/LZFbiaSa+GNRbzuuCC8=
Subject key identifier: D2:EC:94:3D:00:CA:C5:C9:FE:C1:07:AD:84:79:82:51:53:D4:C4:05
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 0194BC050CEDD56AE7225D536C40D9494FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: IHhOP/JOVElnBQ6aHQF4swbTqdl2EW7qihTLyXpf8pI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0c:ed:d5:6a:e7:22:5d:53:6c:40:d9:49:4f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=d2ec943d00cac5c9fec107ad8479825153d4c405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:7e:dd:ba:c6:6d:ae:d0:f3:3c:d2:9a:a2:
64:2b:df:53:8d:b8:90:69:97:1d:64:5e:ea:48:cf:
73:87:93:d3:4d:a0:1e:d8:07:39:08:e4:d5:69:45:
59:90:ef:88:be:3a:eb:e2:aa:02:e6:8b:a0:d4:aa:
26:35:ce:b6:c1:ae:63:01:c7:56:71:d0:90:3c:23:
c5:76:3e:09:24:7b:60:3d:3f:b8:35:3d:73:78:9d:
a7:ec:cf:1c:77:21:e9:8e:34:c4:62:81:af:ea:ab:
66:80:b0:11:ae:9c:db:46:e0:a6:10:7c:35:d0:8c:
30:58:76:36:37:f0:32:4e:6c:94:aa:4f:9a:08:f8:
5e:fb:39:2f:19:75:48:89:c5:54:3b:ad:6e:41:27:
fe:c1:cf:2a:2f:fb:b9:75:aa:f4:34:c7:ed:2c:44:
e4:be:05:27:91:6f:98:24:f8:7e:85:2b:74:12:a3:
d4:fb:05:35:6c:2d:51:fa:4d:94:be:1c:27:47:32:
8e:f1:e8:7a:7e:7c:de:e7:39:49:e8:22:dd:75:f1:
42:f5:21:93:c0:34:35:9d:70:e7:97:45:fa:5e:dd:
8d:93:32:2f:0b:9b:7e:a9:18:61:42:a0:f0:b0:19:
6f:4a:e8:6a:e6:43:31:f8:1b:fc:61:7c:12:ca:05:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EC:94:3D:00:CA:C5:C9:FE:C1:07:AD:84:79:82:51:53:D4:C4:05
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:77:a9:e7:4c:86:30:59:5c:4c:3e:4d:03:04:b3:97:ba:b9:
d5:35:ad:f7:b4:1e:bf:a7:87:60:17:26:79:61:21:fb:89:8a:
b4:8d:0a:ff:71:9c:95:76:31:99:bd:9b:56:97:d5:5e:b5:66:
b9:86:80:50:0e:4f:fd:f1:c1:52:01:38:3a:f1:66:9c:85:a4:
53:27:99:ce:c4:13:2a:03:d4:18:c6:32:89:97:a6:a6:46:99:
76:e2:86:b8:06:aa:9a:42:50:69:45:61:64:29:cb:76:03:93:
18:18:f4:b1:24:dd:35:26:7d:65:77:ea:fa:db:a1:05:b2:b9:
4f:e6:cc:ae:28:0f:41:d1:d5:0f:9a:0d:fa:35:42:e9:38:ab:
bf:30:57:1b:77:ce:61:a1:d7:0d:20:f0:08:71:8c:d4:78:47:
c4:2e:43:a8:ca:54:d5:ff:e4:49:95:d0:3e:57:09:86:f7:94:
64:69:cf:46:00:d1:fb:f8:2d:e6:ca:9a:99:42:44:4f:49:9e:
ae:66:b4:c2:e4:ee:09:df:43:0c:36:f6:9a:67:b4:24:ac:6e:
e4:76:73:f6:b0:21:81:89:12:54:1d:a6:5b:aa:e1:32:0e:5f:
2a:0b:44:1d:f2:57:15:77:46:e5:6f:a9:2b:35:85:80:e6:57:
39:33:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:33 2025 by rpki-client