Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: P1WKQAP6N4Zfkqe8pLVH82x0ZZ2hqss28qJx56bmjdk=
Subject key identifier: AC:8A:D8:A5:5C:3C:59:1B:84:D7:1F:1E:DB:4D:48:5E:14:2E:A9:3D
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 0194BD17950DE0F6529C3EBDF6C7846DF1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=)
2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: mwXfU4inGeOpsNeXbMNy3ruiiZBmW5+VLifsFsbi1iM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:95:0d:e0:f6:52:9c:3e:bd:f6:c7:84:6d:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=ac8ad8a55c3c591b84d71f1edb4d485e142ea93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:b4:f1:6c:98:8a:1a:b4:b6:c9:41:a1:c9:
b5:7f:c6:6a:88:09:86:15:8a:ad:b0:98:f2:ed:85:
3f:18:81:3a:fb:02:cb:85:d7:42:c8:36:0f:67:6b:
01:72:22:d4:6c:b4:07:29:b1:f7:dc:36:3c:17:53:
30:1c:aa:f5:b5:f2:b9:04:45:b8:0b:dd:37:ab:11:
c9:49:b2:93:9b:15:7a:f9:10:c6:ef:70:bb:65:a2:
59:f4:77:4a:26:82:1c:5b:ee:4d:c9:9f:e8:d9:e9:
70:2e:0a:90:e1:bb:cd:1c:ef:ea:ba:e0:96:21:e2:
d8:1d:45:3f:a9:c3:99:af:5e:ca:41:1f:95:87:d2:
31:09:6e:c7:a6:42:1f:4d:30:01:b8:da:a0:ce:a7:
a0:af:bf:80:41:e7:9c:69:a3:ee:38:1d:ef:50:7f:
4d:86:60:91:2f:44:16:c3:a3:ee:4d:9d:78:94:cf:
75:c1:34:89:d4:e7:c4:13:55:97:96:a8:d7:16:f2:
2b:39:77:2c:e7:e2:b7:08:47:69:ca:52:4c:75:ef:
7c:32:18:80:55:44:9b:6e:40:da:d3:0a:86:3e:3d:
3c:58:69:c7:e3:aa:28:97:ec:08:d9:5b:ad:3b:f3:
90:d5:0a:85:17:65:d0:65:51:1d:00:51:60:50:d9:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:D8:A5:5C:3C:59:1B:84:D7:1F:1E:DB:4D:48:5E:14:2E:A9:3D
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:09:7a:36:93:e3:c5:21:f4:d8:e7:ac:d3:01:eb:e2:c6:71:
f0:65:61:2f:ae:51:73:19:e0:87:05:c1:63:ab:90:e0:f1:84:
69:01:e8:11:1b:09:35:17:53:77:0f:bd:1f:cd:b0:bf:41:3d:
07:5b:a6:4a:ef:32:5a:f3:99:56:01:91:51:b1:ec:a1:9c:55:
6e:a4:fd:97:fd:35:9e:65:7a:eb:b9:98:41:22:24:17:3a:dd:
9d:bb:52:ef:ce:27:54:91:5e:69:ee:1a:b7:d5:ce:80:8e:0e:
e5:de:36:66:6a:ef:b2:f4:62:7b:17:33:17:78:9a:bd:1a:48:
22:08:e9:a0:4c:72:92:f7:1e:f5:82:f1:d6:15:5c:17:5c:d4:
7e:9f:d8:68:31:52:66:16:76:18:fb:1b:23:9e:60:f0:32:70:
1e:12:b7:a9:e0:28:b8:89:33:f6:b5:fd:a6:97:9e:7c:72:1c:
42:d4:e1:79:ee:90:7a:70:1b:4c:72:b1:08:6a:cb:a8:91:12:
6b:c3:71:70:48:84:8a:93:a3:81:a4:dc:31:4a:e6:39:c5:1a:
c7:e0:b4:84:44:8e:17:27:14:f0:41:f9:82:9e:f7:d7:eb:69:
cd:22:30:3f:0f:d4:a4:63:da:68:f4:b1:9a:f4:77:8e:36:1c:
eb:b7:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:23 2025 by rpki-client