Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: yR6IuNS3IHaPdSRN26Zs77vHxRAE4X8ER94BdDkhpe0=
Subject key identifier: 87:05:3D:26:11:D3:BE:4D:A7:97:BE:05:0F:68:B2:C2:7F:30:BB:2E
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 0194BCAA09E785925E45C1BBF8FE401323AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0AA5
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: /xDDHW/xsPQC8Y+Y7T+ongLTKPbkoU4Pzr4HhJdR5Ss=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:e7:85:92:5e:45:c1:bb:f8:fe:40:13:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=87053d2611d3be4da797be050f68b2c27f30bb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:20:02:b7:e4:16:d7:0e:af:83:3b:a8:68:
e6:36:e6:8e:81:9a:c5:60:e1:d4:5d:d6:04:76:70:
c9:e4:86:95:ac:a4:57:f9:b4:4a:4d:37:84:30:1f:
f9:ce:23:ac:75:64:06:55:77:ee:42:9e:0b:77:b1:
7e:fc:2a:8d:4a:e2:0b:f2:b2:ee:12:d8:5f:c8:4a:
34:01:a2:0f:27:9f:67:93:b5:d1:04:82:82:35:cd:
a4:12:29:2b:f7:05:ff:d4:c6:ca:36:2b:66:b9:bb:
75:b0:e2:a1:3b:80:0a:93:a6:91:e2:e5:12:f5:0c:
04:d6:ae:29:1b:7b:66:82:e0:5c:b1:8b:a7:1b:1d:
10:ad:4e:9e:4a:59:41:4f:bd:e6:a5:38:68:b2:da:
8a:ce:a8:49:43:5e:a6:f4:3c:99:79:0c:f1:d8:61:
7f:fe:f1:52:af:fa:57:3d:32:92:1d:f9:80:dd:d8:
2c:db:e1:95:e4:d3:1d:2a:d6:ef:a7:82:51:4d:a9:
35:e4:5d:56:b4:68:a3:92:ea:58:fb:9d:a9:93:e4:
0f:e7:7d:6a:d4:1d:65:ff:32:c2:d4:34:e5:e7:b2:
9b:8d:fc:9c:2d:9a:41:ba:bd:a8:57:dc:d6:24:f8:
79:75:b4:5a:32:90:00:da:16:47:84:32:4f:4d:8b:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:05:3D:26:11:D3:BE:4D:A7:97:BE:05:0F:68:B2:C2:7F:30:BB:2E
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4f:a7:a2:78:a4:ff:ae:1f:2f:3d:e0:24:2b:5e:02:5b:26:
63:50:6b:bf:97:8e:74:41:fb:f2:f2:c8:6b:19:07:00:0c:28:
9c:65:72:e7:e6:de:c0:39:85:70:ea:ba:59:7c:c1:84:fc:86:
43:80:e5:7b:1c:41:c9:17:08:ef:5b:e6:aa:da:cd:15:33:b0:
af:de:a0:30:bc:6b:af:ab:f5:4e:db:e5:6c:be:f8:7a:d9:c6:
6e:85:39:b6:cb:4a:bb:e1:fb:4b:d8:1a:37:ab:48:26:8a:d7:
61:5f:ec:d1:fc:77:44:84:24:f9:c2:81:83:52:1f:89:91:97:
ed:07:99:f7:5e:39:ed:ab:00:01:59:9a:2f:fa:8d:03:67:d9:
aa:6a:da:07:63:2d:aa:95:7d:ab:c2:7a:15:e3:f6:c5:7b:e8:
27:4d:8c:93:a1:5c:58:de:5f:d3:c4:a8:ad:51:0a:07:3c:5d:
87:c1:5c:3e:d2:06:e0:b8:23:9e:f0:93:c3:33:84:e5:7c:87:
fa:63:d8:5a:7f:db:1f:a7:07:6c:ce:04:7f:c7:50:aa:1c:29:
27:6a:32:93:33:ab:17:d6:3b:49:41:ca:75:98:74:74:be:a0:
60:b7:0f:c9:f9:9a:60:ef:26:ea:e3:a2:ce:99:dd:ee:c2:1e:
ab:5e:4a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:42:46 2025 by rpki-client