Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json)
Hash identifier: 52NWoOKsYuQEsBE3KOrMSgA6/OgdJmflX7zr8UverAo=
Subject key identifier: BC:14:80:92:47:A0:D4:C7:84:3D:AC:52:7A:77:C4:D6:C8:9C:EB:FC
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 0194BBCEADED6DBE9DF5AB97F89CB3FEB661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
Manifest number: 0561
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: E77W28wiF50IkO-MfbqRhLv-CH8.roa (hash: 0/YWvGyP0HxspplkXKv5ivuZGVdUvzbxzTq1+TTsXNs=)
2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=)
3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: upPauOqr0MTcOYkFkShXDtYsLp7z97O8X8wYfv/WdlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ad:ed:6d:be:9d:f5:ab:97:f8:9c:b3:fe:b6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=bc14809247a0d4c7843dac527a77c4d6c89cebfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:98:19:c0:60:6e:91:0f:ab:ed:00:27:b6:
0f:95:e1:0e:4f:96:85:32:ab:41:e9:37:ca:f6:11:
69:a1:97:2d:ad:89:7c:32:01:9f:ef:f5:05:9e:15:
7c:c1:77:da:98:74:8d:d0:8f:d7:93:df:1d:8a:a2:
af:4c:f5:c1:13:c5:4d:09:a7:d0:9a:c4:aa:fd:40:
ef:e5:14:fc:9e:c8:eb:c6:e6:f7:01:bd:88:69:14:
36:50:92:c1:7a:a1:b6:b2:fe:78:4d:08:92:52:79:
18:9a:4f:f5:87:dc:01:3e:5c:ac:aa:eb:7b:77:8b:
76:d0:18:f0:2b:c6:f5:30:a4:ac:2b:9e:d7:b7:0b:
b1:39:36:dd:7d:5f:14:ac:97:bf:04:e4:2c:02:b3:
46:ca:cf:97:2b:4a:53:d4:9c:4c:fc:3b:d7:63:7f:
de:a4:61:6f:88:ed:77:b6:38:a3:45:34:e4:26:0e:
9a:2c:9e:8b:7d:9f:a1:ee:dc:9a:d8:97:b8:e2:71:
a4:1e:00:6d:ab:fa:84:90:aa:20:ad:25:cc:82:cf:
0b:ba:44:b1:dc:ab:15:88:2d:5e:0c:8c:92:19:85:
79:ff:51:76:7a:ed:08:7f:70:10:4b:1d:d5:97:de:
09:3a:e1:b3:6e:14:1f:92:f6:41:2d:fc:94:7b:46:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:80:92:47:A0:D4:C7:84:3D:AC:52:7A:77:C4:D6:C8:9C:EB:FC
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5e:1b:a5:a2:ea:63:1e:88:81:60:a0:73:d1:20:54:d9:f2:
d2:af:60:aa:41:a8:6e:ac:72:eb:50:03:de:bd:34:c2:c3:7d:
be:4a:37:20:8a:96:2f:af:96:c4:f2:00:ab:93:cc:74:d6:e9:
a8:a6:6f:8a:c8:3f:05:d9:ce:2b:67:25:41:80:fa:ba:45:7a:
c8:b8:09:40:8e:e4:fb:1e:1d:95:90:01:fc:c4:4b:35:3a:df:
16:23:c6:9a:31:2d:70:d0:13:a7:ed:07:75:07:e3:19:f5:06:
74:56:1c:80:08:d6:cd:b5:44:cf:75:2e:70:c7:85:ca:a8:a2:
65:7e:c2:85:7b:00:1c:e5:38:c8:54:8d:48:07:80:5c:1b:b6:
a3:36:98:18:06:79:05:c3:29:99:ae:e4:a5:0f:b3:c4:5b:eb:
e2:15:5a:3a:9b:5b:6b:44:4f:b1:59:31:5e:2b:b0:17:10:ad:
4a:85:47:de:00:1f:47:10:37:ce:65:28:17:ac:15:6d:21:25:
25:1b:8c:db:9a:2b:f7:bc:48:25:6c:63:91:35:dc:c7:d0:7a:
47:3b:51:87:b1:1f:8f:7e:5e:5b:55:01:c6:4e:30:af:1c:1d:
f2:f9:bd:87:29:83:c2:5e:71:1a:fe:97:07:a8:9a:1e:c1:9a:
1b:9f:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:17 2025 by rpki-client