Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: lrQ4/fqXPZePQGKSvzPFkz/poO+chLiIL5oMBvG1pB0=
Subject key identifier: A9:29:58:3C:0C:B3:54:DD:B3:2F:7D:51:6C:33:E2:65:48:B3:59:1D
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 0194BCA9ED74284214C504D2E3F5F2834043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: /hnT5rYDhTuOK8nonn/hGxPFAav8WpibAH/Ur8t9ack=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ed:74:28:42:14:c5:04:d2:e3:f5:f2:83:40:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=a929583c0cb354ddb32f7d516c33e26548b3591d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:e4:af:8d:aa:23:5d:b4:bd:9d:97:87:26:
d1:ad:68:ce:d7:46:ba:e8:df:01:42:46:fc:2c:69:
e7:3d:81:98:0a:59:c4:4e:ac:95:22:ac:a4:2b:07:
95:10:30:c9:d6:9b:11:94:d1:29:28:12:4e:30:35:
c4:f8:1d:f6:6f:c4:5c:66:27:b1:a0:b4:c1:b5:d9:
6d:5e:49:fa:e0:de:12:a9:27:f2:2f:e6:f2:83:70:
01:97:ac:a6:49:78:60:3a:74:72:ec:47:b9:73:8c:
22:ca:76:52:1a:6b:57:b0:d6:e7:fd:0f:74:fa:8a:
aa:c5:46:69:38:b7:fe:2b:6e:dd:de:e5:43:94:a1:
34:6f:6e:7f:de:d1:90:6f:9c:73:40:87:95:0a:7e:
c3:e2:f0:7a:13:df:07:03:92:23:eb:eb:67:a2:42:
e0:f2:2d:5b:89:70:b5:f7:13:85:a5:c3:4d:1d:19:
62:b6:e6:0c:89:d7:00:38:26:4a:fb:11:72:15:76:
ef:2a:2e:d4:98:d6:d8:f0:c3:88:23:21:0f:d9:0f:
58:8b:3e:38:74:38:e0:dd:50:c2:b9:e9:15:e8:8a:
7a:33:4e:fe:ac:3c:dd:57:d3:1a:73:91:22:f8:a3:
8f:aa:7a:a4:6f:4c:03:fe:b3:34:91:66:e4:06:17:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:58:3C:0C:B3:54:DD:B3:2F:7D:51:6C:33:E2:65:48:B3:59:1D
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f5:3c:fd:9e:62:cb:b8:e6:18:ae:85:32:73:26:79:bc:5e:
70:97:1b:c5:c3:d8:2c:03:df:e8:fa:d8:71:35:ac:66:af:16:
d0:09:ea:54:ed:c1:b9:92:1e:21:17:c4:af:3e:59:2d:82:aa:
35:55:a5:31:93:a1:2e:d2:4b:63:e2:db:71:92:c7:46:ec:a3:
df:62:8f:00:0f:6e:f1:f7:fc:6b:19:f6:32:7c:4b:a6:04:88:
81:af:5c:46:5b:51:ec:dc:50:81:27:9e:4a:1e:30:80:24:d9:
54:ea:62:fd:e7:35:b5:6f:48:f1:ef:76:8b:04:08:2c:36:ac:
b9:3d:ec:0b:09:9a:65:5e:ae:19:89:7b:2a:e0:b8:63:83:b1:
cf:f3:67:01:fc:bd:bf:e8:dd:72:02:91:b6:60:95:09:6f:3d:
c0:57:fd:8a:8f:07:e0:35:b0:e7:a8:8f:1e:97:32:86:0c:b4:
69:45:21:2d:25:9e:e4:15:dd:11:f3:89:35:5e:5c:12:2b:7d:
7b:a8:b2:ef:fe:2e:47:67:a8:eb:4d:33:17:3e:25:73:e0:df:
fe:11:20:db:1e:7b:2b:bf:86:9c:17:36:b6:16:cc:39:81:87:
9f:7a:2e:fb:48:f1:4f:a6:6c:7a:87:52:ae:68:6a:0f:c5:e4:
3c:9a:77:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:54 2025 by rpki-client