Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: sS9pDrg0QROvye2IDOLBavPYWOe9yX59/Ocn3NKpUv8=
Subject key identifier: 9E:77:6F:99:A5:03:96:46:3E:7C:06:FA:40:7E:38:7C:36:E2:85:47
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 0194BBCE01D2EB0D40D2752747B86EEB5B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0AB7
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: m7Nhg3C9N5VJkrRvqGDXgYelH/F1GzaIRtsQP3/UWis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:01:d2:eb:0d:40:d2:75:27:47:b8:6e:eb:5b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=9e776f99a50396463e7c06fa407e387c36e28547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:4d:06:6a:ab:93:2b:44:79:86:43:b0:4d:
c0:b8:11:c2:58:6c:37:0d:05:51:c5:47:59:4e:64:
2a:1a:ec:5c:38:ab:b2:ed:99:20:50:b6:eb:0e:61:
a2:d7:05:8d:39:cf:70:f0:86:52:81:d6:0a:1d:fa:
f6:a0:52:47:50:a1:b5:61:2a:c2:87:49:6f:f6:ee:
fc:ad:ff:73:eb:5f:4a:3d:e4:cc:de:1d:a9:5b:98:
11:56:5e:e7:9b:f8:d0:2b:ed:b4:38:9b:6e:7b:56:
3c:92:8a:fd:46:87:64:71:16:75:8b:9a:cc:f2:0e:
d6:af:84:49:6c:fe:69:f3:f2:44:f0:17:cf:f4:af:
39:8d:ca:ba:71:78:5e:81:3c:16:97:eb:82:6e:09:
70:5d:aa:e1:ec:17:8b:2b:eb:ae:c4:7b:ba:85:99:
bd:ae:5e:f0:eb:7f:e1:d0:ba:bc:39:56:9f:05:cd:
fc:40:8a:1a:61:27:dd:22:7c:81:fe:e1:25:73:0f:
0d:1d:29:f3:3c:57:9a:34:52:38:fa:3b:6c:3d:bf:
9d:cb:e5:6f:a6:60:9c:21:dd:59:19:33:9b:02:89:
7a:87:84:d0:44:18:2c:e0:20:b1:43:b2:2c:89:0c:
49:90:34:a2:01:0e:0c:10:e4:7a:80:e1:1e:64:dc:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:77:6F:99:A5:03:96:46:3E:7C:06:FA:40:7E:38:7C:36:E2:85:47
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:18:a0:e8:b6:b6:56:90:a1:dc:e6:20:5d:0d:fa:30:88:52:
68:03:9d:28:5b:34:8b:3b:3b:c8:13:16:94:31:46:6b:1c:4b:
1e:d6:41:4d:87:b4:67:a4:18:be:91:75:6f:81:ee:69:31:d2:
47:55:6d:f9:47:7d:27:79:3a:e4:c4:fa:ce:35:c6:02:b2:cc:
52:81:ef:fa:dc:c2:b6:4b:47:3c:dd:c9:7a:1c:a7:d9:2d:1c:
36:09:9c:62:f4:96:5f:4a:c4:56:95:0f:8c:15:bf:38:d0:96:
e9:fb:f8:50:24:35:7c:9c:80:4f:3b:b8:b1:cd:34:37:42:fd:
c3:89:00:76:04:c3:46:32:bb:2f:6f:c7:e0:47:9b:b1:e1:45:
18:d1:15:e0:0c:94:7b:ea:a8:50:6f:bd:51:7b:74:ad:c8:79:
87:fb:0a:79:f8:62:22:02:cd:b7:4e:53:a8:32:81:bc:90:61:
68:87:2e:ea:2d:55:54:2a:c7:ed:6d:46:2c:27:58:84:52:b5:
5c:ec:6b:9c:be:39:4f:6f:e7:cf:ab:9e:87:71:8f:1b:52:6a:
2e:b3:7d:51:71:35:9f:f6:30:63:62:e4:54:12:0e:ec:e7:f2:
ec:34:3e:18:49:df:bc:f5:df:61:13:bf:ad:2d:4f:3d:e5:03:
45:6f:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:58 2025 by rpki-client