Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: a2GleqkohXjfSfrSxyISioz4gAqOskxmst7arYGO1UE=
Subject key identifier: 97:0B:9D:18:5C:82:CB:8B:2C:0B:56:D7:33:53:28:20:A3:39:06:5E
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0194BD17EBA48A715AD71FCFFB35A5B84B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0647
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: At8Z9TojixSlLQjWVm3aa_2CoG8.roa (hash: g1lxhWEdzZIZD1/es6HpRHlAviscTFbw5tGeIgTs7iM=)
2: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: VEn1tNcmKjVFA34UaXwyV0ybB5huxSDkiW9jNmCPhTE=)
3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=)
4: yrgNwHM8YKp_C4hPnwLBFQUp2-c.roa (hash: liYmsR8A3yNk2PrpXmG9vExjiOiJQgVmdGoVzRSMrms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:eb:a4:8a:71:5a:d7:1f:cf:fb:35:a5:b8:4b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=970b9d185c82cb8b2c0b56d733532820a339065e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:ab:cc:60:ff:15:b6:c0:a3:cb:27:67:8a:
04:79:b2:86:fa:de:b7:28:67:bc:d9:0b:ba:17:1e:
d8:89:ec:30:a9:7d:f5:e8:7c:37:08:58:3b:63:87:
cb:37:59:44:6d:3d:55:ba:c4:e1:87:ca:05:4d:97:
10:7b:6c:d5:6c:f3:f7:b8:78:d6:34:1c:d3:1a:e0:
01:7e:68:45:31:b6:1e:48:df:98:74:07:d9:9b:26:
51:57:db:ba:e7:26:45:06:70:e1:7b:99:98:ab:1d:
11:33:cc:b7:05:3a:f4:7b:92:97:74:77:93:6b:c6:
de:e2:62:42:1d:29:8a:a0:67:e5:e8:8d:df:bd:ec:
e3:5f:81:2d:6f:34:af:af:e1:7f:cc:2e:14:04:d8:
47:43:47:cd:6a:72:01:e1:84:3d:27:36:5c:db:ac:
90:93:a7:63:07:02:db:45:ff:9e:78:48:23:74:40:
de:0a:1a:cf:9c:64:a5:77:38:f0:82:fa:92:c0:c1:
82:d2:cf:c6:9d:16:ee:81:3d:9e:10:42:1f:a9:16:
14:3b:93:b0:98:d5:6d:6b:9c:ef:93:ad:ea:0e:30:
5c:19:56:ee:e7:d6:14:f6:fd:0e:0e:b1:6c:0d:4b:
15:57:e5:00:19:0e:26:ae:45:11:a3:40:1f:39:52:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0B:9D:18:5C:82:CB:8B:2C:0B:56:D7:33:53:28:20:A3:39:06:5E
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fc:47:c4:4d:f9:24:5b:cc:58:05:c9:93:7c:cf:24:22:3b:
62:c9:d9:d7:c4:bd:8f:cf:9b:76:08:4a:e3:c9:ce:73:6c:42:
51:82:51:a8:27:f8:97:7c:a8:fa:c3:72:78:49:8a:a2:d7:b4:
0b:48:91:64:2d:d5:85:e4:b2:dc:0e:24:37:7c:75:6a:cb:60:
92:57:05:22:f1:a2:a0:43:49:f3:c5:8c:7e:ff:9b:36:c7:b6:
e7:1b:f4:4e:d6:45:7e:19:fe:e1:66:94:b0:55:e4:f2:8c:42:
61:ad:b4:fa:75:73:6b:fd:82:6d:66:d9:4e:ea:e6:ad:fd:3f:
07:ae:fc:4f:c9:cf:fb:1b:72:4b:dd:52:e2:a6:e6:2a:c7:f0:
28:b9:06:61:fb:02:9e:89:27:d0:69:bf:00:74:21:90:2e:7c:
2a:ca:2c:71:5c:82:28:8d:6b:97:f6:10:6e:df:a1:5c:40:18:
1c:a1:cb:d4:dc:41:38:6b:a4:8b:c1:43:fe:80:51:2a:e4:a9:
01:c2:e2:df:c6:85:2a:db:de:b8:3b:e4:76:b6:4c:35:3a:2d:
fb:6b:17:d8:19:1f:ba:95:9c:c7:7b:11:c5:c7:c4:30:ea:1c:
a3:a6:e8:f7:e7:79:e7:01:80:c5:bd:d2:2c:c4:8d:62:96:6f:
67:83:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:12 2025 by rpki-client