Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: MoNafdRprLqHm8kAvHZA3PsA/BJpf+tOvb0bxjvQkco=
Subject key identifier: FE:56:13:64:14:89:CB:3E:97:89:BE:A4:3E:0D:E8:8B:8B:9D:8C:FE
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 0194BCAA214B32C2F285D448B6FECC777EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 120A
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=)
2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: xbOJ+fBtHz1ffI0Rt9ua/269iLGjWmRjoLfFPfVIMmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:4b:32:c2:f2:85:d4:48:b6:fe:cc:77:7e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=fe5613641489cb3e9789bea43e0de88b8b9d8cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:e8:7b:6a:09:82:be:72:50:60:b7:62:b2:
19:35:be:af:9c:a8:7f:ea:42:84:fd:4f:ea:f9:79:
25:0b:00:3c:af:55:04:32:0c:9a:4a:0f:0c:6f:e3:
77:d5:85:9a:70:b4:f2:d8:06:8b:5d:fb:c9:35:63:
84:56:d0:b5:bd:89:c5:2d:38:6c:9a:7b:4f:e9:33:
d1:2e:72:79:6e:67:da:b1:1d:d5:d3:25:7d:15:8f:
ca:d3:46:c3:28:24:bb:ec:fb:48:7e:d3:69:58:69:
6d:11:d6:dd:77:43:08:2d:50:97:f7:b9:f7:c9:3d:
2d:45:66:64:39:6f:eb:de:14:2c:38:b4:80:bb:d2:
83:5e:42:42:67:a4:e7:90:c8:19:e6:0d:1a:96:93:
7d:a9:a4:be:4a:88:9f:47:c9:b4:9f:a9:6c:ef:76:
39:6a:97:01:93:4a:53:ce:fa:62:af:c4:a7:a6:63:
1e:f0:ab:6b:8e:68:29:f6:5c:16:6e:30:98:e7:f3:
ab:2a:e5:16:b9:cb:78:9d:1f:7d:7a:00:99:ab:47:
f1:44:f1:5d:84:90:e7:35:99:16:6f:ec:42:d2:02:
05:14:b2:22:37:91:f8:09:ca:b0:06:33:f2:74:de:
21:6b:8f:bc:07:9d:67:df:bd:22:78:29:2e:b6:b4:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:13:64:14:89:CB:3E:97:89:BE:A4:3E:0D:E8:8B:8B:9D:8C:FE
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dc:7f:95:fd:84:db:4b:e1:f8:a0:73:d9:b6:96:77:58:4c:
fc:d5:f0:1d:e2:11:7a:3b:d1:0e:e5:03:c3:ea:65:f6:4f:bd:
c6:9d:b9:a9:c8:f2:25:ae:dd:84:1e:cf:78:e2:d3:aa:73:d5:
a3:e1:93:90:d5:50:5e:5d:38:e7:a8:84:73:6c:be:a4:cd:24:
f3:e4:ca:07:2f:32:40:01:77:18:87:97:04:7d:27:f9:ff:75:
ae:da:ac:2f:41:fe:9d:23:00:01:78:c9:82:a5:c7:1a:7f:7e:
e7:02:17:7f:3f:78:2c:d5:a3:17:41:a8:e1:11:8d:d6:f9:d7:
40:83:d0:d1:b1:8d:29:e4:45:c0:1e:2d:39:b6:15:12:33:68:
eb:f2:6a:ca:b0:82:81:a1:3e:92:44:55:36:0e:a9:13:d8:f4:
49:73:06:7f:8d:ab:f2:50:ce:3d:12:63:d9:62:34:a6:9d:f3:
23:d6:68:1b:a4:7d:e8:ea:5e:ec:4a:10:bd:8f:f8:37:90:54:
9d:0c:62:dd:08:90:25:8d:6a:fe:3d:57:2c:c3:d8:85:1c:47:
f0:93:47:f7:f2:0a:a9:71:4a:03:4c:3c:da:b6:6a:5d:92:22:
7b:e7:07:7a:f8:53:e1:3a:69:76:6a:35:89:10:93:31:5b:86:
01:15:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:20 2025 by rpki-client