Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: AGrXBPM4/KkFHDC2h/u1/S3VkAv0JQF+N7kRTOzsGpI=
Subject key identifier: 8D:16:14:6B:A3:AB:34:20:5B:E7:6C:AE:3B:94:B1:B4:87:09:49:DB
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 0194BD4E8351E611D7C30008D7975D1815A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: jZZdIX7eNQO7JnUgoaVRIR2tm7joep7pWqSfaYT48Hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:83:51:e6:11:d7:c3:00:08:d7:97:5d:18:15:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=8d16146ba3ab34205be76cae3b94b1b4870949db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:7a:b1:6e:08:82:84:4b:74:89:53:26:15:
1e:62:c5:a9:5b:bf:5e:41:aa:9b:08:ad:66:e4:ef:
f2:88:ab:b1:e1:c3:78:0f:b1:22:b8:f8:af:38:6d:
58:c8:bc:c9:4c:f3:04:01:92:11:0d:85:f3:1b:ec:
25:a2:8c:07:03:bf:3b:bc:32:f8:e1:6e:53:65:1b:
d9:49:f3:d6:b6:6d:bd:67:cb:4a:01:52:a3:c0:d1:
9b:92:67:dd:6b:de:1f:2b:13:9a:b0:1c:6c:b7:1d:
91:29:00:00:67:62:7a:58:de:02:7c:29:17:ad:7a:
8d:d6:4b:5c:c2:b6:df:e1:30:1b:4a:ef:7c:ed:bb:
60:9f:dc:fe:6c:05:da:a0:b7:65:8c:d7:df:54:67:
07:91:21:ca:e4:75:6f:0f:4f:ac:eb:73:8c:c4:b1:
52:b8:d9:ae:63:68:ed:af:a3:a8:89:92:c8:b3:9a:
a7:45:81:ae:2b:09:6c:6e:fc:ee:96:a4:37:25:e1:
e9:fb:ea:67:e2:b2:d0:d3:20:0a:d7:34:18:8a:54:
a3:5b:b7:cd:23:27:34:bb:d9:d1:b6:e2:b6:82:33:
14:83:59:81:2a:8c:a0:61:e1:66:6b:4f:56:e7:28:
db:83:5e:51:75:17:57:70:84:30:51:3a:27:52:97:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:14:6B:A3:AB:34:20:5B:E7:6C:AE:3B:94:B1:B4:87:09:49:DB
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a9:89:32:12:ff:42:06:19:c4:56:82:4d:56:ef:7a:f4:01:
20:23:53:e5:30:9d:0a:b1:52:5e:10:7d:6e:95:91:d0:5a:9f:
1a:a2:69:39:2c:46:85:7c:66:ce:94:d4:17:27:c4:38:8f:a9:
64:ad:ee:fb:70:b6:04:da:5d:b1:b5:88:80:a6:5c:41:b6:83:
46:c8:db:6a:fb:8e:b9:8d:80:2f:79:5f:39:16:ba:1e:21:aa:
1b:de:4b:d5:c4:66:a8:b5:f5:ff:ae:71:09:a2:9c:4b:33:4a:
6d:85:4f:94:a1:4f:bc:7c:9e:aa:8b:37:5d:8f:78:dc:9e:6e:
41:65:43:2e:14:e6:58:3b:ce:51:67:66:90:8f:c3:9e:7c:9b:
cf:3a:80:1d:95:fe:00:cd:56:01:5a:71:a0:2b:0e:9b:50:3d:
46:2b:ce:4d:8c:f1:1c:ea:cd:77:a1:38:dd:2a:a7:cc:09:85:
80:24:e2:68:38:15:d1:46:55:e1:fd:40:56:29:b1:2f:4a:43:
16:d8:0f:6a:da:51:2e:42:32:e1:8b:42:aa:13:15:a4:23:9d:
c9:90:d0:87:b1:2b:94:2c:f3:46:1f:e4:b5:14:60:d0:a0:ef:
72:22:43:65:9f:60:cc:1e:5e:99:d3:ba:88:9a:d3:34:b7:84:
ac:28:ac:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:28 2025 by rpki-client