Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: 65kGv/il0LLXyZ8bbY2rwoDX99IJig2WQfy7S1vo840=
Subject key identifier: 20:CE:79:42:53:56:E3:CA:A6:2C:CB:A9:44:4A:21:11:7B:A0:99:66
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 0194BCA9E7A4C5B33F4AC446965791FE1663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 10E9
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: Jtz6b8hr+kHFDIwYnQj4olU95z+53lf0jFmUpzdMt+A=)
2: cD0i6eXUEb95MRC9zt2P-QsR-zI.roa (hash: bwRfJD4nIDDz+Ohj/YcPEu2i5IBHAbvcA7uyG/Ew8EE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e7:a4:c5:b3:3f:4a:c4:46:96:57:91:fe:16:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=20ce79425356e3caa62ccba9444a21117ba09966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:e5:83:f9:f3:41:85:1a:c2:bd:6f:25:31:
ac:c6:f8:ef:9e:9c:67:ce:e7:f2:c8:47:8f:81:bb:
1c:23:83:00:c0:0f:52:7f:70:4e:dc:14:41:54:93:
90:a1:f1:1f:4e:a9:01:b7:10:c2:60:6d:cd:0b:cc:
6b:fc:0b:93:03:1e:a1:f7:8c:a9:4f:c9:60:5f:6b:
4b:eb:ee:24:e1:af:f6:39:7f:1e:ca:c2:cf:aa:34:
4a:c9:ee:5c:ba:ab:c1:7d:50:19:37:18:04:31:e9:
38:48:49:8c:a4:2e:0a:5f:63:ac:e1:06:82:91:ff:
ad:1a:f0:d9:a8:eb:d1:4b:db:f3:54:5b:58:b2:f3:
1e:5f:c2:d6:42:06:2d:89:9d:45:ef:12:d0:3b:45:
b9:36:2d:a6:b1:78:5d:35:2e:6f:94:7f:3d:b5:ba:
60:91:95:1b:28:3d:3e:e0:25:0a:1f:f4:13:34:1b:
e4:e7:de:48:fd:b6:a0:a3:2e:d3:33:b6:d5:d7:ef:
f7:8d:ef:a0:21:b1:74:f6:a7:d1:58:63:e3:9c:86:
92:1f:ac:3c:b1:60:d3:f6:8f:24:6f:d0:99:8e:39:
0a:30:e3:9d:b0:66:6a:cc:cb:83:d6:0b:2c:12:85:
2a:aa:60:a7:af:59:05:b7:62:44:c7:f0:10:0e:b4:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:79:42:53:56:E3:CA:A6:2C:CB:A9:44:4A:21:11:7B:A0:99:66
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:06:0f:d1:a6:36:36:28:f5:11:83:07:b8:2e:14:7b:b7:7c:
84:6b:63:65:a0:af:7f:35:ec:b8:d3:75:9a:86:89:20:12:04:
8d:cd:a7:a3:01:4c:c3:77:4d:16:e3:fc:12:90:e3:cf:3c:2a:
82:69:a4:16:62:3d:c7:3e:ac:1b:24:ac:82:3a:8b:e0:e8:5d:
85:c4:91:86:79:22:6e:49:e8:54:12:1e:ef:ad:66:0c:47:e9:
9d:38:5b:e4:63:a2:40:f9:ee:24:a3:1e:e9:c8:c5:c1:ec:07:
3c:c0:36:5e:ff:3f:0d:8d:2c:cf:cc:69:b6:9a:49:71:13:5c:
58:3b:fa:e9:06:c4:5b:a2:45:a0:62:67:8e:09:9d:82:da:18:
18:b9:8d:1a:2d:c3:e0:bf:8b:63:b1:ea:6b:0c:1b:3c:9b:29:
86:d0:30:f0:01:dc:4e:db:34:dd:e3:1c:47:40:62:ab:e6:1d:
2a:e9:f7:88:ce:71:d5:8c:f8:82:80:b8:4a:de:c2:a1:a0:6a:
09:de:08:9e:34:4e:62:e8:95:8c:94:56:f5:96:1a:48:5a:02:
0c:ea:78:38:71:15:55:f7:a3:77:33:b3:80:be:04:08:2e:3e:
65:40:2e:80:a9:24:ac:06:bd:0f:79:52:9a:86:65:38:5e:6f:
9a:e4:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:15 2025 by rpki-client