Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: o4VYWogQpanFV8oZiKo5YIVjf5tTwRkOfKx9KBFa9gE=
Subject key identifier: 0D:0A:9E:F2:56:71:6C:42:EC:4C:49:0C:0D:B4:47:9B:F4:2E:8D:A7
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 0194BD4EC178F9AC759182918B7DDFBD0B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 02B6
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: qP0zXND9rZ9qhlYmgMWHEzMDKRrZAfFv+jj+DhySays=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c1:78:f9:ac:75:91:82:91:8b:7d:df:bd:0b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=0d0a9ef256716c42ec4c490c0db4479bf42e8da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:80:f4:12:a7:f4:2a:d1:99:ee:16:bc:7c:
a5:ae:18:83:0b:29:91:c2:c3:24:40:29:4f:e7:16:
5f:14:65:06:0b:89:87:79:72:b7:64:f7:1d:c0:b9:
e4:4c:ac:31:7a:01:5c:84:54:46:82:fc:b4:89:8c:
9f:e1:89:cf:b1:14:15:d8:c6:b1:0e:df:52:83:c3:
5f:93:1e:dc:f4:93:95:79:8f:ed:05:2f:3d:73:62:
24:74:16:e5:d6:25:cf:9b:28:48:85:39:c2:4a:f0:
5e:74:e1:7f:ac:a8:8e:3f:4f:94:a2:88:3c:f7:88:
4e:6d:98:a8:41:ff:95:ed:80:04:09:19:b4:23:49:
d3:ab:2f:52:f3:90:ce:9a:40:94:09:26:0f:f3:9d:
d1:e6:09:75:b4:d7:f1:f3:8e:eb:e6:57:17:a7:c9:
cf:a6:ec:11:8c:c8:b7:b2:3b:00:36:a1:12:ac:35:
7d:d9:75:13:56:69:80:2b:ef:ce:a5:68:ee:bc:0b:
d9:29:e0:28:11:19:73:ec:25:fe:04:9c:76:8f:04:
28:5d:e9:e3:ac:6e:e7:96:ef:b0:2c:1b:df:e6:9c:
da:b6:bc:5b:08:13:03:23:20:89:e2:fa:b6:b1:a1:
37:33:cc:30:d2:21:b4:6f:31:f1:58:cb:4d:63:03:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0A:9E:F2:56:71:6C:42:EC:4C:49:0C:0D:B4:47:9B:F4:2E:8D:A7
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4a:d2:a2:b0:ca:78:30:44:7f:fb:af:3f:81:2e:3c:ca:b8:
2f:cb:ed:7d:98:4a:e5:cc:52:5a:02:34:93:9b:1c:85:53:f0:
ab:56:82:7f:34:1d:b4:82:6d:b7:32:bc:d1:9b:c2:cd:16:56:
f0:7c:cd:c3:cf:64:cc:92:da:86:94:63:0d:1f:b3:c6:c3:7b:
d5:99:67:88:e5:5c:cd:41:77:bb:14:6c:93:b9:96:58:1a:46:
f6:25:9f:32:50:03:a7:3d:f2:b6:12:75:bc:bc:87:03:4c:60:
12:1b:71:cd:ab:11:6a:3a:62:f8:ee:93:0e:8f:18:55:fd:a0:
de:05:b3:64:dd:17:e2:d1:0c:01:14:aa:10:8b:a0:db:c1:2e:
5f:0d:cd:d0:8f:94:17:a5:21:2a:dc:72:4b:d0:1d:e5:c2:9d:
cb:b0:78:b7:c2:f0:37:b8:b6:35:98:8f:cd:05:eb:c7:c1:92:
e1:7d:72:f0:97:c1:7d:10:08:47:a5:0d:d8:70:41:25:f0:13:
40:64:da:dd:4d:59:d1:a7:22:f6:80:de:c3:49:1a:cd:2b:7e:
11:c3:56:b2:e4:ed:8e:e8:ee:da:b7:b6:95:da:33:d6:c5:b5:
b1:de:e0:cb:b4:03:c1:22:9d:88:d3:70:df:b1:c2:cb:bf:ea:
26:10:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:31 2025 by rpki-client