Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: s9Jp6VOamxs1yOGhG4nGphj1Hzo+WDrzODeXcUbPp7k=
Subject key identifier: AD:74:15:84:3C:23:18:79:7E:C9:00:B2:F4:56:6E:B8:88:73:F5:5B
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 0194BBCDCB426FE03667E2E6FB634ADD0A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 017C
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: rjLVeQa/Pmlh3jBdTSBHtRPHSxy6Yw3o2PAVORiXOkw=)
2: 3P6wXNJcDC3b35lAwjjqX-1dpME.roa (hash: u7hgo1u27j1RyUhAH8Or7hL0YQ+vaU+na5DgQVVElfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cb:42:6f:e0:36:67:e2:e6:fb:63:4a:dd:0a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=ad7415843c2318797ec900b2f4566eb88873f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:d3:c5:fc:47:02:3d:9a:e2:b2:7b:66:93:
bc:40:8b:eb:f9:af:5e:40:6d:75:33:62:3a:f7:3c:
10:bc:78:d9:19:44:91:35:71:1d:69:08:2d:b3:e2:
56:cf:81:98:3b:20:cb:27:41:b5:ec:ec:ee:01:f1:
cc:c2:92:6a:6c:b2:f8:d1:fe:09:d2:90:87:de:49:
ea:2d:ea:c2:6c:4c:93:ec:4e:68:cb:b4:1e:90:5f:
c2:69:e2:75:f1:be:f5:2c:76:c6:5c:29:d7:0f:bf:
20:1f:02:73:b3:08:bb:e1:d6:fe:2a:32:42:dd:d0:
34:26:78:f0:46:de:c7:cf:d5:39:14:4c:ab:7e:9d:
e4:1a:d2:68:09:94:4b:3c:1c:f8:0c:1f:58:71:21:
43:91:de:5c:57:04:e1:a4:c4:03:2b:0a:0e:fb:bf:
29:bf:ec:d8:4f:ae:83:01:14:2d:0e:ac:cf:9b:c8:
7f:3d:9f:d4:7d:90:a8:6f:2d:9d:e2:18:81:b5:51:
3f:10:8e:3b:18:b3:dc:36:60:ec:26:44:cf:df:69:
e6:27:9c:21:7e:93:15:82:6e:39:c7:3d:62:15:dd:
44:8f:6b:83:b6:4a:03:fa:f9:8d:29:76:43:35:e7:
27:0b:cd:1b:79:77:29:1a:51:14:f8:65:fa:33:27:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:15:84:3C:23:18:79:7E:C9:00:B2:F4:56:6E:B8:88:73:F5:5B
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:34:84:36:e0:b7:b2:36:23:af:ee:88:7a:20:74:30:65:0d:
90:0b:67:86:55:2c:02:ba:e9:c3:2a:03:cb:cf:da:99:cb:fe:
4e:02:40:80:dc:b1:f5:69:84:9b:e8:5f:0b:21:01:6a:dc:01:
22:9f:b6:18:8e:07:1e:64:26:83:13:92:92:60:82:b8:0f:74:
08:a9:6a:8d:39:11:f9:3b:4c:75:f6:bd:6b:d3:f9:ea:2e:3e:
7e:36:6b:b6:e6:47:c0:3f:69:73:dc:ca:eb:fe:02:43:7f:dc:
05:0e:d2:44:4a:da:dc:83:4d:97:65:8f:6a:82:26:b2:a3:e7:
95:c9:eb:08:fa:fb:e8:a0:b8:77:a2:19:72:b6:86:62:cf:a6:
cb:8a:0b:fe:ae:43:1f:1e:f3:d1:2f:0b:55:e0:d1:a2:eb:2c:
c3:b5:5b:3b:c2:5c:70:4a:fc:c1:48:0e:87:e2:98:01:48:69:
d4:55:e0:dc:60:a4:da:71:7b:91:b5:99:a4:67:cf:9c:f8:e4:
ad:b1:fb:1e:53:95:9a:e6:66:82:56:b8:66:08:e1:17:7e:1b:
aa:9a:1e:56:90:58:c9:32:e8:08:3d:6d:72:10:24:77:be:9e:
40:56:83:71:57:9f:85:f7:66:7e:82:f1:d6:03:2d:1c:11:f2:
09:b9:f1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:29 2025 by rpki-client