Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.mft
File: z14i55iuMWnaqxzrpnC9of_3tRc.mft (raw, json)
Hash identifier: +mm0sGOKHWz5oy3CaxOoUgoFcTOI+oEAks0tnFsOhlQ=
Subject key identifier: 4B:82:8E:1D:EB:2A:E2:AB:88:E0:3C:E1:2B:C9:59:F6:C2:B3:2C:79
Authority key identifier: CF:5E:22:E7:98:AE:31:69:DA:AB:1C:EB:A6:70:BD:A1:FF:F7:B5:17
Certificate issuer: /CN=cf5e22e798ae3169daab1ceba670bda1fff7b517
Certificate serial: 0193F2F700F6EE3EE49FF5B5CE6108AB0DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z14i55iuMWnaqxzrpnC9of_3tRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.mft
Manifest number: 0ED6
Signing time: Mon 23 Dec 2024 10:01:34 +0000
Manifest this update: Mon 23 Dec 2024 10:01:34 +0000
Manifest next update: Tue 24 Dec 2024 10:01:34 +0000
Files and hashes: 1: G3vd5KFOr_eao-NKVqt-pq0x2rY.roa (hash: +SbdiMqa9219Fqbhi62SlvBaMdQcxHRFUZbNThjquFs=)
2: z14i55iuMWnaqxzrpnC9of_3tRc.crl (hash: 2oS+hpbTOhlumGlxReTv9YjeK8iB87gTMING/kAOajg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:f7:00:f6:ee:3e:e4:9f:f5:b5:ce:61:08:ab:0d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5e22e798ae3169daab1ceba670bda1fff7b517
Validity
Not Before: Dec 23 10:01:34 2024 GMT
Not After : Dec 24 10:01:34 2024 GMT
Subject: CN=4b828e1deb2ae2ab88e03ce12bc959f6c2b32c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:60:f4:a6:18:32:6e:52:a9:39:a5:63:9b:
ff:9a:96:72:f8:6b:8d:6f:23:3d:04:60:b6:91:a1:
fe:6a:2c:7a:74:34:6e:c6:39:6d:d9:bf:32:23:fd:
d0:93:17:1c:8f:06:80:48:0c:43:ed:48:a5:08:65:
5e:e6:0e:d5:69:1b:7e:60:72:ec:1f:e7:96:5e:2d:
83:2e:ce:94:fe:ba:14:21:fe:d6:e8:db:b3:1a:d7:
a2:16:f1:ee:27:ca:09:35:f0:71:18:60:f9:9f:6d:
41:ba:bc:40:33:66:82:16:31:b2:0a:34:60:2f:1b:
d7:e1:46:b5:e2:69:f9:c8:e4:7f:76:e1:86:4a:0d:
75:55:19:4c:46:94:0c:09:bf:42:f7:a8:79:fc:ff:
77:80:aa:70:bd:8d:fb:0e:1c:dd:09:52:b9:f2:6f:
b6:24:b1:69:32:86:50:bd:e2:40:0a:84:44:b1:24:
57:c1:61:ef:6a:22:5c:53:e3:3e:ab:5a:0d:c6:5b:
a7:02:82:e5:4d:25:f5:3d:78:69:60:db:81:82:2a:
6b:3b:94:5f:cc:8e:6c:28:c6:23:64:4a:fd:a9:f2:
41:b4:c8:57:b0:86:23:cc:5a:fe:12:86:4d:e2:41:
c9:9c:13:21:ca:40:6b:f9:fd:99:cb:13:08:ea:94:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:82:8E:1D:EB:2A:E2:AB:88:E0:3C:E1:2B:C9:59:F6:C2:B3:2C:79
X509v3 Authority Key Identifier:
keyid:CF:5E:22:E7:98:AE:31:69:DA:AB:1C:EB:A6:70:BD:A1:FF:F7:B5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z14i55iuMWnaqxzrpnC9of_3tRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bc:05:e9:02:79:ea:59:65:a5:f6:3a:1f:0a:47:0b:c4:39:
f7:86:dd:ff:83:21:19:c7:e8:91:bd:a1:71:bf:d6:b8:0a:f9:
bd:25:05:4f:36:0a:54:7a:2b:af:09:71:37:a9:80:43:9a:5b:
77:32:ad:fe:c8:ba:a3:79:7b:e6:59:0f:14:5c:21:75:48:6b:
70:3f:2d:26:14:cc:59:a4:ee:fe:be:9f:aa:28:80:7c:78:dc:
2a:8e:d2:c4:4e:9d:a4:b3:19:2e:7b:1c:cb:57:35:44:aa:9e:
32:f4:55:dd:e6:d1:1c:43:c5:18:9a:9e:96:5b:a0:8d:2e:a6:
7a:a8:a5:50:13:39:e3:a5:0e:d3:eb:0e:42:45:4d:45:2e:86:
e1:31:37:e3:ef:95:21:94:09:67:3e:83:6b:81:87:1d:46:7c:
e9:78:b5:1f:22:65:fb:85:30:79:c5:61:8e:83:29:b2:53:fe:
5e:cb:2f:70:65:31:04:8f:e2:d1:38:42:85:2c:9d:76:14:0e:
cc:41:cc:20:19:bd:8f:ac:05:55:70:eb:d6:94:a6:d0:75:9d:
70:c7:7c:73:cd:c4:05:95:ed:ae:45:2f:1c:2b:df:26:53:84:
39:d9:c3:91:05:b7:f1:dc:92:72:10:a6:45:6e:63:35:e8:eb:
58:30:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:58 2025 by rpki-client