Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/z39kM1OAOw3jNELsJMuhPzTyXeY.mft
File: z39kM1OAOw3jNELsJMuhPzTyXeY.mft (raw, json)
Hash identifier: vm3khKPjSABqeZp9qnGcfw1fJsZAciNTa6RqBSC1wI8=
Subject key identifier: 5B:AC:BE:FD:3F:CE:E9:E4:59:07:9A:CF:49:96:E5:0B:38:0B:5F:DC
Authority key identifier: CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
Certificate issuer: /CN=cf7f643353803b0de33442ec24cba13f34f25de6
Certificate serial: 0187099D8C083054979F02BD34C688262520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/z39kM1OAOw3jNELsJMuhPzTyXeY.mft
Manifest number: 05A3
Signing time: Wed 22 Mar 2023 13:58:52 +0000
Manifest this update: Wed 22 Mar 2023 13:58:52 +0000
Manifest next update: Thu 23 Mar 2023 13:58:52 +0000
Files and hashes: 1: FrAYVhIL5QZSmZnVeXXaDcJqeM0.roa (hash: 1epa8uslUEOmEDJghMi+s0e0PtU0/3rBop1AzWUbNIo=)
2: W1haVynR9Zf09KaZciKWlKm6sgc.roa (hash: ogNI6gdKyKUc8tg7FvjM8I1JQKTHLGAyQ1uGhWp7iLY=)
3: z39kM1OAOw3jNELsJMuhPzTyXeY.crl (hash: trpujQ+4R/+UyG7JsKvLwZBrtWTrSJNEuC/lVpEsKFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:9d:8c:08:30:54:97:9f:02:bd:34:c6:88:26:25:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f643353803b0de33442ec24cba13f34f25de6
Validity
Not Before: Mar 22 13:58:52 2023 GMT
Not After : Mar 23 13:58:52 2023 GMT
Subject: CN=5bacbefd3fcee9e459079acf4996e50b380b5fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:5e:b4:46:ff:0f:c6:46:61:79:ec:97:c5:
49:1d:48:c9:b1:8d:17:6e:20:41:9c:03:cc:e5:b1:
1c:9c:0b:d8:a9:1f:5f:7d:e8:84:e7:33:83:f1:23:
dd:d3:eb:f0:cd:12:85:57:d4:8f:51:56:c1:16:1e:
55:68:b5:c6:17:d1:8b:4d:0e:aa:11:80:fe:ed:59:
93:80:f8:b0:51:fd:d6:37:7f:b7:29:aa:57:c2:1e:
b2:59:c2:b3:0a:58:94:20:c7:8c:ab:d4:49:05:e7:
36:d2:76:bb:b4:b0:ce:c2:09:c9:4f:3d:6e:47:53:
4d:7e:79:a2:05:d7:dd:77:3b:17:70:09:a0:0d:cc:
ef:6c:4a:84:13:91:b8:ba:f1:fb:ff:24:95:9a:8b:
d4:b5:f9:dd:09:91:f9:93:27:c1:36:4a:ae:8b:25:
9b:20:0e:17:d8:02:ba:10:39:97:76:5d:11:36:41:
17:43:9f:64:2d:d4:a0:62:0e:49:a1:4a:10:2a:9f:
ea:0c:a7:17:ac:04:7f:b4:7a:e8:d9:22:a9:0a:a1:
c0:2e:f4:91:ec:cc:da:74:73:52:a9:5d:60:ef:b2:
c5:58:dc:e2:33:93:5c:07:df:c7:81:76:c3:80:6c:
f4:1b:2d:e8:05:5f:b4:38:d9:f8:a0:4c:df:06:c8:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:BE:FD:3F:CE:E9:E4:59:07:9A:CF:49:96:E5:0B:38:0B:5F:DC
X509v3 Authority Key Identifier:
keyid:CF:7F:64:33:53:80:3B:0D:E3:34:42:EC:24:CB:A1:3F:34:F2:5D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39kM1OAOw3jNELsJMuhPzTyXeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/z39kM1OAOw3jNELsJMuhPzTyXeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ace0ff-1383-441b-82d0-18ff9f958426/1/z39kM1OAOw3jNELsJMuhPzTyXeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d8:ff:aa:94:92:33:ba:0c:ec:72:02:0e:e0:21:9d:36:22:
e1:87:28:ec:a5:01:19:f1:ec:be:ab:07:08:05:05:89:a3:d9:
de:58:9a:59:ff:ff:8f:42:df:8b:d0:0e:8a:56:95:5a:0d:44:
26:e3:bf:4e:2e:21:c5:9a:4a:3a:a3:24:3c:5d:c0:bc:bf:f1:
1f:65:7b:62:fe:25:98:84:b7:cb:60:84:ad:90:b3:66:18:e2:
33:0f:56:1f:26:15:d3:1c:d1:9c:6e:62:43:59:e8:c4:d2:aa:
33:a3:b8:a0:8c:33:e6:dc:f9:5e:06:36:6f:2e:96:34:9e:ab:
b3:cc:98:e9:8e:2c:7c:0d:5c:ec:e4:7a:4c:05:d2:9c:e6:36:
82:5c:27:4a:d4:3d:b9:3c:b2:97:72:da:d8:b4:7a:4c:37:c7:
77:c1:1e:80:65:cf:c6:88:f6:32:1e:27:a5:a9:de:4c:a2:db:
22:ff:8c:a7:ba:94:6c:57:85:a9:a0:3c:b9:81:7f:91:0f:b1:
eb:8f:18:5c:f3:ec:03:fd:5c:c6:3b:5d:59:03:4b:b8:7e:95:
84:4e:1a:a4:46:12:23:d9:b1:04:99:00:d5:24:4d:72:df:a8:
64:73:36:f2:69:69:d0:64:aa:c1:e7:c2:57:1c:eb:e0:ba:d0:
c9:82:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:14 2025 by rpki-client