Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: /zIZ8nD8Z0T0BswOyeB2HtLz8DWAJ0D+2/Bi8GnbtMg=
Subject key identifier: 1A:9E:5E:1D:E1:81:A8:04:8E:50:1F:FA:8E:42:92:D2:1D:78:D3:00
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 0194BBCEDA9BE15409318ACF349EDF255688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 3D
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: AinJx0H4B0nfHP6Ce2sgOBS7ZGmWvLNHe2Qg5CAjiF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:9b:e1:54:09:31:8a:cf:34:9e:df:25:56:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=1a9e5e1de181a8048e501ffa8e4292d21d78d300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:10:7a:7f:1a:4f:2c:ef:9b:7a:93:60:cc:
98:2e:90:a7:fe:d8:4b:02:ad:1e:54:31:c4:d9:ab:
79:b5:ff:65:83:6e:cc:2e:68:d9:d3:b1:12:f4:f9:
de:f8:ab:b7:ce:8f:e1:5f:8f:2e:d8:7a:9f:b3:19:
28:19:50:d2:9d:c7:16:54:aa:00:dc:ed:69:d3:6e:
81:9c:ea:dc:8a:d9:22:e6:e9:ec:0f:23:59:b9:1b:
c5:e9:f9:0a:80:60:dd:33:3f:d7:40:74:63:1f:f5:
3e:42:c4:2c:f7:e9:43:c1:a2:43:05:b9:40:eb:52:
28:3d:ae:df:3e:0b:5d:a5:99:4b:3e:84:f3:86:fc:
0d:14:02:87:03:59:da:77:7d:5e:0e:37:ef:87:c7:
ce:4b:07:d3:99:ae:90:22:0a:ed:78:e3:a4:c9:5e:
56:16:f4:18:92:17:e8:bc:29:03:e9:51:9f:d0:68:
f3:8f:f6:93:b0:bd:ee:9f:bd:f7:42:93:f4:a6:1d:
22:26:17:2b:59:77:9e:81:5d:df:94:b3:cb:77:20:
a3:b3:0f:c2:17:a3:96:83:38:4e:1c:90:7d:85:72:
9d:c9:de:0a:c3:88:88:5e:1d:95:b8:44:23:55:7c:
9d:b8:e9:d3:f4:09:1a:89:f6:56:69:40:11:cb:88:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:5E:1D:E1:81:A8:04:8E:50:1F:FA:8E:42:92:D2:1D:78:D3:00
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c9:34:bc:58:4b:02:79:c3:d9:31:60:98:0b:50:4f:9f:d9:
da:d6:de:d7:e0:e5:77:58:0d:d1:9b:19:97:c8:c2:0c:28:ce:
78:0b:b7:ff:cb:dc:e9:a6:35:ad:2e:ff:c7:85:c0:f6:6f:20:
24:48:40:52:fe:f7:e3:ba:15:36:64:d8:6a:c0:90:ae:3e:21:
eb:b5:05:a6:8f:57:ea:b8:02:84:71:9d:43:93:75:45:ce:f5:
e3:82:30:8b:11:78:7d:f7:90:ba:5e:a7:23:ce:97:ef:69:24:
c4:08:98:0e:5c:7c:db:e8:38:62:27:b9:8a:0e:98:66:00:21:
61:40:94:f5:aa:23:7f:20:38:05:4f:82:e4:91:83:84:eb:c5:
cf:3f:da:af:0a:5a:cd:76:7b:d1:4a:26:af:c5:fc:be:76:e3:
b5:64:bf:44:6e:b6:dd:01:35:4f:30:b1:eb:7a:4f:10:8d:8d:
9e:19:84:b6:e4:18:1e:61:f7:b5:ea:2a:ca:84:0f:8b:ea:ea:
77:5f:34:99:dd:95:02:bd:42:20:a0:c8:a0:fe:c6:8e:99:1d:
f6:46:53:09:ff:15:9b:99:a4:41:79:90:4e:ea:e3:49:b9:c2:
79:71:1c:8b:16:22:e8:f0:83:c0:8e:29:27:65:3a:25:a2:d4:
5e:fc:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:24 2025 by rpki-client