Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: nNJySQvuwEQCSyvRZBuQp92gmkbqgq0o0qihOK81oX0=
Subject key identifier: 7C:27:1B:A0:B0:51:BE:5B:B6:79:57:75:CE:D8:67:BE:A9:CD:53:90
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 0194BC3C6C298C6CFAC4271410A7784592D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 0F1D
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: F478KPNWaWgwHEjAUDWV7KlTqQA.roa (hash: fiVEyWrn82XeJgJcuTMWEO2YQxgfDNcoh754eidkrnE=)
2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: pOH7UMk0p+IwguJkhgmkpga8YgChPpg3y3sDwU2J3DI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6c:29:8c:6c:fa:c4:27:14:10:a7:78:45:92:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=7c271ba0b051be5bb6795775ced867bea9cd5390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:bb:05:64:ca:0d:20:0d:3e:db:9d:6d:1c:
79:9e:db:d2:17:b9:d7:40:5a:b6:8c:3d:5a:40:e3:
c6:5a:a2:d3:9a:a9:a1:4c:dc:0c:2d:22:2a:44:ff:
a3:07:4c:66:7e:e1:0e:8a:e1:2b:ec:33:f0:a5:69:
27:3d:41:99:ff:3c:d2:89:89:d1:02:9c:58:e9:e5:
e7:d0:f3:9e:8b:74:fd:96:51:a4:9c:c8:95:f6:06:
ed:d6:42:38:ed:55:da:72:37:a4:51:2e:08:b3:d0:
75:d7:82:35:27:2b:2d:85:df:67:c2:0f:a3:71:8e:
4e:37:38:11:6e:4b:66:6a:fb:fe:6a:1b:e6:ab:b7:
d5:2d:3a:53:65:51:4e:b4:51:ae:2a:ee:0c:e1:26:
a7:f5:c7:32:a5:ac:4c:5a:5c:2b:02:89:90:6a:1f:
e8:19:2b:d5:80:4a:54:33:4e:66:fe:c2:44:ff:80:
ab:2f:d5:5d:7b:81:b6:37:5b:2e:30:d7:48:28:3f:
8b:e5:c6:51:d8:83:a9:d9:c5:63:06:37:24:1c:30:
dc:9b:bc:93:28:22:4a:82:91:ff:72:50:7a:f0:29:
78:7e:17:a0:5a:18:43:e7:db:3b:5e:72:92:fd:2f:
98:b1:13:e5:76:5f:fe:1e:a9:eb:54:db:ec:38:88:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:27:1B:A0:B0:51:BE:5B:B6:79:57:75:CE:D8:67:BE:A9:CD:53:90
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dd:d1:19:c2:e7:4b:37:cb:56:66:72:bf:c0:0e:51:1e:8c:
77:8c:f0:65:b1:49:30:94:04:e7:6a:5d:30:5c:a3:6f:a0:27:
3a:53:a7:2f:26:ed:d0:57:1d:7d:49:45:b7:9b:ac:d3:1a:ff:
17:95:24:86:e5:9a:b6:29:09:9e:0c:ff:97:5c:b4:9b:ab:f1:
8b:a0:8c:2a:d2:ee:44:40:07:77:a0:28:5b:b6:23:84:ee:36:
6b:82:c7:2e:69:78:d7:38:fe:2e:99:6d:d0:8e:4c:1d:a7:6f:
6b:b3:cc:89:8b:49:c4:bd:f5:d5:83:57:ee:04:61:29:b0:0b:
9f:26:f1:84:59:c6:f0:92:27:a2:65:43:30:03:b6:e3:ae:07:
f8:2a:90:a9:b2:42:02:ce:1e:8e:b8:35:76:0a:ef:0c:61:19:
12:3b:6b:5f:94:b0:ff:1b:2e:32:b3:71:ba:8e:1c:ec:5a:e7:
7f:23:e7:41:ea:6e:b9:2e:3d:ba:74:f4:14:4c:8c:0e:69:5a:
e2:f4:0b:9c:db:be:6e:8d:7f:a3:fd:5c:ba:d7:50:3c:fd:f3:
12:58:37:4e:28:ae:6c:ee:b0:32:68:6f:42:89:36:2b:b7:15:
67:c0:ef:d1:fd:46:75:44:fb:90:6e:4b:81:11:14:4a:db:b6:
38:df:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:03 2025 by rpki-client