Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: /GTBrj/5GT9eWY1nDJ4xt+fbd3yvddwG+aKq2rEjcrU=
Subject key identifier: 29:0D:E1:F9:B2:9D:45:B3:74:46:EC:7C:8C:13:65:07:4C:B7:2B:E3
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 0194BCE09FCF8FA667F9EC17C1A65566441D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: GPxTd/OkbcIea0otzqg4vSvHt51uzkEIGuZ6CpHwe8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9f:cf:8f:a6:67:f9:ec:17:c1:a6:55:66:44:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=290de1f9b29d45b37446ec7c8c1365074cb72be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:de:fc:38:1a:88:ee:4f:81:f2:fc:48:df:
99:5b:80:79:22:c1:31:80:28:30:19:d2:df:0f:ab:
19:13:ea:92:3a:f8:31:ce:27:d5:bf:b3:cb:08:be:
1f:03:5d:c5:8f:1e:49:5b:f9:81:e8:66:29:a4:37:
19:c0:fd:95:0e:bd:e2:19:78:ae:fb:85:f9:42:af:
37:aa:24:42:48:4a:17:bf:51:ac:e9:a5:72:e5:db:
b0:b7:89:05:08:9f:1d:b0:c1:05:21:d0:1c:c1:54:
e9:fc:11:92:4b:a3:96:6d:eb:d7:f8:90:6d:13:e7:
43:34:57:d1:ec:30:7f:1c:3f:e6:b8:d9:9f:50:cf:
2d:bd:6e:08:8a:83:bd:32:4f:d3:65:33:e0:3a:18:
75:93:8a:72:da:9a:d1:ca:e3:ee:68:b5:87:92:3d:
7f:98:af:bd:34:13:58:5a:78:63:43:e6:be:d8:a2:
7f:6d:b7:3a:2b:6c:71:b2:d9:2b:99:fe:23:73:16:
58:6a:4a:7a:df:78:86:8c:a7:51:c2:3e:83:e2:2f:
6b:78:80:07:a7:26:59:41:c0:bd:4c:79:b2:2c:39:
dd:ed:e2:1d:ad:06:c9:74:65:52:1c:c8:3b:63:1b:
41:7a:b9:ac:10:38:43:cd:b8:2f:d9:05:b3:26:e7:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:E1:F9:B2:9D:45:B3:74:46:EC:7C:8C:13:65:07:4C:B7:2B:E3
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d5:78:fc:5e:ff:38:32:35:15:e7:7c:da:dc:87:b1:4c:dd:
bc:d1:32:6e:b1:69:0b:a9:fb:16:1b:37:ce:b9:94:4b:ac:28:
b2:11:53:e3:71:22:57:f4:f1:e5:91:d9:9a:d7:e3:82:cb:5a:
1f:7a:61:15:ef:f9:9d:67:30:d0:aa:a7:ed:f3:5b:2e:f7:41:
ac:0d:75:32:47:3f:d0:6d:21:02:c2:71:2f:7a:8e:3a:8c:e7:
7e:dc:86:fc:fa:7b:90:7b:bd:9c:95:4e:e7:fc:0c:71:cf:db:
fc:d8:76:90:94:db:da:4c:2b:94:7f:a5:d1:2a:d0:2e:89:d4:
8f:4f:e5:c4:10:51:21:4d:3b:71:4d:c7:d5:5a:e7:52:d9:01:
f0:5e:c8:5e:c0:5b:44:0b:c4:74:0e:8d:56:5e:82:01:30:b7:
1e:21:71:fc:d4:9c:08:1f:58:d9:36:9f:28:8c:7c:c2:e1:f9:
e8:31:63:85:b1:2c:cf:2a:00:5a:4d:aa:04:5c:51:61:09:5c:
e0:6c:a3:4f:23:5c:2b:d2:ea:75:63:f2:f1:d1:91:79:f9:6e:
82:d9:a0:8b:1f:01:fd:63:d6:43:42:93:18:74:71:3f:73:a0:
6c:aa:9e:f7:bc:ba:2d:5b:1b:87:e0:0a:4c:9e:2f:03:50:f1:
fb:98:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:09 2025 by rpki-client