Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: M4oQc/CVyG8lg4EhA9xEFXecjsY/sS4Id1xrYxBt6AA=
Subject key identifier: EC:7E:D2:60:0F:AE:1C:A8:7E:39:2C:6E:2F:D2:D9:C3:C7:77:D2:13
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 0194BC3C33194DEFF1BB4235D3C41113ACFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: oPK1Rnro0EHrFpNF/IyQX9DvC/QHdZCc2PEPQZGzXo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:33:19:4d:ef:f1:bb:42:35:d3:c4:11:13:ac:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=ec7ed2600fae1ca87e392c6e2fd2d9c3c777d213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:52:b3:e4:c8:57:d9:f3:c1:0c:48:62:ca:
69:12:83:48:1e:08:a8:85:da:af:e1:c2:ea:61:81:
1a:aa:0a:05:66:7a:c0:b4:17:b4:53:f5:8c:a8:6d:
b0:85:af:9d:53:94:e1:5b:74:3a:82:94:a8:29:29:
c3:51:65:be:e5:35:35:a0:4d:65:cb:fe:6c:ba:92:
86:a5:b8:70:7d:6c:88:af:79:df:58:5d:1a:38:52:
d3:7c:1d:7f:0a:54:ab:2c:a7:68:37:32:b2:a6:ef:
ce:30:5d:be:9e:a8:e3:38:3e:63:f9:bd:79:3f:e1:
f3:32:ca:8f:ad:ee:e5:41:2c:d8:1f:3a:ab:62:54:
6a:15:4f:26:cb:b4:3a:32:5a:e3:bc:de:c7:f5:a8:
5b:56:a7:80:5b:91:ee:5d:6f:53:2a:c2:f9:58:99:
00:24:01:31:be:35:2b:03:15:bc:f5:57:e7:8d:42:
9c:f5:73:7c:eb:33:92:b8:ed:81:b5:2a:6e:e9:d2:
b6:4b:65:90:19:81:4d:e1:7c:44:18:4a:b8:b5:51:
70:03:00:4e:19:a0:8d:db:9c:cd:68:fa:6d:60:c8:
ac:5a:a9:d9:9d:6c:32:19:ed:6e:b9:6e:97:e6:70:
58:e1:2d:ed:32:6a:ca:ad:1f:63:01:e3:58:76:b7:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7E:D2:60:0F:AE:1C:A8:7E:39:2C:6E:2F:D2:D9:C3:C7:77:D2:13
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8e:df:d1:f8:18:89:7c:ab:d9:ba:98:6d:bc:d3:11:27:f5:
91:4a:98:3b:4e:d1:ba:b8:83:82:e1:42:6f:59:72:c6:8e:ec:
46:31:68:e4:b5:b6:e7:91:f8:d4:22:e8:a7:67:f6:2e:2a:7a:
04:e5:41:cc:53:d2:57:be:bb:28:dd:7c:c2:df:8d:09:e8:b5:
c6:78:4a:b0:57:36:3a:8a:96:0e:e8:eb:39:9c:86:f1:4a:7b:
9f:70:4e:b7:74:c7:3c:fe:29:5d:e2:49:3e:cc:be:2c:b6:3d:
5b:e8:36:7b:2d:6b:10:94:66:b7:a5:0c:15:46:d6:73:95:c8:
af:a5:63:b7:c2:f8:1f:db:95:88:f0:98:93:7a:9b:8c:8f:38:
b8:2e:2c:dc:31:75:dc:3c:92:80:d0:02:61:c5:b5:d0:36:8d:
bd:ba:d3:f3:1c:c4:c2:4f:ca:52:9c:66:67:db:f2:a3:7e:67:
4d:13:8e:4c:90:0a:f4:a2:58:6b:d4:51:16:ad:09:88:ed:b9:
f0:7c:0d:55:23:64:12:fd:44:0d:60:8a:9b:e2:af:5f:1b:fa:
fc:61:38:b7:3c:3b:6b:56:8d:2a:78:61:4d:77:1f:12:7f:3b:
19:c0:a3:89:c0:32:06:57:a9:fd:bb:e3:bd:ce:71:64:24:0c:
f9:60:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:37 2025 by rpki-client