Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: Rijd1mMnphGNadNzA2C02XGpl11Wl/Dmy/XdkFXBYrQ=
Subject key identifier: E0:91:9A:05:2D:32:49:33:D1:C0:FD:C0:DA:95:23:2F:EF:1B:2C:50
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 0194BD85AC707CAFD79684CDEE882B6D10AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 12EB
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: +aSUecZ5nhh7bmv+3s4Fl/5VCY2yVWyHVCPBo0V8t+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ac:70:7c:af:d7:96:84:cd:ee:88:2b:6d:10:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=e0919a052d324933d1c0fdc0da95232fef1b2c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:c0:33:35:07:46:14:7b:e1:c5:8d:9b:bd:
bc:e9:45:33:72:5a:dc:9b:97:37:74:97:35:bd:34:
72:14:20:a3:e5:14:d2:59:b7:c0:bc:3e:78:74:85:
10:6e:e5:93:2a:a6:9d:2b:09:68:ec:df:16:19:6a:
b6:6e:4b:90:ae:40:9f:4c:7f:38:82:5e:b7:c8:71:
6c:94:5d:84:dc:2a:7e:9e:ae:4c:75:ab:a8:96:17:
b2:d0:38:9a:e4:ac:78:4f:9d:1f:e2:6e:0a:f4:54:
8b:b1:ef:5a:85:71:3f:2e:ac:0a:98:05:1e:9b:5b:
68:4b:c1:a8:55:88:85:08:da:6a:56:af:93:77:e4:
17:4d:ef:4c:17:bb:4d:89:b8:82:47:92:df:c0:cc:
ef:b7:ff:f9:00:be:d3:c7:82:c9:ea:7c:34:9e:68:
7a:da:7b:ff:e4:5e:7e:58:70:56:46:c8:d4:5d:28:
33:08:cd:aa:5e:0a:27:f3:c4:86:89:42:c0:41:cc:
46:ad:50:4a:58:0f:57:63:de:fa:70:33:6f:f6:1a:
f3:ab:30:39:42:c6:36:de:fb:db:9b:37:85:b5:e4:
64:57:d9:d2:db:42:96:0b:cd:80:7f:6f:0f:67:b1:
ee:af:f5:da:39:86:8e:de:14:db:cd:2d:5f:18:e1:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:9A:05:2D:32:49:33:D1:C0:FD:C0:DA:95:23:2F:EF:1B:2C:50
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ad:c6:9c:85:b2:c2:cb:4d:29:62:14:f6:f2:8d:c9:5c:44:
93:6f:28:99:87:25:bd:78:fd:0b:70:80:b7:96:06:b6:b3:90:
71:ef:d9:53:2f:8b:f6:ff:55:42:bd:65:34:06:c9:8f:1c:b9:
c5:e1:67:eb:f2:06:29:b2:16:d4:e2:31:87:53:49:4e:79:be:
04:71:18:45:11:3e:1d:f6:82:0d:16:8e:ba:ab:51:d9:bc:a8:
fe:f5:6c:6a:6c:e2:5b:22:8c:60:e5:3a:b7:2e:67:b9:67:ef:
5e:10:e9:04:a1:f9:ac:53:71:01:e9:77:e3:73:80:1d:d3:ba:
e0:a5:dc:9e:ba:45:a9:80:30:21:8f:c7:8f:d2:f0:df:b2:8b:
aa:3b:4a:d5:89:a1:c6:69:92:1f:ca:d9:ce:4b:e9:31:e2:70:
2d:4c:5a:30:23:11:0c:02:98:74:3b:34:d6:bf:02:2f:98:90:
5e:a0:e7:63:a8:b1:1e:b9:9d:9e:cd:76:97:2b:0f:81:79:78:
23:4f:b1:c6:87:57:a4:97:a8:17:71:e2:ae:d3:32:c8:16:d0:
13:82:2b:64:d6:1b:67:19:db:8b:3f:95:28:c6:4d:06:3e:94:
89:e7:6a:e2:ae:f3:61:80:03:a9:f2:eb:3f:15:09:f2:0b:73:
20:b2:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:34 2025 by rpki-client