Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: aV3MEjyEV2Ns7xfCD+2wcHotc2OC6hAm5+WGMzUggoE=
Subject key identifier: 57:D6:20:51:5C:C9:1B:BB:9F:04:78:4E:37:08:BB:A8:E9:3F:C3:29
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 0194BC04B051820676B843B67CAFCB15B0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: b4vrp4ic1RBKTPJOSz8+zP72MMdaaIauFcpO8jvshHU=)
2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b0:51:82:06:76:b8:43:b6:7c:af:cb:15:b0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=57d620515cc91bbb9f04784e3708bba8e93fc329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:3f:b4:6a:85:63:40:67:31:b7:b3:b1:c5:
e7:13:68:a7:6a:07:eb:89:aa:6e:c1:e7:44:92:35:
99:2c:03:5a:5d:a8:f3:c6:24:11:70:69:16:4e:87:
dd:68:09:5d:5c:82:43:5a:c6:27:43:b3:9c:ee:f3:
53:d5:94:4e:dc:65:3c:c1:19:9a:17:52:cb:00:2e:
20:a1:e4:aa:ce:cf:5f:30:12:07:42:55:dd:c1:b9:
d6:6f:d9:fa:37:25:c1:e4:95:ba:cf:8a:8a:49:89:
6b:a7:57:3d:c4:40:d2:e7:49:23:95:a0:1f:61:67:
a8:e3:41:6a:6d:a6:29:30:7b:03:db:0f:87:30:da:
bc:da:98:6e:7a:cb:27:45:a8:a7:e4:bc:2f:19:37:
29:98:2e:61:6f:6c:ff:45:e0:6e:72:64:2e:a7:4d:
d0:fb:44:9f:e6:98:e7:c7:23:62:f9:2e:54:e1:60:
fa:d8:f2:40:f7:18:04:9a:fc:a5:49:d3:27:51:2c:
9e:28:75:f1:a5:d2:c9:a5:6e:50:66:cb:c1:2a:2a:
3f:96:78:e6:fe:b5:6b:28:95:d8:72:f1:14:40:b0:
b9:9d:e6:95:79:87:4c:a8:ef:49:c2:8e:c5:93:03:
46:4b:38:56:e6:b7:80:41:01:68:12:db:ce:da:70:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D6:20:51:5C:C9:1B:BB:9F:04:78:4E:37:08:BB:A8:E9:3F:C3:29
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6b:71:fd:9c:50:73:c0:02:10:89:bf:7c:d0:d0:da:eb:14:
dc:21:8b:7d:da:40:a9:92:1b:62:13:c4:5c:eb:92:48:fd:2d:
08:ce:8f:62:33:8a:07:35:5d:f4:df:cc:3d:eb:8f:ee:cb:2b:
b0:11:44:c9:7d:bb:5c:d1:fd:fe:2a:c5:7f:da:59:d4:b3:b1:
2a:0a:ad:79:06:0c:95:e3:8b:cb:e0:0a:9d:82:99:85:df:cf:
5b:f0:f4:54:90:c3:6a:88:74:e8:f6:81:ff:df:17:a4:63:5b:
7e:81:53:41:81:e2:d2:f2:de:1c:ac:05:3f:e5:9d:52:62:11:
d5:c2:21:e1:79:94:f0:69:91:19:62:eb:c8:5b:27:ba:49:32:
12:13:ec:66:8d:15:53:32:8e:3b:97:17:d9:a1:d5:c6:0d:e4:
98:f5:0d:58:f2:ea:2e:4d:47:6b:e1:c1:61:83:6b:7c:0f:3a:
21:0e:cd:cb:e3:8b:73:75:29:f9:60:d8:b3:21:24:b2:1e:31:
e2:52:c4:c8:57:de:d5:0a:fa:e0:5c:d1:54:d3:d5:de:79:71:
49:52:0b:08:84:23:b0:e7:6a:08:05:0b:e9:3c:ba:49:cd:7f:
3b:d8:bd:02:4a:cb:74:dd:54:25:78:8b:14:3f:f4:ab:1a:85:
cd:f2:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:32 2025 by rpki-client