Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: Zike+r62GsZKZ9d2VVvF0KfIuACk0qQSObEzNEHYvzQ=
Subject key identifier: 80:69:1D:E2:28:94:60:BB:76:D0:93:45:3B:D3:21:C6:06:5B:22:03
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 0194BD4E885570B5FC312EBC21ED3684DDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: RA9kR943QDfswVQ2De2E5cFSYaU.roa (hash: jCT5nXHXTc0Nn3QbV8+Qje22n9CHMzdTyZ/tDlKS5Ck=)
2: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: kxGiXXHJz1UBWydmrAXHP9ICZygh5cMlVPK4diLZDS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:88:55:70:b5:fc:31:2e:bc:21:ed:36:84:dd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=80691de2289460bb76d093453bd321c6065b2203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:90:1d:87:b6:16:83:bf:ba:ce:67:9d:70:
7b:21:1e:1e:aa:07:0d:f5:b4:21:e5:09:34:7b:25:
0f:fd:32:d2:92:7b:db:81:ad:34:40:3a:fa:1d:bc:
b0:7c:6e:b9:c2:33:8d:af:54:f0:9c:bb:68:39:09:
58:68:13:8d:0c:55:c0:6e:6d:76:09:25:52:ca:66:
4d:db:aa:31:af:0a:96:22:6b:23:93:38:af:0b:9d:
fc:89:f9:97:80:a5:5b:4b:2a:f6:0b:1e:82:36:c3:
63:6c:72:43:bf:20:14:d8:87:73:49:c7:74:d6:ef:
01:fe:35:61:f1:1f:5b:2b:8e:25:51:b9:e8:25:d2:
c2:6f:eb:6a:e2:d4:cc:b1:77:bb:96:a2:b5:5a:05:
cc:6b:f1:05:8f:30:73:2a:6b:e7:40:ed:c7:51:78:
ca:b5:5f:c5:10:79:13:6c:ff:71:db:76:90:6f:5c:
9e:7e:51:9d:27:89:4b:cd:21:55:19:d2:2f:aa:72:
cd:38:d7:cd:1b:5e:05:0a:57:49:d4:8d:0a:f1:23:
cd:ed:2b:a4:e2:ae:3c:ff:4c:bf:01:8f:e9:91:81:
90:f6:dc:ee:83:51:a2:ae:12:78:c4:34:a7:82:6e:
77:90:7a:54:bd:57:50:5d:17:50:2d:9f:b6:86:c4:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:69:1D:E2:28:94:60:BB:76:D0:93:45:3B:D3:21:C6:06:5B:22:03
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7b:90:97:d3:4c:7f:43:82:f5:96:21:64:1b:f3:10:cd:d4:
3e:45:97:01:19:b5:af:ff:13:c5:3c:a4:94:2e:47:89:59:18:
65:ed:60:59:25:76:5b:79:24:2b:41:45:c5:23:2d:fa:b8:39:
9b:b2:e1:f6:69:e9:3b:24:86:73:07:e8:13:2e:4a:ad:26:39:
7f:d8:18:e7:7e:ab:45:48:1e:22:5b:aa:05:5d:d6:78:e3:e7:
54:b5:40:8d:70:1e:25:88:c1:17:95:0c:c3:fa:c8:1f:67:52:
5a:ed:ae:54:fc:dc:66:95:61:35:27:b7:9d:6f:31:48:ce:76:
82:83:5d:d4:ff:7d:d7:9a:a6:0a:3b:11:ce:e4:31:5e:35:a1:
0b:dc:e9:bf:21:a2:45:96:10:5a:59:d5:75:fa:76:9a:f1:21:
b6:91:c8:2f:bb:50:3a:25:d5:8c:be:82:9d:25:2f:cb:33:c5:
76:c6:c2:53:21:e2:f1:d8:71:30:33:a3:6d:46:07:bb:fa:43:
66:ec:91:c6:ec:ef:21:74:a9:80:54:30:bb:98:47:da:36:de:
7f:b3:db:eb:ab:45:a9:cc:f7:9c:4b:47:3f:02:a4:94:66:b0:
4d:4b:6d:4f:a8:7a:ec:18:8d:69:5f:52:e9:73:18:5a:df:17:
9b:94:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:30 2025 by rpki-client