Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
File: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft (raw, json)
Hash identifier: /slvl/PkZb7WXuLLWjMxSLTraoYeRnVjHzOX/WVgv+c=
Subject key identifier: 35:64:89:F7:40:4D:2E:B1:D5:A2:13:A9:08:33:CD:11:17:42:0D:2F
Authority key identifier: CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
Certificate issuer: /CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Certificate serial: 0194BC3BCB4F75311DE62EE34C25D17768D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: DnTbZNQqyk7b1Kpp-h3yl2scJwY.roa (hash: TJ12NvtCptbjwY91XKfeBV5bJZ6ugQZ1nYOaUhjOlp4=)
2: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl (hash: LTHuw2ZdtI69WoYMMoWKPzbTQjph/djwfn7Xacxx7Rc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cb:4f:75:31:1d:e6:2e:e3:4c:25:d1:77:68:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=356489f7404d2eb1d5a213a90833cd1117420d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:59:e4:7e:28:41:85:79:89:8c:1d:e5:70:
8b:72:f8:dc:25:d4:3c:99:0e:46:42:5f:3a:b2:c4:
5e:1a:8f:ed:66:9f:66:f3:dc:07:da:9f:0e:35:31:
66:7d:aa:6c:d4:e4:7f:45:f6:b0:e9:88:09:46:e7:
2a:08:e2:36:f8:c3:d9:72:39:7b:c7:62:a1:ab:ab:
5b:11:51:5e:1b:b2:7d:a8:d8:74:15:56:4a:d2:3f:
3b:18:bc:19:0a:26:b9:8c:e8:ae:6f:66:93:94:31:
52:df:e0:eb:01:37:5e:b4:85:d3:bd:49:86:06:b3:
5a:f5:88:d1:59:6b:0a:b3:bd:f5:c2:18:d8:0a:5d:
f4:f6:b0:14:f4:1d:42:4f:09:90:13:59:ef:18:23:
20:74:b3:27:3b:66:16:65:b8:6f:77:ac:af:e3:4e:
7a:10:de:0b:11:5b:56:0d:cd:b4:a2:f2:d4:58:0a:
3d:81:a9:6c:81:49:37:fa:51:6d:10:25:ec:5d:80:
f4:59:82:ef:5b:8e:3c:30:b1:15:72:11:68:e9:90:
de:2c:30:45:be:9d:5e:af:f3:67:77:4e:e6:f0:c2:
57:a5:a1:19:f2:2c:db:5b:8e:a2:c3:22:f7:25:46:
df:0f:92:fc:5a:f3:b2:47:10:c3:d7:78:3f:a3:ff:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:64:89:F7:40:4D:2E:B1:D5:A2:13:A9:08:33:CD:11:17:42:0D:2F
X509v3 Authority Key Identifier:
keyid:CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b5:0a:b9:63:b1:34:ed:74:20:76:06:b9:09:de:d2:c0:5d:
90:36:de:87:ec:6d:e2:ad:07:6b:02:1f:20:2c:c7:7c:39:7d:
72:fb:6f:eb:6b:2b:f0:34:f8:f7:02:6a:2c:f3:da:ea:23:6e:
b5:4a:19:99:73:53:6b:0c:e2:47:8a:b1:12:4e:c6:b5:56:e4:
9f:ca:0f:1f:ab:bc:4b:6b:b7:63:ec:7b:92:ee:d7:62:dc:33:
cf:27:72:0e:a0:b9:23:21:4a:6b:3f:ec:8e:ed:3f:79:be:74:
df:46:f6:f5:9a:ea:0b:87:ad:86:ad:00:cf:6d:ec:fa:37:d5:
34:db:b0:dc:ef:01:fa:89:87:08:9a:7b:25:26:67:a5:22:07:
9a:4a:ee:41:7b:ca:3e:64:4b:4b:7b:ec:df:66:95:ad:41:a5:
13:67:f2:1e:c3:f3:a5:ca:67:22:6b:cd:07:16:27:2d:ee:88:
24:4e:63:f1:df:77:81:df:61:9b:99:ef:a0:da:fb:dc:1b:49:
63:f8:38:4d:3f:61:ce:34:87:3d:e0:79:fc:bb:45:70:ca:fb:
0c:12:19:6a:c0:92:f5:dc:cf:c6:c0:d1:7f:a0:6a:2a:13:9b:
73:c6:02:49:a3:7d:28:1f:c9:b8:8c:43:2a:51:3e:88:11:30:
e5:7a:3c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:14 2025 by rpki-client