Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: cBlqS4mVYN/PvqKWjCYbK+ji9Zd1CMIKKN3QZzrF9rc=
Subject key identifier: A2:D4:1B:8E:BD:14:BA:90:CD:BB:FE:C4:0B:90:5A:2F:BF:1D:69:5B
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 0194BC3C59D8E68C6AD102DB126610D9F6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: ck76iftT6cvYGztwGRdaF0HoiTrmUvOUdm9QJuYfmBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:59:d8:e6:8c:6a:d1:02:db:12:66:10:d9:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=a2d41b8ebd14ba90cdbbfec40b905a2fbf1d695b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:e2:e9:96:39:42:2f:00:0f:91:36:62:8b:
40:f1:43:55:07:67:31:0b:aa:3b:61:93:ea:ad:b8:
95:e3:f8:91:4a:4c:06:43:d5:04:cc:61:d4:df:c5:
30:5b:2f:5f:99:28:df:93:f6:da:0b:7d:fe:5b:90:
99:b2:b2:c9:ce:c4:6b:8e:2a:5d:aa:1e:9f:a0:8e:
d4:a6:6b:dc:18:48:4e:ed:c9:5c:68:2b:fd:50:f0:
1f:01:3c:71:3d:74:02:2b:58:9e:64:cb:65:76:aa:
92:4d:0c:f0:c2:e3:a7:c0:6b:20:6e:70:e7:35:75:
49:5b:2a:d0:9b:37:0e:bc:7c:ed:6b:b4:69:28:86:
58:c9:f2:67:ff:8b:a5:01:d6:0b:85:29:fb:c5:62:
8b:06:70:6a:19:eb:d8:09:d3:c1:9f:21:01:0a:78:
92:0f:25:b7:92:b1:d5:1f:d7:d3:67:6f:52:d1:e6:
1c:32:be:3e:96:ee:8b:c9:f4:ca:a2:b6:41:92:76:
9d:ca:2c:79:2f:2e:8f:66:8e:d7:3e:c5:c1:6b:a7:
79:c9:9e:22:a1:65:b4:f3:b2:b1:a2:0a:39:cf:59:
8b:2c:b5:17:7e:27:64:a2:89:4b:9f:57:3c:a6:f1:
e2:a3:45:60:2d:85:d0:3b:12:77:cf:79:f5:a1:94:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:1B:8E:BD:14:BA:90:CD:BB:FE:C4:0B:90:5A:2F:BF:1D:69:5B
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:41:8d:ee:b4:40:77:32:cf:9a:27:73:c9:06:ea:a5:a1:45:
fd:1d:a2:44:e3:c4:5a:4a:7f:5c:e4:10:e5:19:06:bf:8d:15:
72:26:03:80:75:8e:28:0a:ae:e5:b2:ce:18:9c:0d:73:96:ba:
42:64:4e:84:1d:40:01:72:e8:6e:21:ee:a2:61:28:fb:18:bd:
84:78:b6:ea:e8:ed:44:82:d6:75:48:1c:95:b8:cd:0f:d8:cb:
8c:8f:79:bc:79:3c:74:e6:22:07:98:72:2b:81:ca:5a:02:58:
5b:5d:bc:1c:39:67:09:82:d6:31:fd:84:0a:67:16:ef:7f:3b:
71:b8:7f:25:9a:f7:7a:66:03:3e:8a:0f:f6:4e:e9:34:cd:60:
ea:df:44:97:79:08:35:f1:62:cd:9d:85:78:22:72:eb:db:f8:
a7:54:33:81:a6:d1:bc:8d:a0:4b:85:35:b7:c1:73:40:9e:5d:
d6:a8:4c:76:0c:31:0b:ab:cb:28:f2:91:9e:ee:a0:55:e4:71:
27:64:f9:d8:f5:8b:bb:46:e2:36:f2:50:ee:4e:57:34:a8:9f:
c6:3d:41:7d:53:da:ea:9d:7b:66:ac:e5:ed:da:8d:d7:f3:4e:
12:07:2e:a4:52:06:5e:f6:c0:d7:44:f3:76:13:2c:84:45:64:
0f:ee:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:19 2025 by rpki-client