Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: F+14ug+3m08BmzxXcmbQltTR0sDxMl3iszznBhJbOVQ=
Subject key identifier: 93:B2:E7:88:B1:2B:A1:AA:A7:FB:23:DF:0B:79:6B:4E:08:48:6B:41
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 0194BC04EA6D5A94855B0AD73D5268591D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: yoLS2UmoAg03VLSesP+O073FFPOpG1AXdVx1M9QNS0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ea:6d:5a:94:85:5b:0a:d7:3d:52:68:59:1d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=93b2e788b12ba1aaa7fb23df0b796b4e08486b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:1d:6c:01:f4:65:32:21:41:98:fd:70:9c:
82:f2:58:58:72:ed:db:ff:77:ad:05:d5:83:df:83:
f3:a2:0e:7d:da:64:86:b8:fe:b6:bc:21:59:2c:a4:
ca:fa:a8:1e:74:30:65:07:47:99:7c:ef:bf:64:b6:
01:e5:f9:f9:13:85:d9:72:02:87:37:74:5d:ec:30:
ec:8c:99:c7:15:c8:83:9a:d8:9a:2d:6c:c1:41:05:
53:16:a9:37:1e:f6:d2:04:da:6d:ed:b0:1f:27:98:
ef:4e:02:c4:25:97:2c:f7:44:f8:ed:cd:07:be:53:
9c:01:38:72:e7:dd:76:bf:ba:d6:1d:f6:e3:68:91:
cd:fc:47:7d:80:5a:b0:7c:88:ba:a6:8d:0c:fe:c2:
98:70:db:e9:f2:4f:fa:31:71:41:53:96:bc:da:61:
d4:78:0a:1f:7c:3e:6f:d4:0e:ac:dc:1b:ca:70:fe:
ce:97:a8:97:b3:81:85:fa:27:2c:04:d9:2c:aa:e0:
6c:ba:aa:03:1e:d2:fe:29:b0:94:f3:7c:6d:ca:c7:
33:50:08:b4:a2:2f:e9:76:68:44:d6:a4:25:32:f0:
cd:7d:50:25:84:c5:78:08:8c:70:3b:2f:62:2f:12:
ec:d0:d4:2b:7a:ae:e8:70:87:b1:44:f9:2b:48:4c:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:E7:88:B1:2B:A1:AA:A7:FB:23:DF:0B:79:6B:4E:08:48:6B:41
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bd:c4:f8:66:6c:e5:44:f1:8b:e9:1e:33:d3:40:cf:60:00:
7a:80:48:53:15:34:22:ff:bd:97:63:8a:68:78:17:6c:77:69:
f7:15:97:80:e4:21:1b:15:b8:2b:5d:95:0f:b0:6a:3b:a9:7c:
79:1d:f9:04:59:87:eb:ec:20:cb:11:83:75:c7:bf:b3:68:9c:
23:5d:7b:1c:2e:36:71:43:26:db:47:ab:17:cc:de:fb:63:c8:
b3:19:e3:43:da:e7:98:31:ef:0b:76:80:95:9f:7e:96:83:08:
d9:20:12:e5:f0:c2:d1:b4:2a:7b:b1:a9:9b:77:84:31:ba:88:
e6:8a:90:db:5c:38:e3:9e:ee:a3:ad:2e:df:eb:35:22:2a:ac:
01:9d:8d:a8:6c:32:2b:82:00:58:60:a9:ca:0e:f3:96:3d:15:
c6:4b:1e:e4:f2:9a:42:c4:ae:90:35:db:a0:29:41:e7:05:a2:
4e:f1:3a:80:be:fe:a8:8d:5d:23:90:89:91:53:82:70:92:14:
4b:c0:2e:8e:49:0e:c3:b6:4a:ab:1e:3e:9f:a5:8d:27:74:c2:
4b:4f:0e:83:3e:25:1f:92:28:8f:ab:77:1e:6e:9b:a7:03:30:
91:c0:a7:96:f8:7d:53:29:4e:39:b8:04:39:31:48:89:ca:fe:
d9:2e:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:51 2025 by rpki-client