Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: SG3U3cFgNTLquzQugegoHgkWgBJhCKtHnTnIOc2A96o=
Subject key identifier: 78:C6:DE:E1:E6:4C:18:A5:EF:84:4D:2F:52:29:AD:CE:49:57:AF:80
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 0194BC72AC47393A4BA0E24755256DB8B7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 0218
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: ks8iWy1FilD9kiiIcgz0a9tcMkE.roa (hash: xbOsfKBCXele8prh5n/9hZCYsk36tRLAfw19ggRv57E=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: 8ZwHpGtNkZI6vybXE1eJ1FwyqNruFFsCG2qM+2VENkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ac:47:39:3a:4b:a0:e2:47:55:25:6d:b8:b7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=78c6dee1e64c18a5ef844d2f5229adce4957af80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:9a:31:32:19:a5:9b:3f:c1:d9:f1:25:14:
3e:ee:c1:14:6d:c0:4f:e7:fd:93:3a:e1:ad:2c:05:
c0:bf:9f:10:ca:11:f6:f1:ac:e9:aa:bb:ab:77:be:
52:ab:58:1b:10:28:16:8f:05:0a:50:17:dd:1e:00:
cf:f7:99:98:a0:84:c1:e6:9b:fd:05:08:44:00:bd:
30:0a:c9:7b:81:b6:3f:cc:9a:bb:2d:0d:34:d6:be:
45:bb:94:e2:c8:0f:91:5f:a6:0c:7a:bd:45:a4:74:
42:f2:40:7b:42:02:5c:51:c7:63:07:58:05:92:37:
b3:43:b8:a4:6a:67:78:5c:23:97:de:fd:6d:0b:fc:
3d:04:62:75:7d:3e:69:8f:99:55:03:30:08:bf:39:
97:ab:b5:8b:ad:7f:51:9e:d6:ee:66:c0:df:59:c6:
25:71:59:40:c8:50:ac:21:56:df:3f:09:44:d1:48:
20:e7:cb:fe:09:55:c4:b7:4f:ec:6a:0c:72:53:5c:
ad:48:c4:a1:b9:3d:7d:2b:2e:67:7d:30:8b:83:bc:
76:26:43:42:df:4d:5e:92:96:7c:bd:66:75:39:64:
36:61:25:67:17:67:83:8d:07:48:9c:07:4f:dc:53:
1b:84:c1:1e:eb:85:64:64:a2:2f:e6:d8:e4:ab:ab:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C6:DE:E1:E6:4C:18:A5:EF:84:4D:2F:52:29:AD:CE:49:57:AF:80
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:df:99:c5:54:75:32:23:5e:5d:5b:70:cf:bb:c4:90:c1:36:
88:40:74:39:93:86:88:7d:db:ad:c2:33:80:ae:37:cd:6e:3d:
cc:ca:84:3d:e3:a3:4a:35:be:ee:d2:fa:8a:67:ea:21:13:18:
44:99:a4:a5:12:5e:f6:ed:6b:5e:37:bd:e4:f1:01:cc:ed:e1:
8e:97:cd:8a:8d:d2:0a:62:76:a1:eb:be:66:4e:e7:dd:ba:c0:
e6:ec:db:04:64:88:4f:62:34:e0:a4:94:db:89:3c:05:03:a8:
20:3a:58:16:f0:c2:83:0c:2c:a9:08:ca:36:91:c9:fa:35:06:
53:f3:cc:f2:fc:71:3f:31:67:fc:57:c0:e7:f5:d1:35:2a:42:
1a:e3:04:46:db:bd:9b:7a:cf:41:63:e1:42:75:19:f0:44:00:
1d:8b:dd:e3:54:44:c3:46:09:70:bb:32:db:56:a0:8f:ee:d1:
b6:42:97:c7:50:f3:a1:b9:f9:4f:29:7c:6a:25:f5:57:4d:6b:
ca:eb:a3:41:c5:de:80:19:e9:00:a6:a1:49:6d:1d:dd:1e:62:
68:de:8c:7a:18:76:c9:85:65:a3:34:f4:dc:d7:df:76:06:f7:
56:98:69:94:85:7f:59:75:3e:5b:c2:83:42:72:74:a8:8b:93:
3c:3b:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:48 2025 by rpki-client