Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: VV5EIQrWmQyJtS/JJnYmGQNc61vpaXBo3sBp6uwhS6A=
Subject key identifier: 09:02:CE:7D:A0:93:A7:9E:70:38:5D:88:D0:A2:0E:CC:BA:B1:49:4A
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 0194BBCEC5ED94F33C4E7E00437FD424C040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 116A
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: SLcxbkHBxg5n8figJYrDMQZSygooy+5NMgK53972ojE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c5:ed:94:f3:3c:4e:7e:00:43:7f:d4:24:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=0902ce7da093a79e70385d88d0a20eccbab1494a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:54:ae:d5:ad:50:76:f5:55:ff:9b:71:cf:
2b:0a:e2:09:f3:58:f1:97:e6:71:ed:a2:99:eb:78:
a0:6a:95:24:a6:69:6f:a9:51:cb:d1:f8:75:fb:d6:
d6:51:8b:cf:f1:75:dc:47:b8:8e:a1:9f:e7:c7:9b:
b5:e4:55:59:0b:08:57:f5:d0:e9:8e:72:1a:a1:1e:
4d:e5:ba:00:86:97:38:95:f8:cf:7c:2a:5c:35:36:
a9:31:aa:07:a5:f5:42:23:8a:70:e5:45:1f:18:79:
d5:9c:bf:59:22:14:88:a9:85:aa:cb:66:f0:de:58:
de:fa:9a:a9:8a:1e:1d:1a:ac:62:88:0e:f1:27:03:
de:de:64:ba:85:de:3f:2e:62:95:cc:a7:ae:ec:e4:
32:f9:c9:91:ef:40:2a:6a:01:99:a0:17:b7:bf:4b:
72:b4:fd:4b:e1:17:bc:5e:3b:63:da:41:98:55:cd:
ce:2d:f6:84:99:1b:21:11:18:be:d2:be:bd:b7:2c:
d5:b5:44:90:c2:0b:e6:60:32:6d:d5:c5:92:b0:e5:
16:8a:e6:c4:ea:86:92:14:c6:3b:d3:4b:b6:83:51:
7d:e0:28:9f:d7:d9:36:ae:a3:9a:2f:49:dc:e9:61:
38:9b:87:3d:86:cc:03:58:8d:a4:32:fc:42:99:e3:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:CE:7D:A0:93:A7:9E:70:38:5D:88:D0:A2:0E:CC:BA:B1:49:4A
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c4:87:7a:1c:90:e4:1b:ca:16:d5:d1:0f:40:7e:99:b2:82:
84:c5:05:03:8e:04:ca:a4:f3:46:cf:2f:a6:6f:7d:5b:69:7c:
3b:49:30:da:5f:c2:6a:6d:bb:c2:20:0d:7f:25:f5:56:c4:39:
7a:2c:a5:8b:ef:e8:a8:dd:74:b7:71:2c:e7:14:9a:c0:f3:ee:
50:d7:bb:87:1d:cf:7c:ba:c5:da:73:b9:c3:1c:8b:92:da:03:
45:b0:5c:26:93:8d:a3:97:95:a0:e1:7e:52:d8:15:81:7f:8b:
c3:ce:e3:e0:6d:4e:03:38:39:2f:ab:0a:af:29:a5:2e:e4:a8:
dc:08:20:54:14:5a:59:32:66:c5:19:cd:f1:1f:a5:22:68:1f:
33:90:1e:22:e0:ad:13:89:88:55:aa:3a:23:15:1a:2b:88:d5:
60:d0:08:60:7f:19:d3:4c:08:1b:37:a5:ae:92:44:cb:fa:d8:
c3:ab:49:1e:47:75:f3:7b:e5:83:88:ff:e5:46:c4:5c:f7:54:
f8:8b:8c:03:68:99:fa:e5:1d:d8:b8:d1:b5:0f:cf:67:75:41:
f0:0e:07:b1:70:7f:40:b8:e5:f9:9b:3b:ce:aa:1b:fa:bb:dc:
92:a9:5e:61:9b:49:f7:4a:13:d3:59:37:bb:5b:9a:4a:1a:50:
72:3a:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:34 2025 by rpki-client