Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier: +RaF2cYs6dTmjMLQeOf1ngFJIKLTDsTP55onPIXj0i4=
Subject key identifier: A7:C8:A3:0C:31:D0:F3:D5:53:4A:EA:35:66:AD:B7:D0:3D:74:B5:E5
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial: 0194BD4E77C3D4D4983B5E43A0218D210997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number: 01EB
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: Kj9VfdUCgMk4aGgFNgZJ64WvAz4.roa (hash: B1YIPHashB6NFlEh7qNPbd/2OLMoFdhR39F9O5/IGts=)
2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: BMSCMQ4yFSIvGTUG7pxQiPRtF2M2LC3Dt+GqtFV0/+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:77:c3:d4:d4:98:3b:5e:43:a0:21:8d:21:09:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=a7c8a30c31d0f3d5534aea3566adb7d03d74b5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:5e:22:63:67:3f:e5:89:de:91:4c:c7:62:
93:ae:c5:0c:a6:6e:17:21:c8:22:90:f6:6f:45:19:
fb:7d:9a:ae:8b:be:a9:88:84:79:f8:d2:3f:d8:9d:
e3:95:08:3e:e2:44:71:ae:55:6f:26:78:30:1e:69:
35:9a:75:a3:17:9b:40:bc:e7:36:d2:6f:f6:b5:91:
29:40:71:95:d0:b1:fe:9c:e2:23:a3:45:3a:ea:bd:
1b:6c:8c:2b:56:e6:81:04:11:63:43:be:f1:4e:12:
cf:24:fe:47:11:16:09:e9:0d:51:a7:75:ef:31:ee:
17:bf:a8:a5:9c:c2:66:ac:94:1c:ac:19:14:61:5d:
f5:a5:52:67:1f:a9:88:0b:2b:57:2f:6b:b9:85:31:
de:fa:c9:b8:cb:b8:fe:0f:0d:21:96:db:50:ca:6d:
a9:d1:7b:84:42:f2:b3:16:44:89:03:7e:83:a1:79:
ac:25:33:aa:96:74:2a:ff:78:c6:d5:15:a1:fd:32:
10:47:1f:e7:d4:d6:29:18:4d:dd:01:85:0f:57:fa:
52:48:7e:c3:df:9b:61:fe:a0:89:c0:54:be:47:84:
ef:82:b0:1c:7d:b6:7f:63:c8:fc:0e:91:14:1b:c8:
47:e9:f7:6f:03:95:f4:cd:72:39:2b:f9:f0:66:7b:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:A3:0C:31:D0:F3:D5:53:4A:EA:35:66:AD:B7:D0:3D:74:B5:E5
X509v3 Authority Key Identifier:
keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f3:ea:09:b1:59:42:b4:ea:72:82:c4:f7:bd:89:f8:17:a1:
9d:14:93:25:0d:06:89:24:b7:ba:8f:72:53:90:a8:a8:3b:dc:
20:fb:1f:be:ec:5f:9d:fa:d9:30:ba:e0:1b:8f:b5:7c:f6:2a:
4d:df:b5:ce:da:bd:4a:91:96:f9:db:39:9d:50:84:84:59:24:
8e:fc:8f:4e:35:eb:2c:63:d9:00:9a:3b:0e:1a:39:e5:c3:8e:
f5:f8:70:a7:82:58:c0:3e:b1:a5:82:cb:f9:20:12:9f:41:91:
4d:ba:3a:08:37:85:15:8b:bc:54:c3:70:fe:41:46:49:92:8b:
42:a1:3e:52:3f:ba:1d:83:82:db:88:de:32:9e:6c:26:8c:2f:
a8:c0:db:95:89:10:06:2e:87:d9:f1:c9:55:4e:40:e6:20:5c:
47:d3:c5:f0:bf:f4:51:8f:84:b1:aa:82:44:2d:7f:4d:4d:1f:
d2:4a:77:43:e4:5c:f5:5a:70:40:dc:4b:a5:fd:e2:4b:f0:db:
85:c6:14:5f:a9:a4:72:90:bf:3c:ab:84:6b:50:f4:9a:47:2f:
9b:1f:05:21:3a:73:58:f0:65:bd:01:33:45:5a:4b:d9:e4:75:
45:f2:4e:7e:c1:f4:c8:e3:e7:27:f4:16:a9:4a:87:7b:37:07:
d5:1b:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:02 2025 by rpki-client