Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: noxsm315EJ8/J5fUL8hr5oXLBinPCEfkL1+FE063lxM=
Subject key identifier: 6D:CD:F6:84:F8:43:31:FC:01:2A:48:B9:4D:CA:9C:92:09:D5:46:15
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 0194BCE083ED97D9A5B550491B772C43760D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 13C5
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: 2OQgTAaWt07hoex2V25pwCJsocIDx/NsET3wDQzfp4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:83:ed:97:d9:a5:b5:50:49:1b:77:2c:43:76:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=6dcdf684f84331fc012a48b94dca9c9209d54615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:87:93:d8:ff:a4:07:38:54:79:92:5b:32:
00:a7:67:e9:66:92:09:dd:f2:d8:bb:ec:7e:15:5f:
26:26:67:92:a7:50:de:c4:e0:ec:8a:98:6a:17:8a:
1d:a2:9a:07:cc:bc:d0:60:15:57:2c:c5:94:74:77:
98:9c:9b:ee:ed:95:a1:e5:23:40:f8:26:f2:7c:d0:
c5:0b:d1:88:71:8e:34:2b:9d:e8:61:e6:1e:d1:42:
20:f6:5c:d7:1a:6d:12:67:bd:6c:1e:b4:a1:05:b5:
3d:37:79:eb:11:d3:59:c6:12:ae:b4:a1:3c:4a:09:
18:d3:81:5a:b3:22:36:b2:c0:e4:4b:2b:9a:66:f0:
4b:0c:72:29:8c:d4:df:ec:c6:85:94:81:ed:8a:fe:
96:4f:3a:59:bd:93:c4:3f:ec:ea:ed:0e:ac:8e:eb:
19:04:e2:46:eb:76:c8:37:83:1e:61:e2:cf:58:ae:
29:dd:8a:07:55:1d:88:8a:2b:15:25:00:2c:a4:61:
6a:da:6f:67:19:ab:f6:b4:50:bb:1e:99:54:c9:03:
cf:0f:6b:de:1d:94:9c:53:e3:4e:59:90:0a:58:1f:
22:d2:43:56:1f:81:99:cf:68:74:fd:0d:37:c2:9f:
cb:5a:4a:2a:b4:97:14:02:1e:b7:ed:66:41:83:b4:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CD:F6:84:F8:43:31:FC:01:2A:48:B9:4D:CA:9C:92:09:D5:46:15
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f1:77:d2:56:2e:f4:c3:a1:af:e4:9e:d9:24:1a:80:d3:e8:
69:c7:d4:b8:4a:fb:f5:7f:49:e7:20:62:bf:c5:34:3d:27:f7:
c8:cf:e4:1b:c5:0b:ec:b1:59:8b:7a:9c:72:5d:86:64:21:a4:
e6:d1:04:8d:92:3e:ed:2e:17:37:75:b4:2d:1a:5f:80:cb:f0:
5d:1b:7e:93:fd:1a:b9:a4:1a:d0:04:39:6d:8b:d9:a8:27:ba:
6a:36:0e:60:f4:aa:be:1c:83:49:be:05:4a:6f:c9:79:2c:79:
67:0f:24:ca:64:92:4d:12:0d:2d:9a:14:a9:f5:ae:b0:83:e1:
40:4d:3e:1c:53:ca:a7:d4:18:92:9d:a2:eb:ae:9f:ee:23:5a:
da:2b:fd:f9:09:fd:b6:35:29:b8:87:db:f2:25:77:3f:ce:7b:
a7:47:a5:ad:9e:e7:4d:b6:a9:e0:a5:74:fc:2d:4d:cc:2a:5c:
fe:e3:14:04:5d:3b:12:d2:5a:99:7a:5b:de:0d:a2:24:41:0d:
fc:72:2d:ea:f4:fa:74:f2:8c:cb:32:1b:fe:fb:cb:79:c3:d7:
8c:30:11:5f:16:63:ca:c4:e6:f3:56:e5:3c:f2:85:31:82:c3:
49:82:a4:d0:57:57:ec:e6:c7:b3:d2:74:0d:b7:99:95:83:25:
43:7f:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:16 2025 by rpki-client