Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
File: ZnGexRbxFUDaTE5-S39bN32f0ls.mft (raw, json)
Hash identifier: PRWx+Nr5xRSik1jginYmZvqelToAp5Pq2u0oTsv0RLc=
Subject key identifier: 11:C6:F8:D5:95:05:05:C1:A2:FC:DE:4D:A5:CB:C7:1A:B6:EE:7E:D0
Authority key identifier: 66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
Certificate issuer: /CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Certificate serial: 0194BD17E494131118593C0A2AEDB89B65AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
Manifest number: 078B
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: ZnGexRbxFUDaTE5-S39bN32f0ls.crl (hash: xhVOj0ZrcIaZoojH8KRj0norU5jigYhe0j282QABFsU=)
2: m2QATzNu0SRSUTMmrV_23UYzqCU.roa (hash: iD9hVdOJHc5GBYHSyd+djF2Re6JSu/DsX978dRZjYtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e4:94:13:11:18:59:3c:0a:2a:ed:b8:9b:65:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=11c6f8d5950505c1a2fcde4da5cbc71ab6ee7ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ca:17:03:cb:92:f8:90:57:58:d0:bb:25:36:
c9:12:67:50:c8:33:af:c1:f4:6d:14:f7:9b:ef:6b:
dc:b7:9e:9d:2b:d9:63:55:2d:41:36:4e:f9:1c:99:
ca:cd:4c:f9:d2:f3:4d:5d:16:d5:06:0f:77:79:a0:
53:4c:e2:12:38:36:c8:53:83:de:8b:08:f4:2b:30:
b0:9b:7b:b9:68:52:4a:06:0e:8f:12:41:3f:d3:74:
5e:ec:97:51:bd:39:50:bc:b3:c9:77:a6:9c:6a:75:
5c:31:ac:87:41:ee:e3:60:96:73:b7:f6:3c:33:ab:
5e:a3:9a:5a:14:c4:74:4c:8f:0b:17:9b:c7:8f:25:
74:38:56:42:7a:9a:74:0a:37:9c:17:0e:2c:52:99:
a3:e9:c4:48:da:03:42:c8:b8:07:8b:9d:f9:46:23:
77:15:d6:d2:98:2a:f1:dd:9c:53:48:ce:c0:34:52:
44:e2:b9:8d:ec:6e:ce:59:aa:21:3f:01:73:76:fe:
f9:ec:89:5e:e9:4a:9a:85:1d:6b:fc:de:66:d9:ff:
7a:e8:07:65:99:7a:63:3a:84:36:c1:83:f6:8e:6a:
e1:eb:25:65:3c:d8:4f:e2:29:9c:aa:a1:e7:ae:c0:
2f:81:b4:59:4a:1b:7e:7e:7c:8e:bb:25:a3:76:97:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C6:F8:D5:95:05:05:C1:A2:FC:DE:4D:A5:CB:C7:1A:B6:EE:7E:D0
X509v3 Authority Key Identifier:
keyid:66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:08:e1:e1:c8:25:68:ee:8a:88:82:1c:c9:e8:46:7a:46:73:
41:bf:fa:58:d5:57:6f:83:d0:fc:0a:33:0f:d9:4a:fc:2b:a6:
0b:bc:4a:38:6b:a3:d9:ec:5f:5c:1f:5f:47:b3:55:1c:5e:0a:
23:64:ae:3b:d6:dd:7b:22:7e:07:ac:dc:2a:16:15:d4:4d:a5:
0f:02:dc:e2:7c:47:92:34:b5:ff:db:04:f2:5c:6f:f4:5c:a8:
30:27:52:77:3d:e6:f5:2b:7a:ce:23:3f:de:a3:98:a9:25:e4:
18:9e:f9:a3:72:51:b2:98:16:be:28:e4:33:98:1e:c5:71:37:
49:63:0e:ed:d2:f4:b5:7a:e9:5f:7a:95:5d:21:70:8a:5e:d0:
53:44:71:12:e0:42:06:18:fa:47:e9:0e:57:d0:3b:7c:5b:1d:
f3:37:8e:c5:f6:fe:2c:61:65:e0:25:1f:66:59:cb:45:cc:1b:
81:e2:53:e6:22:80:19:74:f9:8d:d9:01:64:14:4a:0e:66:59:
ec:27:ca:c3:df:8f:64:de:43:63:47:9d:99:ec:ee:b4:97:3a:
81:b8:53:51:10:e5:9b:10:4a:74:c7:c4:7a:f8:aa:43:48:01:
9d:02:32:e4:29:55:86:2f:21:18:57:f6:cd:d0:8c:51:53:5d:
14:ca:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:49 2025 by rpki-client