Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: Kzekw9P1r+sfG+NqqcOJC+8c0Pu2KeRkiimcB3zAWjA=
Subject key identifier: AD:F7:57:EB:C4:95:C3:EF:1B:CB:68:2B:EB:5C:2B:7A:1D:93:AB:7C
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 0194BC3C87A8D8687CEEC32FD72DFA660956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 0B60
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: c0UDF77YneOEpDbpE_XbzKIY8Uk.roa (hash: foV69gLO281sdub8JnH51RHuvFTq6y1JtigYK6aR0Ho=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: HEIcYWN18/wQKueqzMF1p6lMoqnsgCmDpwia+HNpJrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:a8:d8:68:7c:ee:c3:2f:d7:2d:fa:66:09:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=adf757ebc495c3ef1bcb682beb5c2b7a1d93ab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:c4:3e:11:48:a8:39:40:93:ff:32:90:90:
23:6f:0b:3c:42:f1:ab:09:79:22:35:30:71:16:0d:
f7:db:90:97:cd:7b:47:71:e3:d1:42:84:39:ce:86:
45:5d:29:84:c5:f2:cb:b6:15:c8:8a:62:ae:28:e1:
2e:94:e4:c5:d7:3f:d6:64:52:4d:88:3b:30:10:8d:
a7:aa:8a:dc:ff:1f:2b:0c:5c:1c:a9:a2:5b:c4:eb:
8f:b4:df:c0:7d:20:f5:b6:35:31:4e:c4:f5:4f:82:
a0:57:d8:dc:55:ca:5d:e1:b7:80:4b:b3:a5:42:4e:
68:c8:1b:f5:4e:f5:a8:59:1b:95:7d:e6:cf:df:ae:
a1:92:f6:0c:ca:55:8b:df:97:8d:2d:19:75:37:b0:
81:64:9c:d5:f6:81:b0:6f:43:d3:cf:d0:e2:4c:3a:
3a:b6:a8:30:8a:fe:99:3d:bd:c7:33:e6:28:a0:b6:
f7:c6:14:d8:27:d4:8c:00:d1:ab:b3:49:5c:7d:dc:
ee:99:70:47:ba:92:01:70:f4:12:77:29:93:85:30:
4d:a7:09:45:63:e1:28:5f:ee:c4:96:f8:aa:1e:f6:
71:ae:c6:33:2d:7e:8d:a0:bc:15:38:4f:5c:5c:8a:
22:75:c2:7a:59:08:1e:0f:35:e1:21:1e:55:e9:d6:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F7:57:EB:C4:95:C3:EF:1B:CB:68:2B:EB:5C:2B:7A:1D:93:AB:7C
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f0:bb:0b:81:6d:52:e3:59:0c:b4:a4:67:7e:74:26:3e:2f:
6e:f8:11:fa:e8:4b:df:0b:96:46:c6:56:6a:fb:36:cd:67:ed:
c1:e2:cd:58:2e:a4:91:90:9c:f2:fa:19:fb:f8:a9:7b:83:1b:
56:43:11:24:ce:67:84:9c:8b:d9:7a:84:2f:0e:10:74:38:90:
f3:53:c4:ef:e0:f2:07:4a:b0:c9:be:fc:e5:4d:6e:54:71:9d:
95:10:30:b5:c8:6a:9a:b8:7e:6e:81:3c:b5:43:38:30:ee:89:
96:26:41:b8:6a:3a:13:70:69:44:2f:0b:50:d7:f8:af:60:2e:
8b:c0:5e:3c:68:7a:9e:a3:02:af:b2:a2:f2:06:74:72:77:4c:
e7:34:f3:c6:c2:c7:ec:50:c1:d0:bc:af:24:23:14:b2:dd:63:
f9:c1:e2:fd:34:ec:f7:96:cf:85:74:3a:09:a7:e2:4f:cc:bb:
84:68:ba:eb:d0:42:84:10:90:a6:96:de:dd:a6:c1:5d:de:e6:
b4:5a:0a:56:b8:41:63:01:fc:f8:37:22:c5:aa:09:be:cc:03:
09:65:bc:00:03:30:e9:4e:be:89:f9:23:78:38:f0:46:e0:40:
38:56:dd:c9:05:b7:ee:41:f5:ce:d3:b3:36:67:71:cd:d3:b7:
22:e6:39:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:05 2025 by rpki-client