Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: 3YrlAa4Du/8C7S9hJUsxsueY607iUy5gLAuW2iL01Kk=
Subject key identifier: 30:48:25:8C:27:83:6C:45:3D:91:91:57:C1:63:75:7D:CE:F2:E1:1F
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 0194BD85B896DA922860108EB6D5A2E90AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 1198
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: o6RC7zOZpQnXNPqp/ReNZvzS/hDOXtFciR1Qy7C6dmU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b8:96:da:92:28:60:10:8e:b6:d5:a2:e9:0a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=3048258c27836c453d919157c163757dcef2e11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:99:95:0c:a3:f8:5b:df:ac:04:f6:7e:46:
93:a8:9d:27:f7:4b:03:ae:cd:61:5b:df:7b:d2:10:
7b:35:30:07:b5:80:a9:dc:45:27:45:f8:23:66:28:
a4:0c:8c:e0:4b:60:90:30:9d:11:6b:95:f7:63:f0:
4e:0d:ab:96:04:23:9a:82:d5:9a:ae:f1:d5:ce:6a:
8e:7c:ea:d7:95:bc:d1:61:cd:d2:be:23:8f:b7:17:
82:9e:8d:b9:8e:a3:b6:8c:70:79:51:e6:53:05:e9:
67:9a:a5:f2:f7:3e:83:3d:0e:61:ec:e9:ea:6f:b3:
ba:38:42:e3:31:ec:10:b6:85:9c:ba:0a:de:21:73:
8e:e8:86:c8:a8:e1:a8:5d:09:3b:d3:d1:53:db:c2:
52:37:f4:cc:f8:f7:fb:9b:04:ec:a1:d4:70:ca:e2:
bc:e0:77:13:b3:90:ad:2f:72:e0:8c:b4:6b:85:e9:
e5:90:a8:51:83:37:15:2a:d3:81:31:c1:a6:8a:91:
c7:3e:5b:8a:4c:06:5e:60:74:4c:17:4c:13:a0:c1:
04:9d:40:2e:b2:62:a9:fc:6f:a0:2f:79:d0:12:fe:
f0:26:18:98:16:27:ff:9c:59:f8:6c:5a:4b:5e:4d:
0f:57:d6:af:1c:36:80:c2:a1:74:9d:50:15:66:d8:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:48:25:8C:27:83:6C:45:3D:91:91:57:C1:63:75:7D:CE:F2:E1:1F
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0f:c4:05:e9:9a:c5:87:d4:b3:db:d0:0d:2c:bf:61:4c:95:
07:bb:d3:dc:0a:55:e2:76:89:16:92:ea:8e:f8:47:5e:e6:64:
53:75:fb:ca:bb:06:4d:f0:9b:f9:74:a6:ca:a8:98:4d:f7:bf:
7e:1e:e0:f8:44:b4:a9:e7:f4:fb:64:ec:ec:15:11:a8:ab:ef:
fa:20:75:27:2a:01:2a:e4:56:40:50:08:69:8a:5b:c6:d9:ae:
af:cb:87:14:8f:1c:c0:4e:78:a7:a8:a5:54:56:06:2e:b7:30:
82:a6:83:2e:d6:08:17:69:50:51:1d:28:eb:47:13:db:60:08:
ae:38:c6:77:79:33:c5:df:8b:0d:90:89:9c:1c:52:d8:0c:0a:
08:80:d1:c2:91:35:9d:bc:b1:65:ba:3f:f5:5c:19:38:14:6b:
95:5a:1c:cc:10:1f:7e:ce:b3:2f:21:3d:28:5e:26:5d:eb:f8:
bb:97:13:49:61:5b:16:74:86:fb:9a:8b:6f:fd:d9:15:2c:8b:
70:c1:41:90:82:df:f6:d6:2e:2d:ba:6a:77:ee:c3:13:45:c3:
2d:f4:ae:da:84:d1:90:c2:7b:89:f3:e8:e4:e2:4c:21:33:f0:
cd:81:96:c7:46:c0:7d:27:43:10:2a:77:1e:37:76:f0:39:af:
2f:5c:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:30 2025 by rpki-client