Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: mUoIxLET9HDPpKQcf34X7x6H1X/4kA0uBPK9+s7mI2M=
Subject key identifier: 9F:6C:3E:0D:F2:2A:8E:F5:E6:1C:B5:A2:9B:A2:E1:BC:2F:E2:0A:F4
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 0194BD859FA49EEB9834EBC9C84AD4690F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 10E5
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: hlsj1Y5eLB2iB++lsmMkH0ZBwuYub/jpt9AMLhIVOPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9f:a4:9e:eb:98:34:eb:c9:c8:4a:d4:69:0f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=9f6c3e0df22a8ef5e61cb5a29ba2e1bc2fe20af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:8f:56:88:fd:33:9f:07:06:0a:67:54:0c:
d2:fe:75:b1:eb:9a:a9:48:4f:c4:6e:9f:3e:8c:bb:
58:f0:8f:37:fa:89:fd:cc:cd:fb:ab:b3:2a:72:77:
a5:c9:12:72:d2:e3:99:ff:e2:34:8c:9a:56:5a:3f:
52:64:53:42:5f:e4:60:11:38:68:7f:7c:60:e5:0d:
e8:6d:48:37:49:f6:59:20:3a:b4:fd:fd:05:de:23:
eb:19:c0:91:20:8a:1e:b7:cf:9d:4e:86:6c:24:94:
f3:ad:f9:63:37:c5:b6:3b:33:a8:ae:3b:3b:16:85:
82:b8:f6:ad:63:94:f4:ee:6d:75:c8:1d:81:61:c4:
d2:a6:0a:2f:02:07:fd:3a:99:fa:7f:60:bf:e6:c2:
21:20:b9:3e:d5:87:a4:2d:f9:77:18:27:4f:69:ff:
75:a8:ec:a6:fe:4b:a9:5d:d6:eb:85:46:c0:12:3b:
75:71:1b:ff:05:27:48:8a:0f:39:21:f1:1a:00:65:
3f:55:9a:3d:8e:1b:54:09:16:76:94:39:41:e5:7e:
06:1a:7f:db:45:87:9f:00:a1:e3:33:23:11:6c:4e:
bb:98:fd:7c:0e:ab:eb:56:e2:b8:bd:58:13:58:c9:
0e:40:f3:d4:9f:84:5d:1e:61:6d:4a:f6:0d:29:c8:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6C:3E:0D:F2:2A:8E:F5:E6:1C:B5:A2:9B:A2:E1:BC:2F:E2:0A:F4
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:54:52:2d:b3:3d:35:64:70:a2:6a:8f:aa:49:c6:01:15:37:
f5:70:8e:77:f1:3d:6d:0d:1c:64:8d:52:d7:7a:4b:70:ff:d1:
4c:c6:e0:35:a3:eb:a7:3b:d9:31:dc:9a:a5:6e:d3:6f:49:28:
a7:f5:75:91:e8:be:bb:9d:36:73:a0:30:b1:fc:c1:89:43:e7:
57:4e:d7:bf:12:2a:04:b5:13:82:d9:00:f9:db:c4:60:6e:2a:
6a:af:86:51:97:8b:e6:4e:73:fc:3f:d6:a0:eb:b9:ec:0d:53:
c7:ff:8d:12:fa:84:82:f4:29:37:66:45:70:88:c2:f7:9a:af:
77:f5:15:a6:8e:5e:8b:db:8b:0d:ac:13:44:97:3f:19:cb:b8:
8b:ce:29:e2:01:b2:7e:48:03:52:7e:e6:9f:13:ab:0b:31:7b:
7f:3a:7c:77:d1:f2:51:65:21:3a:12:0c:6c:97:40:8b:ab:64:
28:d4:ae:74:9f:0d:64:d4:6c:7d:c2:ba:ea:4a:1e:5f:2c:26:
a8:2a:99:39:1d:2e:f7:30:4f:d8:2c:52:23:fc:de:59:95:b7:
38:86:4e:b1:82:c4:d8:e5:37:42:d2:07:c1:74:fe:ce:98:70:
fd:13:5b:37:ac:2b:91:48:f8:7a:67:df:f8:40:6a:3c:62:8b:
1b:2d:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:20 2025 by rpki-client