Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
File: ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft (raw, json)
Hash identifier: wLdiK1wBhseXdHswDb/jL0bEO0ogZzWH5NZ+XajklhU=
Subject key identifier: 99:2E:29:A9:96:E4:E0:46:A7:B0:00:8B:EF:04:BA:1A:17:A9:86:FC
Authority key identifier: 65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
Certificate issuer: /CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Certificate serial: 0194BBCDB9A75A9474CF0FB837A2997CC1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
Manifest number: 1109
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: 8kMIrB2jb8gg78UkBaVIwqUSCE0.roa (hash: xbQQow9nO6qCX7kiXFv0czICWAW1Nd9JxgJNIyP6ryA=)
2: ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl (hash: em9/1QI3kChOGzNl+aYjN1YGoZ62lW0fzysNafPDjkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b9:a7:5a:94:74:cf:0f:b8:37:a2:99:7c:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=992e29a996e4e046a7b0008bef04ba1a17a986fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:f4:22:00:86:40:cb:ee:bf:d1:b9:87:3b:
78:66:b5:80:c7:31:16:00:31:7e:43:a8:49:86:23:
6c:1a:05:0f:08:95:86:68:a2:2d:17:ef:5e:79:39:
a1:5e:a8:6c:90:76:8a:d1:51:29:e6:4d:10:0f:e2:
91:89:ef:bb:07:88:fd:50:d4:ae:06:86:cd:ea:97:
0e:04:29:63:4a:40:86:f4:eb:14:da:c2:c0:8f:44:
38:23:77:3a:b0:f3:18:e9:7b:0d:bf:4d:35:8f:d4:
e4:6e:29:f8:5c:7f:2e:b9:5d:c1:b3:7b:0e:62:6b:
45:c7:2c:29:ec:60:ff:b4:42:0e:4d:1b:99:d3:de:
01:fd:b5:9c:70:a6:a2:8c:42:e8:de:84:69:30:78:
ab:be:44:a2:b8:ac:38:9b:cd:ae:62:45:e3:b4:7e:
11:a8:7d:f4:58:f2:01:3d:26:b0:ce:2c:7e:d9:93:
81:4c:91:ef:9d:e3:0d:cb:07:af:a9:45:80:52:c9:
8e:0d:b7:d4:98:e6:2e:19:3e:4b:c1:78:18:70:7c:
ff:ea:b4:c7:ec:b4:3b:98:3d:f3:19:82:90:74:ba:
47:d5:83:bd:c8:39:08:3a:b6:3c:59:dd:15:73:dd:
55:a4:fd:3f:fe:4f:f2:c6:59:84:76:bb:d4:c8:1d:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:29:A9:96:E4:E0:46:A7:B0:00:8B:EF:04:BA:1A:17:A9:86:FC
X509v3 Authority Key Identifier:
keyid:65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1a:13:52:82:c3:41:94:1d:b1:a8:34:0d:16:fe:3c:49:0b:
e4:87:51:66:0b:fb:cf:95:ce:23:84:8a:b7:84:f6:5f:2a:90:
1d:b9:a2:81:07:87:4e:42:f3:98:26:7c:8e:e3:6f:0c:26:b5:
65:ae:5e:96:db:b0:f5:3b:56:2c:5e:2c:2f:4f:1e:ee:5f:9f:
7b:2e:a1:75:af:f6:8f:37:99:84:d6:42:0d:e9:79:6d:4e:73:
d4:9e:64:71:ac:df:b9:a4:dd:dd:97:bd:10:5d:40:62:6a:f5:
b9:40:ae:e9:e8:8a:89:12:bb:80:96:4b:09:87:e0:d0:2e:f1:
d6:9a:c7:c6:7f:91:f1:bf:48:d7:1f:f4:c1:1c:b5:99:fc:cd:
5f:b8:af:3a:d8:10:e9:ff:e5:7d:85:d8:54:19:90:f2:9f:01:
1a:d5:33:b4:86:f8:4e:c4:a8:0e:ff:6b:a9:16:a4:ab:ef:e8:
53:c9:19:ac:13:77:35:6d:c5:4a:5c:e8:52:f7:08:4b:c7:50:
c1:76:07:5d:f5:89:46:71:d9:f0:1b:ae:67:e9:ed:6b:d3:f4:
1d:a5:ff:3b:20:8c:a6:08:70:98:31:83:2e:4e:92:52:6e:4c:
0e:29:71:62:25:86:6f:40:0c:b6:7b:b4:f3:29:f5:b5:76:95:
39:f3:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:59 2025 by rpki-client