Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier: ukEA/tSNsD43KlUyqve91n78KLqZbQx8NNKqIVrs9KA=
Subject key identifier: E9:95:2E:26:A4:B2:C7:E8:C5:13:C7:63:85:4F:5F:4D:F1:16:51:7E
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 0194BC04C3FDEF88AD69E5B372D26FC18099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: VI-dWQcY37xUT1kUINfwRf4ITOY.roa (hash: /K+hbbpjK6p98+FcPVOwuQPFXuHi6fBZ7x81PS6CuTg=)
2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: GgGDZ2J6HMKp1g9BIrH1DJCkhkVOoJW97V9vCFpTUDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:fd:ef:88:ad:69:e5:b3:72:d2:6f:c1:80:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=e9952e26a4b2c7e8c513c763854f5f4df116517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:9f:09:0d:2c:59:9b:9a:85:92:0b:92:e6:
2b:8f:ba:c1:62:4b:a9:b8:8b:1a:c6:41:c9:27:c7:
47:be:4b:0b:95:34:8e:e8:0c:f2:05:1c:cc:fa:d9:
e1:39:dc:4a:f2:ce:6e:69:79:a3:f7:22:87:38:b7:
08:97:65:a6:8e:f0:da:8e:83:c8:6f:95:23:57:ee:
49:94:94:be:32:dd:26:d8:07:d3:a1:8f:b3:a0:bf:
70:0e:d7:94:ec:bd:fb:a5:fa:0f:23:e6:ce:0b:43:
b8:e4:b6:8a:97:8e:f4:d7:a5:51:fc:83:85:fa:8c:
1a:d1:77:1a:08:d5:04:c8:8a:ab:fe:df:ce:f4:88:
61:ed:f4:15:d7:8d:5e:63:93:5f:9a:1f:79:63:e7:
cc:45:87:f6:e9:82:95:e1:2c:48:4b:31:ed:36:16:
41:f0:47:e1:69:1d:48:e5:3b:ef:32:03:7a:aa:b3:
aa:46:7c:d2:85:b8:13:b7:fa:b7:2d:7f:ba:94:5c:
99:18:bf:6d:94:7b:cb:72:53:30:89:20:fb:5a:3d:
68:f9:04:ea:35:60:83:02:71:8b:0d:e7:8e:6c:c3:
ef:d6:d7:61:d3:7d:f9:9c:0c:58:6e:bd:ac:53:9b:
56:91:00:e5:f1:7a:bf:95:ee:11:3a:23:cf:b3:47:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:95:2E:26:A4:B2:C7:E8:C5:13:C7:63:85:4F:5F:4D:F1:16:51:7E
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:57:c8:52:52:23:af:86:7b:d3:2f:33:55:68:f7:e7:97:
71:01:ce:b4:52:ee:fa:d1:51:48:c0:39:39:d6:ca:c8:85:11:
f3:d4:b0:15:14:2e:37:3b:33:3f:79:8b:21:da:93:b7:3b:77:
e0:6b:4b:d5:00:a9:67:fe:17:ae:59:2a:7a:f9:76:0e:4c:41:
c5:2f:88:12:40:63:cd:90:33:ee:54:f4:02:0f:6d:4c:9f:dc:
d5:e4:d8:64:f3:ef:73:5a:fd:b7:26:7e:d3:b6:6c:60:8d:ad:
ea:c7:f4:0f:ce:6b:32:8b:cb:3e:8d:e2:ec:0b:25:a7:5e:63:
7e:8a:1f:4f:fe:2a:dc:45:44:c9:6a:db:5e:f3:ce:2a:95:c4:
9c:ee:d9:8f:64:64:6c:bf:33:e5:74:2f:15:6c:6a:db:6c:04:
92:e8:39:62:0c:7c:4b:3b:76:89:5c:5a:d2:cf:16:31:7a:03:
d0:50:b5:86:bc:83:68:b3:22:63:03:ac:1b:59:40:b0:51:e9:
1e:f2:b8:80:4c:8c:ec:dc:86:30:e0:63:98:31:a4:1c:34:06:
13:04:0b:1c:4b:2f:76:6c:5d:e6:87:f4:ed:11:fc:e5:a7:f2:
6b:0a:3b:6b:bf:3c:05:8b:7f:f9:9d:77:c9:24:46:00:8d:28:
a7:26:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:57 2025 by rpki-client