Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File: ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier: 6f4jSzYL7btlCiqu9LF+PKP+1USEgeIVm43ebWqYcr4=
Subject key identifier: F4:4F:9E:9A:9A:46:19:30:A4:84:CC:10:79:80:9D:01:E9:57:5B:83
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial: 0194BBCE6561AF237A9E18A6098C7609EA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number: 0F58
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: /kUBlHDDC4UZRhBdfTTbhByGvWrE135vfKrL0T89Srg=)
2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:65:61:af:23:7a:9e:18:a6:09:8c:76:09:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=f44f9e9a9a461930a484cc1079809d01e9575b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:e4:1f:f6:8b:21:b1:8f:53:ff:d0:45:a3:
3d:f3:e6:fe:f4:e4:28:9c:28:ae:98:ee:45:e7:e8:
20:a1:17:66:67:07:37:02:76:5c:f4:0d:8b:b9:a1:
69:90:db:bc:5d:c2:8c:a8:97:27:43:65:9e:46:73:
13:44:fa:3a:66:43:4d:c6:a2:00:4d:ce:16:b6:17:
d8:d3:85:5d:de:96:f7:e5:b4:b4:91:34:b0:19:f8:
13:cb:52:f9:f6:5f:83:6a:93:5d:b8:dc:a0:a5:8b:
88:6c:2a:d1:6f:15:52:5f:6f:09:ac:4d:0a:fc:87:
0a:d5:20:bb:6a:da:be:8e:50:d7:6f:69:47:45:8e:
f3:cd:cd:bb:20:19:6b:80:a4:cd:ee:35:40:ba:87:
c5:f7:82:29:06:4b:a0:f0:3a:75:6f:40:6e:ce:4d:
6b:37:b9:ed:0a:e4:00:de:c1:aa:e8:f7:d4:01:4a:
d9:22:e9:db:8c:eb:44:5e:68:14:a7:e9:ea:07:00:
eb:f1:a7:b7:44:7a:6a:64:bf:26:7a:4d:3d:8e:9f:
4b:f6:83:9b:0b:26:32:d3:cb:6a:bb:7c:8b:e9:08:
41:6e:2d:e3:d0:e4:95:68:4e:fc:e5:3e:ed:29:0b:
28:d6:49:22:e9:05:d0:20:ae:86:93:75:68:cf:bd:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:9E:9A:9A:46:19:30:A4:84:CC:10:79:80:9D:01:E9:57:5B:83
X509v3 Authority Key Identifier:
keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ab:09:aa:7b:57:e1:f8:6f:1c:20:44:f7:72:8c:27:85:d2:
7c:d7:50:8f:5d:ca:af:64:9d:72:84:4d:c3:d0:9c:87:45:aa:
eb:0f:d4:84:3b:39:c4:99:b2:3f:06:1e:7d:7c:92:8b:95:91:
71:d4:68:6c:53:d2:34:6f:62:30:7e:bb:5d:73:f7:39:bc:55:
f1:82:88:92:99:ab:9b:5f:c6:4c:fc:4c:83:67:dc:76:4c:1a:
c0:18:50:78:a1:9a:56:64:d3:db:e7:0e:4f:a3:9b:a7:de:65:
2c:5c:25:2b:22:04:c5:b0:7e:e6:28:39:de:3a:5b:e2:22:9c:
81:0b:a3:8a:76:c1:78:80:77:57:9b:2b:b6:df:b7:a4:a5:79:
01:a3:26:8f:25:b5:6f:f9:23:c0:ff:fb:50:1a:c9:f9:bc:2f:
28:44:6c:b1:7d:b8:df:96:f0:e9:71:4f:84:bf:2a:16:35:2f:
a2:54:23:57:47:56:8e:c0:84:ac:07:21:9c:05:85:23:ff:c2:
eb:40:c5:aa:01:9d:bb:cf:e0:b6:ad:b4:79:f5:df:bc:5d:6b:
af:44:19:dd:0f:7b:31:ca:53:3b:15:31:2b:a7:78:df:a8:f3:
52:89:2f:1b:cc:ed:84:2d:23:a4:5e:a6:d1:9e:ee:01:bd:cc:
27:0f:54:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:44 2025 by rpki-client