Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: 8yHrZM/1SCdQ1963TaQ+MVo0uUcvT30WJIB61Ezkuc4=
Subject key identifier: ED:EF:9F:FF:CB:EF:58:1C:84:F1:02:32:D5:C1:2A:A2:BD:A5:AC:D4
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 0194BCE0BB41D1C07717F56C9C441AE34C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 0CF4
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: ik+KAM/soXiZY2K9/jlSYSoWyCAt5dnOExt9ARmg99s=)
2: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bb:41:d1:c0:77:17:f5:6c:9c:44:1a:e3:4c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=edef9fffcbef581c84f10232d5c12aa2bda5acd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:13:11:6a:a7:05:c1:3f:66:8c:aa:ff:cf:e5:
6d:d4:b1:7b:da:48:23:c8:3c:7c:38:ba:c6:30:9b:
89:e1:47:bd:bd:b2:36:f2:5b:e5:55:29:3f:4d:90:
c2:0b:84:84:1c:a6:e6:ab:d5:90:f9:0c:bd:f5:80:
1a:c2:ac:3c:a6:06:6e:3c:55:34:6a:0b:2a:52:26:
5a:4e:2f:92:7a:91:a6:19:57:8d:e5:3e:b7:83:42:
23:02:76:b0:fa:88:54:ce:ec:29:2c:1d:d5:b7:26:
e8:54:49:fc:af:e4:6f:fd:43:b3:34:26:e1:62:9e:
10:d2:fd:cf:bb:2b:6d:3f:5d:f6:90:11:b1:fc:53:
f7:fb:90:d9:9c:86:50:b2:9c:95:d0:8c:70:27:77:
68:04:42:59:6d:e9:0c:e9:92:81:d7:de:c9:58:dc:
72:82:ba:91:18:4e:ec:ed:21:9f:70:32:a9:91:fa:
a3:43:1d:e8:8d:ad:9d:7d:df:37:43:e4:43:12:37:
d5:25:3d:d2:aa:9d:09:a7:ad:6d:1d:8e:53:b9:38:
1b:9f:10:68:30:89:36:fa:e1:76:aa:ba:c8:d7:72:
67:58:df:41:de:1f:7c:ef:73:77:b3:4c:dd:9a:7b:
7c:60:04:29:88:9e:b1:bd:a1:df:8a:fa:6e:3f:0a:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EF:9F:FF:CB:EF:58:1C:84:F1:02:32:D5:C1:2A:A2:BD:A5:AC:D4
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:79:aa:24:7e:9b:41:5a:1e:44:d2:71:3d:45:9c:c6:f8:7a:
7a:61:2e:5c:f9:a9:30:f2:86:6e:2e:57:c7:35:95:e1:88:5e:
86:bd:f6:9a:a3:3c:33:ce:f4:12:3e:5d:79:b9:7b:21:5c:d2:
78:1d:f3:6c:37:01:a1:c9:a7:8f:77:13:53:88:39:16:4d:cb:
88:7b:c4:7d:f5:9a:78:29:dc:69:a8:bb:cb:08:69:b8:a6:1f:
e4:b3:c3:a8:55:10:08:3a:a8:02:1b:f4:c8:df:88:a6:77:66:
9c:e1:54:56:7a:1d:85:df:6b:0d:60:cc:7f:34:4e:62:09:e7:
3a:ae:66:66:5f:91:83:22:c7:d5:09:3c:b5:4f:53:51:b4:fb:
94:fd:1a:6c:b5:a3:b2:d0:63:e0:72:1a:8b:af:d8:a9:e4:47:
2b:02:c1:9a:5a:72:e7:98:7d:b3:43:1f:46:b3:2f:30:48:3b:
9b:9c:fc:18:bc:5f:28:7f:2c:8a:61:82:48:23:18:49:8f:0b:
35:34:fd:77:91:7f:c4:b7:1f:81:2d:d3:f3:0f:5b:d3:a7:58:
b1:01:24:b9:16:f0:62:3b:e7:59:7b:b2:36:f1:09:9d:86:2e:
46:5b:70:25:d5:4b:f6:32:47:19:b8:a1:a7:07:f3:5c:62:72:
94:0d:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:03 2025 by rpki-client