Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: SLsIjZbmDJ02LUzGN0cRFX2DGe33s7WvL1xo5rQznrc=
Subject key identifier: DD:CB:92:5A:37:AD:A3:81:42:68:EA:AF:64:30:AD:0B:39:F4:2C:0F
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 0194BBCDBB0354D0A80D8D98A2F8F34695F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: a3gQGP1eGtWXYTfAqMECzWz1ihiJQYOrCR7cNo4wLDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bb:03:54:d0:a8:0d:8d:98:a2:f8:f3:46:95:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=ddcb925a37ada3814268eaaf6430ad0b39f42c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:99:dd:90:b5:e6:ce:bf:ea:2a:23:05:82:
8c:85:66:2e:c1:f8:f0:14:b3:77:d9:f6:45:b0:3f:
f1:e4:c4:98:da:8f:55:e7:e7:d5:99:31:c0:2a:f4:
4b:2b:58:ab:5a:46:3a:90:30:38:09:4e:21:12:04:
af:47:42:c3:f4:50:35:cf:2a:bf:7b:03:35:18:6b:
9e:b8:63:8d:c1:16:cf:a3:91:68:a0:ab:d4:87:d6:
e4:bb:88:8f:f4:12:1a:37:59:62:24:05:5a:53:0b:
67:6a:86:a1:21:d4:72:5f:e3:a5:b0:16:b0:8d:c7:
62:b5:dd:43:ea:2b:72:34:41:61:59:75:8a:4f:3d:
e4:9d:fd:e8:ae:f2:b6:b8:a5:47:f0:c6:d0:03:8c:
d6:ce:c3:f3:0d:bf:99:fe:8a:4b:eb:ec:c3:e1:87:
2b:3c:4d:4d:86:cd:29:67:6b:74:d9:e2:1d:59:59:
3f:1e:a2:e7:62:4d:4a:55:d9:e9:19:3d:52:f8:8e:
91:0e:a6:a7:8c:94:6b:4f:0e:51:c9:66:81:b9:13:
3c:af:25:4d:d9:29:86:76:f8:a2:8d:87:af:4b:bd:
77:2d:d3:18:42:97:60:40:ee:78:73:e4:ea:d1:82:
b9:f4:ec:a2:e4:51:17:0b:1f:bb:18:c7:23:9c:60:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:92:5A:37:AD:A3:81:42:68:EA:AF:64:30:AD:0B:39:F4:2C:0F
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b5:ca:64:51:8d:07:b4:f4:be:22:44:07:a8:19:17:37:59:
dc:dd:b2:e8:8f:6f:f7:9f:de:6d:4c:a4:3b:5f:28:25:9a:34:
6e:29:bc:19:b0:de:36:d2:86:11:c7:ba:fb:f1:ed:b4:3a:2c:
29:4a:13:76:80:0a:a9:4b:d5:87:17:54:44:97:5c:58:83:a4:
bc:f2:b7:b2:12:da:dd:29:44:1b:63:c2:02:fe:53:00:b6:ba:
d3:bc:1f:29:50:ca:bb:57:5a:ae:69:54:bb:71:a5:f3:42:7c:
4e:99:d5:d8:9c:4b:48:04:4d:0f:5d:f7:f8:6b:b2:5f:44:31:
da:f2:c4:db:3c:dc:30:ef:3a:2e:de:d1:e5:ef:7c:fd:e4:09:
92:8c:93:bd:b8:76:ca:b4:8a:d7:f1:62:68:0e:d3:02:8d:6b:
26:0d:8b:e7:80:a3:6d:eb:4b:49:a9:1a:f9:ec:7b:4f:07:a4:
e6:04:5e:b8:31:f2:5e:75:a7:27:7c:88:be:4a:0d:44:46:7d:
4e:78:d6:c0:70:4e:a0:cc:cf:8b:f8:8a:c6:b0:0e:37:1b:02:
4d:dd:55:e9:d8:3b:4a:58:b8:08:b0:06:e1:e1:ee:e0:22:79:
de:21:95:65:a8:26:8c:e5:55:c8:d8:8d:2a:b7:1f:07:c3:c4:
85:c0:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:53 2025 by rpki-client