Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: w7OPVPxfV0hkhwjPJ5O29I0liyi8E2gYf+Q7/qSAdDI=
Subject key identifier: 90:66:65:70:07:14:DA:D5:B1:33:19:E6:64:92:5D:48:F9:CC:98:19
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 0194BBCE4110AEBF3029AF7F872C5767EF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 112A
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: tvDDs2Y/8StMlMkqaSaLY6xNZt9HizkWzGxEwFrj1iQ=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:41:10:ae:bf:30:29:af:7f:87:2c:57:67:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=906665700714dad5b13319e664925d48f9cc9819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:90:97:74:49:81:83:20:d3:61:b0:bb:1a:
b0:02:d5:df:ed:ec:54:ad:fc:13:e0:ac:fb:b9:7a:
3c:fb:f6:a7:36:10:33:94:a1:3a:84:b5:1d:ab:7d:
10:52:6b:0c:41:7d:0b:7c:d7:d6:6e:42:40:96:53:
fa:7d:6a:81:43:21:a6:3b:7c:a2:3e:41:f9:aa:ec:
a1:55:07:3f:58:f5:92:ab:bf:b3:61:83:42:7a:41:
3a:42:8e:5d:48:af:84:27:90:48:f1:eb:4b:32:c3:
e7:a2:87:29:ff:eb:a5:18:d4:56:f7:b7:fd:0c:b7:
48:7f:b1:b5:28:a3:0c:5d:2f:66:03:4f:b9:0c:f7:
13:9b:4c:b1:ff:0b:dc:42:be:f0:59:82:f0:2d:7b:
fd:4b:09:5c:dc:3e:a3:6b:18:3b:27:ed:a5:88:fe:
78:46:19:7c:46:39:2c:40:60:f0:76:1e:6b:b6:fa:
f4:09:7a:72:28:b2:4a:f5:ec:9e:b3:33:99:66:7e:
2b:e7:26:04:99:d4:17:6a:dd:9e:39:7f:3b:fe:40:
2f:2b:54:6d:73:79:22:43:35:05:8c:cf:ad:4a:f7:
42:00:a5:4a:60:1e:5d:9a:85:39:2a:5d:fa:2c:4f:
e0:7c:a0:0c:9c:5d:27:e4:20:3a:b8:e3:28:06:c9:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:65:70:07:14:DA:D5:B1:33:19:E6:64:92:5D:48:F9:CC:98:19
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ab:e2:52:8c:92:c1:29:bc:ee:94:b6:60:38:48:91:14:67:
c8:d2:4c:ab:7c:23:29:ce:c4:06:f1:ee:0b:78:81:0f:cb:99:
79:29:ef:7f:a4:60:63:17:10:ed:e6:cd:52:1c:86:7a:bf:8c:
c8:09:cc:65:c4:9d:24:7e:d1:5b:d6:b5:87:e0:f0:74:26:34:
72:1f:3f:94:b8:f2:a4:ca:63:64:e6:2a:1d:c1:75:76:34:74:
10:67:aa:91:59:1c:c1:7f:17:fe:a6:cb:a0:17:c9:1b:0f:a0:
84:b7:ba:32:ea:2a:c6:7e:f9:ed:ed:b4:c9:7c:b9:e7:85:3f:
70:60:2a:f5:e0:ed:10:e2:dc:77:c7:de:41:0e:5f:0b:b2:5a:
9d:f5:83:70:9c:78:f5:18:de:56:67:f4:9c:83:5c:33:e1:14:
38:07:1f:20:95:96:68:71:70:86:0a:7d:28:3c:0b:9e:8e:12:
71:94:14:49:00:33:ef:4e:fe:27:bb:b5:25:aa:cb:e3:28:5c:
05:80:bb:70:38:14:4e:73:96:c9:c5:0c:fd:be:54:6b:b7:35:
75:a3:6b:26:3f:99:d3:9f:1a:83:4f:07:c8:84:df:5f:60:ec:
38:41:b2:7c:8d:81:64:0a:77:a1:33:2c:8a:16:af:32:1a:d2:
c6:b3:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:34 2025 by rpki-client