Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
File: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft (raw, json)
Hash identifier: 4IwKgcsqPQapCSSsev6LGzoqBGF6i60LNbAAGZZhFVs=
Subject key identifier: 9B:B0:3C:3A:05:F3:7C:25:29:F4:60:19:4B:44:EA:A9:E1:15:EE:98
Authority key identifier: CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
Certificate issuer: /CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Certificate serial: 0194BC05015838818C3E83835C5C138ACED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
Manifest number: 01A4
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl (hash: 062oF1CgWOJqCP4YYWIkVYv5Uc8KaPux8KSKH7K+mME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:01:58:38:81:8c:3e:83:83:5c:5c:13:8a:ce:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=9bb03c3a05f37c2529f460194b44eaa9e115ee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:2a:dc:c9:2b:eb:52:f4:3b:76:ce:f8:ac:
17:a0:7d:dd:d1:a4:e3:44:81:a7:c7:e3:cd:23:89:
1a:1b:10:05:cb:2c:37:b5:83:98:02:c3:d7:2d:1c:
b4:05:19:60:ee:f9:87:b2:50:32:9a:ad:1d:36:9f:
70:15:ed:ef:d9:87:66:1d:ca:6a:5e:27:ea:7e:e1:
24:02:67:be:e0:1f:15:74:a2:54:a7:2c:00:1d:a2:
7e:d5:bb:57:d0:d5:40:b9:14:af:e1:69:e5:25:23:
64:45:d2:b1:75:b1:19:e0:85:20:79:d1:f3:f1:2e:
4c:48:b0:01:9a:d3:04:f8:3f:78:75:15:a8:90:74:
8e:17:e4:0e:4f:fb:a4:45:60:36:35:61:ae:7e:45:
03:1e:f9:41:c1:a9:46:4e:d8:98:b0:ae:ca:1f:ef:
d5:35:6b:d7:88:6b:e1:b3:7b:e8:dd:b6:38:5c:70:
eb:9b:c7:7f:7b:1a:0d:21:fa:b4:da:6b:cf:59:63:
e9:f6:f9:8f:1e:20:04:b3:30:e5:52:71:5b:c6:26:
d1:23:33:71:eb:be:1e:5e:fd:a8:72:8a:bd:01:59:
b1:22:fd:3b:33:e5:72:ba:d3:17:6e:59:9e:fa:78:
0c:18:07:2c:ec:99:ee:c4:a6:c4:41:bf:03:50:cf:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:3C:3A:05:F3:7C:25:29:F4:60:19:4B:44:EA:A9:E1:15:EE:98
X509v3 Authority Key Identifier:
keyid:CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3f:61:d4:74:90:2f:37:9f:9b:f5:18:e5:ec:ef:18:72:75:
42:c8:f4:c4:3a:06:60:24:59:3f:e1:a3:ea:3b:70:3d:86:c6:
47:c2:19:e9:b2:c7:dc:e2:15:38:2d:97:44:6d:9a:9f:19:5e:
24:3b:6f:17:89:63:85:94:f7:49:cd:92:5e:16:da:04:6a:74:
a7:97:84:1c:24:48:81:3c:69:15:3a:c7:af:37:b0:e9:eb:1e:
92:9f:ea:31:8c:b6:28:ef:2a:6a:b2:80:61:1e:e2:c7:5a:af:
9c:96:43:1b:79:8b:cc:2a:bc:49:74:eb:79:e3:d9:12:19:34:
af:17:93:13:70:03:be:6c:4c:11:9a:6f:83:c4:16:df:2c:f1:
9c:5a:33:9b:45:b7:34:b1:76:e9:43:25:61:da:2b:75:55:8b:
63:3c:a6:72:b0:d6:81:6d:d3:09:66:5a:bf:53:ba:af:6e:d3:
0b:55:2c:fc:c5:8d:1d:30:c3:63:75:da:1e:04:5c:7b:2e:f2:
79:20:5b:d2:e8:56:e7:5b:d8:cd:b4:8b:5b:01:23:bc:80:93:
ec:6f:c7:55:fe:72:57:a7:b2:ad:84:dc:03:5f:3b:2e:17:1d:
b8:05:6e:e4:92:14:5e:b3:09:ea:2a:48:18:c0:3b:f3:44:6c:
a8:b5:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:31 2025 by rpki-client