Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: kEtODFMoa6VEyu3Zy/1p/1Oo7YAnjjPy8Xxv3bL3HEk=
Subject key identifier: 69:4D:52:1A:05:3F:15:FB:DB:76:91:9F:E3:51:3C:5B:BF:6B:82:07
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 0194BD4E88DD004DF57947938D32A308751C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 099F
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: dWu5eb7y0Ed3+vKX8nQfXJZvr11BeSr8dKL70JANg1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:88:dd:00:4d:f5:79:47:93:8d:32:a3:08:75:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=694d521a053f15fbdb76919fe3513c5bbf6b8207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:b6:4b:00:5d:d1:76:48:ee:48:77:fc:60:
ea:6a:41:c8:c9:46:8b:4a:d6:0c:55:8f:9d:46:11:
95:6a:55:29:5b:15:73:64:a3:1e:6d:31:a1:0d:b5:
40:97:52:0c:8a:d4:45:c4:ba:35:12:2c:71:ed:0c:
6c:51:93:b7:34:dc:34:56:7c:cb:69:74:fd:8b:d0:
5f:09:67:f5:a4:a8:73:0e:63:d5:99:4a:61:74:9b:
3a:08:5f:ee:14:5b:1c:8d:b2:15:e7:fb:49:d1:cb:
66:c7:d8:55:a3:14:7f:3d:fa:d2:99:aa:3f:70:d2:
4c:cc:54:60:c0:a1:29:81:f2:7d:54:40:a6:df:82:
53:c9:72:df:e8:c5:4b:5a:7f:38:4a:c7:d9:84:c1:
6f:ee:e6:c9:29:47:12:7d:df:71:35:0c:75:15:bd:
a7:8f:5b:08:a3:92:89:58:f0:96:7d:7e:11:1c:b6:
48:c2:3c:fa:fd:f2:0b:88:a0:cd:af:d8:3a:98:88:
33:ad:02:61:d3:f7:bb:a8:51:1d:ea:73:56:4c:e2:
64:af:e0:9a:53:1a:9a:e4:62:a2:dc:ec:8c:d3:01:
29:3e:6a:6e:b2:2d:e7:9f:14:7a:80:1a:58:7b:f3:
47:ed:c2:a3:1a:48:4f:51:e2:6d:df:97:2a:4e:10:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4D:52:1A:05:3F:15:FB:DB:76:91:9F:E3:51:3C:5B:BF:6B:82:07
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5d:18:1e:f6:8c:ca:2e:87:82:48:70:5f:d6:e3:c3:d2:41:
fe:f9:64:2f:fc:b2:17:7f:fa:7b:81:6c:d0:7e:fd:5c:68:88:
68:da:56:75:13:88:e5:bb:a0:98:35:eb:22:6c:10:0f:4a:67:
f7:63:de:f7:6a:df:84:22:8d:36:b3:ab:38:30:81:07:71:fa:
50:71:1e:eb:8a:ff:38:e5:ef:42:f2:66:73:8d:61:23:64:41:
9a:1f:12:ca:70:be:6f:dc:45:4e:26:ea:4a:5c:62:1b:66:f3:
44:7e:cf:0b:60:be:52:fb:ad:af:b2:5f:ca:b5:47:a9:25:fd:
3b:59:8c:68:7e:a0:9d:a1:32:04:25:ba:f5:49:ba:6a:96:20:
4b:ab:c2:2a:45:b9:5b:93:46:45:2c:32:ad:68:53:3c:7d:30:
b6:39:6d:be:7a:0d:8a:d4:8b:b9:8f:61:b5:11:94:9b:6a:31:
ca:d8:11:aa:a6:c9:de:36:63:09:b3:b2:f8:c6:2f:99:1e:3f:
c1:d0:d5:8c:53:52:f8:54:f5:e9:f2:38:db:87:dc:c5:a1:dc:
21:f7:fd:82:ca:f4:57:a8:d0:6b:e0:d7:66:c0:43:9b:33:c8:
93:6c:57:c0:c3:59:f0:ad:b5:3a:5b:3f:8f:d2:b2:6d:ef:29:
0e:bb:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:15 2025 by rpki-client