Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier: R/nyJe5KyNPK6r74BXT04v5AubN1SXFB4qVsKqVoM20=
Subject key identifier: 57:78:01:F3:45:53:61:2A:91:CA:7E:D7:09:11:9D:99:D6:9A:7D:67
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial: 0194BD177ECF57CEDAB88FF9D7ACCFB3743A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number: 0933
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=)
2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: 2H7cGQB12f504QUBh1t4jVmfzcF1wUVVSiv30J48jSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7e:cf:57:ce:da:b8:8f:f9:d7:ac:cf:b3:74:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=577801f34553612a91ca7ed709119d99d69a7d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:60:5c:d1:d0:15:d0:cd:88:0b:a9:f6:b2:
9f:c5:ef:e3:c1:67:3a:d1:86:14:41:b8:02:14:dd:
49:79:b8:2b:df:f7:67:a2:93:05:7a:6e:11:44:f1:
f4:62:dd:7a:69:7d:e4:06:6e:b3:d8:d0:5b:60:bc:
47:d7:0f:77:46:4a:5c:b4:56:f6:11:e1:05:36:63:
2f:c4:4f:3a:11:3d:7e:25:82:f3:ab:7b:43:3d:18:
f3:20:f8:d3:42:c4:a2:44:16:87:e4:a8:8a:92:d8:
24:a9:0a:e1:90:b1:f4:d2:f7:b0:76:1b:57:66:77:
bc:f7:90:84:08:cc:98:0b:be:e7:b2:bf:ef:6a:f6:
9a:2f:57:2a:89:e2:42:ad:36:17:c6:c8:22:63:f9:
b1:99:53:08:ad:22:03:ba:86:86:3f:f9:e1:3c:99:
f1:29:8b:f3:97:ba:be:c2:41:ac:4e:e9:a6:d4:31:
25:ee:c5:f9:0b:ea:b3:7a:13:e0:12:22:b2:00:7b:
5a:96:08:b2:d9:57:18:e5:95:bc:81:00:50:33:53:
ac:a5:7f:38:6e:34:fa:4c:13:47:90:2d:1d:29:bb:
22:f0:ff:6b:e8:4f:fb:c6:e1:56:6f:75:12:8d:a8:
8e:0c:a1:3e:76:15:c9:83:55:e8:47:00:bd:6e:3b:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:78:01:F3:45:53:61:2A:91:CA:7E:D7:09:11:9D:99:D6:9A:7D:67
X509v3 Authority Key Identifier:
keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a5:6d:22:5d:b1:18:70:e1:71:76:0d:d3:57:43:ff:f9:cd:
79:b9:c5:de:a0:45:56:9f:e6:9a:b3:23:39:66:74:71:d8:3c:
7e:10:cc:a8:85:62:3f:49:18:18:83:45:c5:32:a9:db:af:a2:
b8:25:ea:32:08:65:d7:ed:0b:1b:ea:aa:b0:68:2b:34:42:77:
12:11:29:de:61:25:b8:65:ab:04:00:b2:6f:ff:5c:56:11:f5:
8e:79:9f:cf:63:40:c7:ad:83:ca:b6:8b:f4:9d:d2:6c:6e:c0:
8b:81:af:47:0a:46:f0:80:55:cc:d5:24:d9:df:77:57:4c:8c:
13:a7:03:3d:88:e6:89:a0:6b:2e:2e:d7:f9:dd:51:4a:9c:8b:
8b:54:2b:fc:3e:90:ea:5d:75:f3:bb:53:3e:fe:31:2f:c9:d9:
b0:6b:8f:30:f2:41:4f:68:35:05:65:1f:76:79:be:c7:e6:3a:
18:aa:30:9c:dd:78:a7:ef:e4:3a:11:7c:67:51:61:bf:98:5f:
58:fe:fb:9a:ca:be:38:18:c0:22:d1:c6:e8:3d:14:0b:3a:9d:
9d:a3:ad:af:7e:db:ca:5f:ee:65:29:bf:f3:11:81:26:67:1d:
83:c9:5a:42:62:78:7b:fd:78:81:e8:d7:31:ca:11:30:33:34:
6e:68:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:31 2025 by rpki-client