Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier: jhSljFbs+CBJH3bXH7Yg7dDvtt1BIaz5wbd6Kdk457Q=
Subject key identifier: BB:8B:5E:56:75:0C:E5:C8:AF:83:AD:C4:00:41:AD:CE:F1:E9:9F:46
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial: 0194BC3C68DDD8366905929969DA8B63DACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number: 02F0
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: CrIqohgHF4oZWgEhaj1r/EcFj4Lsj7yPgUZ97gStQJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:68:dd:d8:36:69:05:92:99:69:da:8b:63:da:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=bb8b5e56750ce5c8af83adc40041adcef1e99f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:01:8e:4b:1f:0f:5d:4c:f6:9a:61:85:03:
40:2a:d7:a3:3b:3b:b3:27:28:ac:37:95:15:0e:de:
43:ae:b8:d5:4b:fc:79:7e:8a:52:14:f1:dc:af:42:
18:05:01:2c:ae:2d:66:40:7f:3c:75:d2:c9:b9:5e:
94:55:76:e2:a5:a3:63:5c:de:8f:b1:3b:ff:6a:62:
db:05:f7:14:7b:65:ce:4c:51:19:02:2b:5e:84:8b:
37:f0:80:be:00:9d:25:6e:9b:24:de:a0:03:23:18:
48:7a:19:95:20:3c:cb:5f:15:2c:6c:1d:1c:d8:c7:
36:77:89:d3:a2:25:94:65:a7:d8:d6:22:b0:32:6c:
86:8d:59:1f:53:ad:9f:f4:ca:73:ab:5b:99:c9:b0:
27:18:c0:c2:d0:d6:3d:da:16:01:97:8c:03:56:3f:
76:54:a5:b7:b9:b6:6c:59:c4:81:09:71:d1:51:9b:
d8:48:0f:b4:a5:12:41:84:39:1b:9c:0f:84:d9:26:
2c:e5:9b:ef:dc:6d:ec:9f:07:03:e1:c7:33:44:3e:
fe:bf:5a:f4:b8:10:95:c4:25:00:c7:30:3f:ae:21:
e2:24:56:8d:42:12:a0:3e:16:2f:e1:55:a8:ad:ea:
12:e6:0c:2a:67:53:da:c3:53:97:98:a0:20:2a:7e:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:5E:56:75:0C:E5:C8:AF:83:AD:C4:00:41:AD:CE:F1:E9:9F:46
X509v3 Authority Key Identifier:
keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0d:f5:fc:f4:ea:e0:aa:6c:9c:b9:db:2d:7f:85:60:9c:f9:
66:ec:14:3c:c3:65:ea:7a:f9:69:22:6b:50:1a:0b:66:f0:a4:
a3:1f:a6:5e:8b:88:57:2a:3b:94:fb:c1:67:b1:63:ba:41:f6:
7c:87:38:fc:8c:85:f1:ca:42:8d:df:a6:2d:88:cf:a8:5c:10:
f7:17:e5:af:60:40:f6:08:ce:36:04:51:b0:b4:b6:31:85:26:
20:63:4a:c7:6c:56:2b:81:2b:3f:f3:a5:a4:dc:7f:f0:4e:1d:
b4:d7:d0:ff:eb:33:2f:d0:ae:8b:e2:31:16:d4:a4:98:8b:cc:
ab:9b:1a:df:51:20:9d:f9:94:02:21:55:47:fa:7b:ff:0e:6f:
41:05:8c:40:df:a0:ef:1b:6d:14:53:10:b2:c3:0e:e2:38:12:
94:35:28:f2:12:e3:e5:15:da:57:7b:bd:95:b1:52:8f:ca:0c:
a8:32:a7:f5:82:40:ff:45:66:7f:72:ca:08:36:da:6c:88:74:
5f:f1:ed:b9:1f:40:9a:77:b2:c6:24:db:df:ac:33:fe:84:fb:
ca:41:ba:64:65:f9:ca:4c:81:59:84:cb:df:7d:43:dc:56:15:
9c:e4:d8:b4:86:5b:77:20:7a:f6:d4:32:2b:c7:48:bc:b9:bf:
6a:03:4c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:09 2025 by rpki-client