Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: Bg61GA4Sav2Oy760Lk7Qqh6UBUQdRCHtvXj6RfEJusQ=
Subject key identifier: 11:F1:23:F5:6C:A1:AF:09:23:0D:6D:C5:30:D0:25:18:C5:B5:46:9F
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 0194BBCDF2D271CECBE57DF19C62E418ADF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0891
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa (hash: oEwUEmn9BEj5nCyDqmNSjb0S6HVplNaKnZXZP0H/66Q=)
2: UojdXawnx16jHvQuUPhyRGr9AUA.roa (hash: Hr78TmcOhe37IFpeiMzuuAac0/dugWioMJ66bJbp/E8=)
3: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: VVsqvW4aC42aBlTytpwHdS8qsOLMOmAXwkgPdmzAgG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f2:d2:71:ce:cb:e5:7d:f1:9c:62:e4:18:ad:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=11f123f56ca1af09230d6dc530d02518c5b5469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:19:e2:f8:2a:40:f8:6b:52:69:fe:b1:2a:
e2:a6:6d:17:49:27:27:2f:e9:89:01:25:16:dd:f3:
ed:4b:42:61:16:d3:60:6e:72:43:26:38:6d:b3:72:
f1:dd:2a:da:2a:86:b5:90:71:ca:4e:6f:d5:5e:5b:
65:a0:c4:18:e7:78:46:c1:a5:d3:54:94:43:f1:4e:
65:36:90:d0:7c:45:3f:85:50:b2:87:79:bd:5f:63:
65:40:f3:c2:b4:80:29:17:d3:cf:db:9b:5e:64:18:
f8:c0:05:44:16:b9:c5:40:e1:81:3b:a3:bc:05:9e:
42:2d:10:26:36:dd:34:ac:ed:8d:fa:df:68:05:4c:
0f:98:0b:55:60:68:42:55:31:76:b8:77:df:97:40:
3a:40:5f:6d:45:d0:40:7c:62:3c:b9:33:be:50:4e:
27:51:19:df:f6:a7:9f:38:c5:0a:17:52:c4:c7:51:
bd:28:20:66:a3:0f:75:da:43:69:4c:cc:a1:e6:1b:
3f:a1:6d:6a:f4:a0:bf:12:6f:2b:3b:9c:69:3f:ac:
c2:f7:e1:aa:43:0d:dd:2b:57:a3:99:4d:a2:a7:3b:
42:81:f8:90:69:e7:07:40:5b:9a:7b:54:6f:3c:62:
c5:2b:fa:c8:3c:e2:0f:9c:b9:83:15:d7:1e:14:97:
c7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F1:23:F5:6C:A1:AF:09:23:0D:6D:C5:30:D0:25:18:C5:B5:46:9F
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7c:92:3c:f7:c3:0c:88:e5:1a:cb:98:82:54:d9:b5:c0:11:
08:b5:96:3a:3d:bf:6b:7a:a2:46:2c:bc:69:ec:88:d5:c7:b8:
38:2c:c7:83:e8:30:83:de:6b:24:f2:c1:52:93:db:f8:ef:c9:
04:9f:73:f5:0b:c8:26:f8:5b:5f:4c:65:cd:09:68:dd:cf:38:
6c:26:a2:cf:75:81:e9:b0:60:50:bc:59:25:c8:97:2e:a6:0c:
41:9f:bf:d4:aa:6f:76:5e:ac:2f:56:8f:50:62:4c:f4:9a:37:
9f:7c:c1:a0:03:db:84:6b:7d:1d:ee:1f:d3:6f:26:e2:28:d4:
c9:59:a5:c1:81:89:1b:7f:a2:65:ca:36:56:d5:49:e5:42:30:
76:86:c0:be:ce:57:1b:ee:66:91:d7:c5:72:62:f9:d9:be:a0:
14:d5:3b:fc:18:34:73:52:4a:d1:70:a2:d6:9f:7f:8e:b7:e4:
d3:4b:ca:f7:61:4f:cf:57:9e:90:1c:a8:af:ea:54:37:89:58:
7e:15:9a:62:50:6b:56:c8:73:55:66:b6:67:16:a9:9b:19:2d:
ce:ca:0e:36:b5:bf:1a:eb:59:17:8a:3f:e4:21:ee:fa:17:b1:
b3:2f:8d:4d:c2:28:ce:0b:ce:25:56:fa:e1:d4:0b:12:7a:e9:
ac:98:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:18 2025 by rpki-client