Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: p70PNbpaWjXPawRryq3fqRRZY1UUOL3k1+27Ni6WmFg=
Subject key identifier: CC:08:82:CC:AC:6D:66:A9:DF:6B:F8:80:26:2D:E2:87:E1:82:55:AA
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 0194BCA99DDDDE863951F3E175D05EFAB376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1034
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: ns3yEOSWEANKMy0k+EbniRPTdNyeucF48I4u4B9fobQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9d:dd:de:86:39:51:f3:e1:75:d0:5e:fa:b3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=cc0882ccac6d66a9df6bf880262de287e18255aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:2e:52:58:3a:2d:65:c0:78:a5:d4:98:b6:
c3:2d:71:07:77:31:ac:57:1e:a8:5d:e1:78:ac:01:
e0:cb:e1:07:1b:cd:ed:0b:cb:86:4c:a2:77:90:a1:
2f:a3:08:ec:a7:f0:f0:1e:20:1d:76:71:32:47:61:
ed:15:69:18:49:4c:a9:df:dd:d6:90:c1:0f:40:69:
ea:df:29:e5:61:8b:f0:0e:0d:9b:f1:21:93:7a:e1:
3a:ae:fd:be:75:bb:10:69:bb:3f:e7:92:39:cf:30:
f6:3d:a7:0e:f8:82:d4:17:75:10:40:4a:8e:f1:74:
6a:45:39:85:86:87:74:25:65:34:a2:b0:58:f5:52:
39:45:6a:77:dc:46:ee:5c:cf:75:70:dc:ee:37:f2:
01:15:16:e3:71:b8:5a:53:60:34:ed:f5:1a:83:a6:
ee:c6:75:78:24:d6:58:62:e8:c4:d6:8d:74:47:30:
c6:ae:2e:af:6c:44:8d:67:85:ed:42:b4:9c:4b:7f:
f9:65:d6:cb:ac:f4:2f:d2:ee:24:44:55:ee:df:1d:
c0:08:13:a1:5e:6d:d9:35:9d:7c:ad:0f:b0:2d:b2:
43:2c:a1:10:5d:ec:26:d8:15:68:14:96:4a:bd:de:
d9:c3:92:0f:9f:df:ca:3b:ca:43:0e:c2:12:17:21:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:08:82:CC:AC:6D:66:A9:DF:6B:F8:80:26:2D:E2:87:E1:82:55:AA
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:23:9d:80:f1:36:87:82:e0:ed:fd:18:29:55:73:a6:ab:41:
25:13:cd:a3:53:b4:2b:bd:15:e3:78:52:7e:e3:f0:78:b8:5e:
aa:59:25:0a:72:5e:68:ce:60:d0:29:a3:c6:1b:38:21:0f:b5:
ef:9a:1c:b4:74:2d:f5:11:9a:91:2f:1e:a7:bc:f2:3c:f1:9c:
99:32:a5:a2:7a:52:e3:b2:fc:83:32:69:14:ef:50:d6:f4:20:
82:36:7c:6b:24:83:31:99:94:2f:6d:7f:a6:fa:f5:fe:ef:ab:
21:8e:dc:be:a9:1e:b5:b9:d4:bb:5c:7a:f7:c9:b7:ec:ce:0e:
32:85:e6:09:2c:cc:30:b3:d9:50:b2:de:5f:bd:3c:03:32:7e:
c7:3e:68:1c:4a:18:b4:29:95:49:15:99:9f:93:bf:6c:6c:df:
be:fa:ec:d3:44:12:7e:4b:ee:e8:ef:f9:ed:93:7a:35:b9:c6:
d2:00:c9:48:fb:fe:f3:b3:e6:49:08:ee:e6:7a:aa:82:06:2b:
09:07:c7:90:d9:cf:b7:33:d9:3b:50:9b:db:68:c7:77:95:a2:
54:d9:fa:46:f4:f6:c2:d5:18:8f:e8:47:42:d2:7b:b6:45:f1:
ae:f3:d8:4e:96:27:a9:f4:a7:25:98:ed:14:9b:93:5e:f7:63:
3d:37:91:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:53 2025 by rpki-client