Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: 5kcc7TUp+Cl61+5dzpHG0kQ6cMYBew9XQUoZ9dHlDc4=
Subject key identifier: 15:86:9F:BD:0F:31:DA:28:3B:3E:5D:D7:DF:DC:95:64:EF:F6:6B:D5
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 0194BC3C7DE518CEFE17992A6116114A1FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 03DA
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=)
2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: Op9WCkN9kJ2svbY7JLvhrBG6mwSxMzQeQQSsCqIqd7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7d:e5:18:ce:fe:17:99:2a:61:16:11:4a:1f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=15869fbd0f31da283b3e5dd7dfdc9564eff66bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:de:34:29:05:5a:30:d8:ad:43:22:79:9e:
ac:c6:e7:3d:12:31:d1:58:65:b7:2c:70:f8:42:77:
be:2d:71:5a:45:ad:5a:85:17:f1:8d:22:23:a4:90:
f8:f3:95:2a:16:29:5a:4f:02:97:a3:91:65:a1:e5:
df:1a:81:ec:19:92:e1:5b:80:c2:85:fd:1a:a7:44:
b3:38:c0:fc:bb:b2:5d:08:95:9d:9e:a6:5a:dc:fe:
b6:92:7c:ca:08:51:24:89:2c:e3:97:fb:fb:92:8b:
c6:3e:39:e8:28:52:38:12:94:ab:17:2a:a6:73:07:
e6:93:0b:a0:93:60:c6:b6:57:3e:e4:a4:1d:28:2d:
13:44:1b:87:5c:f5:85:7f:75:b8:b1:fb:95:90:e0:
88:6a:b7:40:7b:6d:7a:f3:49:25:2e:69:f1:a0:ad:
a5:7d:53:e7:f3:5c:fa:6e:bc:93:63:d7:a9:11:dd:
25:84:8d:0e:69:d4:61:c3:3a:27:ef:f5:8b:29:c4:
82:a7:11:9e:5a:f0:4c:a3:a9:87:0a:6a:4d:f6:ea:
8f:ec:a5:87:cf:1b:92:fb:f0:f0:8a:62:86:cb:a9:
9b:77:8a:40:14:bb:a2:4f:e2:4d:ca:f1:28:0a:d5:
22:7d:9e:ea:e3:50:bd:31:6f:50:ed:27:f9:5f:92:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:86:9F:BD:0F:31:DA:28:3B:3E:5D:D7:DF:DC:95:64:EF:F6:6B:D5
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6e:e9:37:90:00:8c:00:7e:2e:90:0e:32:71:a7:dd:52:ae:
94:3a:2d:c8:59:14:95:f0:18:9e:83:43:4a:ca:ed:f1:64:a8:
eb:f3:25:0e:56:6e:c4:48:b2:69:da:df:67:6e:41:85:d8:87:
2e:5a:b9:c6:3a:91:67:8c:c0:77:b2:a4:7e:0e:45:29:de:aa:
b8:c4:fe:9a:10:cc:11:2f:3b:c1:ce:6e:8e:4a:01:73:2e:c5:
0a:23:95:50:9c:c6:b0:37:53:8e:3c:64:33:82:15:ec:e8:af:
7d:76:05:1a:1b:ca:ac:8f:3c:a9:ef:19:21:e4:c9:0d:06:02:
e0:6d:be:e1:e0:64:d0:37:62:47:73:42:79:f0:a4:8e:ed:73:
3d:b2:79:be:a8:d7:45:9a:ab:ab:96:0f:3b:fb:8b:05:e4:de:
be:97:c3:da:20:c2:91:65:48:69:52:fe:dd:b9:d6:ba:fb:8b:
32:4e:85:a6:9a:69:5d:33:22:b2:db:d7:46:34:5b:34:8b:16:
2c:67:4d:27:5a:8c:66:2f:d9:cd:32:8c:33:19:91:59:7f:88:
ea:84:8b:7b:8f:28:48:04:5e:64:b2:8d:38:07:06:eb:54:4c:
bb:d7:84:6b:61:26:9b:b0:85:5c:ae:dc:a7:c6:ab:50:c1:7d:
6e:c5:61:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:57 2025 by rpki-client