Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier: xp6Y1WcmRHI1tprzmQn1/N1+EXfc6ta7TvSlepceL+A=
Subject key identifier: 90:9D:1D:94:21:44:5B:19:A1:FB:94:10:28:99:7E:EA:9F:67:1A:11
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial: 0194BD852E2A686595358E6B5553D31FDCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number: 0FF2
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (hash: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=)
2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: 8qgIYXpE7pqGp5UrgdfFaMqft/kRyftG9TTpsaA65Qg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2e:2a:68:65:95:35:8e:6b:55:53:d3:1f:dc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=909d1d9421445b19a1fb941028997eea9f671a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:da:5c:c1:57:f6:5c:98:82:e6:e9:93:f4:
16:95:49:7d:92:59:79:8a:3d:02:82:6d:81:21:f5:
3f:77:d0:a4:d4:03:c1:10:be:9b:dc:7f:11:0d:94:
5f:a0:03:f3:cb:e2:a9:96:5e:e5:e8:10:42:6b:ed:
1c:2d:e1:38:5d:e1:98:26:97:77:bf:f7:12:e1:63:
97:15:95:f9:59:64:25:2f:14:b9:4f:c2:61:99:db:
b8:4e:45:97:4e:44:a2:36:f9:27:67:5b:4a:62:d1:
26:b4:ec:b4:16:bb:3b:76:a3:75:81:52:90:16:08:
0b:66:6a:29:bb:a2:aa:21:bd:6a:e5:b9:f3:92:78:
70:39:d2:67:7d:0f:26:7d:f3:ed:97:50:b2:ad:f4:
d7:0c:36:ed:fa:55:19:ed:31:03:23:90:f9:9b:b3:
cf:d9:67:32:2b:4e:97:d2:ff:01:6f:76:3b:44:3a:
b7:dc:7d:65:51:65:5b:98:0a:5d:61:0a:fb:ae:14:
68:11:85:2f:af:f6:d8:9d:31:ca:eb:d0:6c:df:c8:
4b:33:3f:43:86:27:77:ad:66:33:e6:e3:35:35:64:
f1:cc:84:fe:99:3d:6e:47:82:c5:6b:74:1a:10:27:
f9:1d:97:f7:cb:00:25:52:69:a0:41:4b:6f:8c:23:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9D:1D:94:21:44:5B:19:A1:FB:94:10:28:99:7E:EA:9F:67:1A:11
X509v3 Authority Key Identifier:
keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0a:db:8e:e4:90:d5:4b:0a:46:2e:4c:1f:f6:97:a5:64:0c:
0c:43:dd:ef:88:ab:da:a4:1d:9c:28:cc:80:23:eb:35:b0:ef:
21:72:b5:e2:a7:38:62:46:99:78:f4:30:85:6d:39:3d:80:80:
38:e7:d6:bc:75:c5:43:17:5f:1f:dc:d3:22:76:cb:b2:10:de:
99:c8:fb:e9:97:a4:65:0a:c7:f4:99:06:ee:33:6b:49:62:eb:
18:70:c9:db:2b:12:31:ce:fc:52:10:cd:c8:48:41:ae:26:60:
dd:da:b7:46:93:ec:fd:c5:b4:b1:1b:d3:f8:d0:38:31:1a:27:
c7:d7:4b:02:fa:8f:2f:c6:1d:d5:3c:24:a4:16:b2:bb:43:72:
86:3a:e6:62:7f:a2:f0:44:05:ce:09:2d:91:6f:2d:3b:42:1a:
c5:43:75:c8:4e:7e:ee:cb:9e:6a:74:7d:22:d5:01:4f:f7:dd:
c7:2f:37:ef:f7:41:c3:0f:03:df:3f:8f:d3:5f:f2:c0:54:9b:
10:a4:0c:3b:5c:61:0a:c2:21:5c:36:6a:6d:7c:ba:35:8c:94:
60:74:94:a3:18:57:4e:4b:da:9f:3d:5d:14:07:b2:2f:a3:99:
dd:ce:75:6f:46:f3:81:cc:7f:f0:0d:be:ee:5f:a9:bd:87:81:
6e:ce:4d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:39 2025 by rpki-client