Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: 6HhYaULvvLmL+gSqYA8HadBNmpTK4agIDV5EnOqclSY=
Subject key identifier: 37:8E:1C:AA:AE:54:37:F8:6B:16:38:A9:50:39:22:4D:60:DF:A1:55
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 0194BC730787DFFF4C5748334D11164094D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 016E
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: JBec802FdcKabjY28XiR5H1LtHE.roa (hash: K48XffcS0X6Fp6KuIpuhXGlT+fph47E9cUUhQv9Lq8o=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: 5YyFpadOi9PW9e4Hu6zSMw/v+Xp65iDlDnB65e3tcqI=)
3: sH_MU-dLONCSS2liGOTF8yFjBic.roa (hash: bC4qlhF2mIa5vONZeQi20o6xvZPm50Q6MktLj7FF2Go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:07:87:df:ff:4c:57:48:33:4d:11:16:40:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=378e1caaae5437f86b1638a95039224d60dfa155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:38:3c:6a:a0:94:28:b5:39:ba:b0:f1:39:
50:5c:95:99:42:65:1a:56:b4:e0:7b:e8:22:b7:a8:
44:df:3d:29:5d:54:15:2a:ad:5d:46:5f:84:70:6e:
f1:53:a3:89:e0:61:8d:33:3a:70:fe:7c:75:90:71:
d7:a6:b7:68:0a:07:4c:2d:7e:c8:32:d8:cf:ac:db:
3d:8d:f5:6f:5e:b5:4e:82:6d:8a:92:8d:43:e6:0b:
99:09:21:60:55:9e:68:83:5f:37:54:a8:27:bd:2e:
a1:62:43:9d:07:bc:bc:7b:3f:53:6a:f3:79:d4:90:
27:b8:f4:c2:db:3e:7a:bd:67:23:f8:d6:35:b7:d8:
c0:91:a3:de:f0:b4:05:ac:b5:d6:f6:d6:6d:c5:36:
46:18:0f:41:e6:9a:29:f6:7c:93:4f:18:c3:a8:fe:
c1:c3:e2:9c:63:a8:53:30:f1:0f:5c:87:93:a3:84:
a7:ab:ab:7c:ec:47:4f:ea:96:49:9e:c1:38:7a:a2:
b9:44:55:4a:15:c9:35:b7:1c:38:90:36:6c:a8:b5:
eb:f9:ee:1a:23:c3:90:21:fd:9d:0c:31:01:33:f3:
71:a0:09:ec:75:f0:a5:a4:f3:1e:cb:1d:19:b1:ab:
c7:52:43:58:2c:8a:d4:df:70:d9:91:c9:e7:05:3c:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8E:1C:AA:AE:54:37:F8:6B:16:38:A9:50:39:22:4D:60:DF:A1:55
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cf:c7:c8:8d:f6:af:a9:23:0c:81:eb:dd:c4:57:a2:ea:8a:
3d:2d:cd:0b:2f:62:7b:da:04:fd:74:11:a1:d2:d5:e2:a2:99:
00:98:29:ca:37:e0:1e:76:be:a9:2d:90:5c:cc:6e:af:7f:19:
5c:92:9d:fc:f2:e1:b9:44:b9:ce:73:fa:12:35:a8:cd:40:f4:
d8:fb:f6:e8:ac:26:84:4c:81:4c:51:a0:83:26:90:a1:d6:0c:
69:38:80:94:7a:3c:53:87:3f:c8:4d:f6:b8:fb:b4:87:22:56:
fc:1d:19:41:e7:62:81:f2:5e:0c:a2:60:fe:f9:56:67:58:e4:
1e:2f:3c:1c:e6:f2:8d:08:6c:b4:b9:09:a3:26:1e:bd:e2:29:
c5:8d:4b:f5:a1:64:b1:b3:19:b0:c1:63:b0:56:eb:a0:e8:68:
64:13:c9:d6:46:2c:67:03:ee:eb:b4:83:ea:6e:f0:9b:6e:86:
1c:01:40:87:27:c1:bd:c1:5c:e9:da:f4:3a:d7:3d:84:42:cc:
73:d2:ac:4b:37:de:b0:9b:38:93:67:8f:cd:32:72:9c:83:fe:
d8:ca:85:62:a7:40:9c:82:43:b5:3a:11:a2:4f:8f:81:2d:6e:
e1:92:ed:7b:3c:7a:ec:c1:9f:ef:56:0b:27:94:57:c9:ad:54:
c6:12:0e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:34:05 2025 by rpki-client