Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier: URCu7dpvnEBu+uesgQUeQKM20n7SkqyR+nNYOQ2SJTE=
Subject key identifier: 28:33:E7:DB:AB:F8:16:69:F5:5B:98:7E:0D:14:56:2B:4E:3D:68:17
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 0194BC3C859914BFA44301AC2EA3FB9786FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number: 0BBB
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=)
2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=)
3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=)
4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: NvzWbFFQembPxbR3cqbOTSncMBkL9cEBy6y3iXPezPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:85:99:14:bf:a4:43:01:ac:2e:a3:fb:97:86:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=2833e7dbabf81669f55b987e0d14562b4e3d6817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:78:19:2c:bf:d8:93:4e:f2:8d:5d:44:6f:
57:3c:38:cc:46:12:ae:93:a8:59:00:8f:53:d9:e0:
9f:03:a5:f2:38:bc:cb:3c:c2:cb:86:4b:bf:b2:62:
c8:96:79:29:31:19:04:03:22:7d:d5:8b:1b:3c:28:
20:01:25:04:6b:f9:19:7a:b9:eb:51:47:04:51:66:
a2:42:6b:8f:fe:0e:b7:aa:43:d7:51:1a:6b:52:9d:
57:2c:e5:95:2e:87:04:41:1b:d3:88:fb:6e:8d:89:
96:47:ec:e1:b0:1f:58:a3:38:78:85:bd:49:e1:ab:
65:57:3b:c9:d9:45:ca:79:ef:78:71:56:2c:fc:f7:
db:fb:f5:cc:a9:8d:ef:7d:8a:14:4c:82:33:95:33:
80:78:a5:48:5a:e7:b2:da:5c:05:32:6c:29:a1:8f:
ec:ae:c2:6e:62:0f:5f:88:b6:7a:84:c9:76:b9:3f:
23:b9:67:6a:cd:91:75:b8:2d:da:76:55:e4:f9:5c:
ac:2a:99:d8:08:68:8c:b8:2a:ca:10:03:56:6e:6a:
30:c1:86:f2:de:fe:72:ba:b0:26:83:02:51:d9:67:
3e:a1:a3:b5:f7:1c:83:31:4f:ea:c9:fe:e6:47:d2:
f8:93:9d:9a:03:44:56:e2:32:04:0a:20:de:75:41:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:33:E7:DB:AB:F8:16:69:F5:5B:98:7E:0D:14:56:2B:4E:3D:68:17
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f0:36:4f:2d:a5:67:24:c1:ae:f9:ed:29:0e:2c:3b:08:27:
3e:fb:eb:81:f2:b6:a1:1e:23:94:7f:40:f1:87:8f:a4:3c:3e:
e4:77:45:fa:95:d4:c8:2e:23:32:44:7d:55:46:9e:50:87:74:
d0:3c:16:18:23:5f:da:33:c3:dd:37:6a:fe:e9:9b:8c:39:35:
fb:f7:be:18:0c:ab:2d:e0:2b:44:76:0f:44:42:f3:d6:86:17:
1f:6e:99:83:82:30:75:c9:46:3c:bd:8e:94:69:8c:14:9a:21:
6a:7e:9e:5f:91:8f:66:69:ac:8e:59:fc:55:57:ee:2f:ca:b7:
ca:9b:04:ec:d5:82:5b:e4:bc:4b:2d:b3:e2:cb:66:ee:4f:95:
e6:e5:97:78:d8:c1:1c:1a:5c:1f:28:55:e2:00:ed:51:c5:de:
00:d6:7f:26:2f:a3:78:1d:6a:ef:14:c3:03:09:4b:0d:7c:83:
47:39:c4:a9:9b:b8:15:82:b0:53:93:ec:71:a5:89:bf:27:b6:
a9:c7:ed:f7:4f:50:71:af:4d:d2:3f:8f:c1:84:77:4b:bc:39:
d8:c6:41:a9:9f:25:a7:a0:17:0a:42:c9:be:d0:37:1f:b6:38:
e3:26:e6:ab:3e:40:db:0c:49:5f:5c:d0:30:9a:21:88:4f:5e:
84:ce:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:18 2025 by rpki-client