Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/zdFcST-HXaGWmSfBuRyW4v-VNSw.mft
File: zdFcST-HXaGWmSfBuRyW4v-VNSw.mft (raw, json)
Hash identifier: 0LT+9210PB2tb2hnVNwEIDOBQ14HfDkgBYgSmX1RRhU=
Subject key identifier: FE:1A:34:71:0B:E7:32:5D:F9:09:84:CE:CE:4C:A4:A1:BF:F2:D0:14
Authority key identifier: CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C
Certificate issuer: /CN=cdd15c493f875da1969927c1b91c96e2ff95352c
Certificate serial: 018A1BEE38799559B6F3C0A8FA671AD3DC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdFcST-HXaGWmSfBuRyW4v-VNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/zdFcST-HXaGWmSfBuRyW4v-VNSw.mft
Manifest number: 0404
Signing time: Tue 22 Aug 2023 06:28:31 +0000
Manifest this update: Tue 22 Aug 2023 06:28:31 +0000
Manifest next update: Wed 23 Aug 2023 06:28:31 +0000
Files and hashes: 1: LZkpY4lDp7zp4xPqBRbfMYCvu8c.roa (hash: lHmbd2ytww81+ffO9WB9JpNnnknVTAMbR9SXyzqNoqU=)
2: RoRtMAYd4JODTDa8YURTwtOo8gU.roa (hash: 48Zdu3GH2QzBG+ww3DpZeMUt/oQrOVe5N3F2UnzpqGQ=)
3: zdFcST-HXaGWmSfBuRyW4v-VNSw.crl (hash: sixDo6fJ2jlPsMYHZc3zoKARqhHQjnT/KALyvzf4aZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:ee:38:79:95:59:b6:f3:c0:a8:fa:67:1a:d3:dc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd15c493f875da1969927c1b91c96e2ff95352c
Validity
Not Before: Aug 22 06:28:31 2023 GMT
Not After : Aug 23 06:28:31 2023 GMT
Subject: CN=fe1a34710be7325df90984cece4ca4a1bff2d014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:db:cb:f0:28:eb:ff:df:c8:e2:f6:bd:5e:
13:42:c6:fe:e9:17:5f:4f:b8:ce:51:ff:a7:31:b9:
4b:50:d5:1e:8a:a9:7f:74:11:83:33:bc:fc:c9:21:
c5:9a:0b:e2:88:34:44:e8:ab:81:36:16:a7:bc:17:
af:c5:c5:05:b0:7e:50:d3:8a:93:d8:d8:a2:31:e3:
e5:83:bb:bc:0e:1c:87:87:10:80:57:97:fc:11:25:
8a:1e:c7:18:e3:4e:b0:bb:64:3a:19:4c:d9:b8:39:
64:f7:ce:bb:1a:ff:05:14:a3:23:4e:65:87:43:b8:
aa:f6:75:56:55:5c:e6:bc:6c:47:24:ea:62:5a:07:
84:d9:4e:99:41:57:90:2a:c7:2c:19:60:13:7a:2b:
0c:93:8d:0a:af:da:18:53:f3:be:b7:34:25:7a:1d:
c8:12:00:57:19:6c:90:fe:3d:1f:00:2d:f3:ee:0e:
23:13:47:8c:a8:9a:dd:10:68:76:7d:e2:cc:bf:83:
9c:f1:1a:89:f1:22:d7:20:7d:2a:38:8e:37:85:bb:
5e:ea:9c:03:58:64:30:5c:85:cb:37:23:9d:bb:1d:
59:98:06:e1:d7:38:c7:cb:1c:74:9e:f6:ee:c1:65:
9e:79:09:5d:67:ca:b0:36:da:d7:cb:39:8f:33:e3:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1A:34:71:0B:E7:32:5D:F9:09:84:CE:CE:4C:A4:A1:BF:F2:D0:14
X509v3 Authority Key Identifier:
keyid:CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdFcST-HXaGWmSfBuRyW4v-VNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/zdFcST-HXaGWmSfBuRyW4v-VNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/zdFcST-HXaGWmSfBuRyW4v-VNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:76:6b:85:32:00:f7:35:ec:46:2b:6e:1d:d8:6c:80:bd:ec:
72:49:f9:15:06:96:f4:32:61:9d:2e:ef:10:51:a5:2c:1c:21:
9e:06:e0:20:ba:6d:15:8c:72:a8:41:db:a9:65:13:5f:57:42:
2d:45:64:52:4c:91:6d:cc:17:c7:d5:31:06:d4:75:d8:1e:2b:
82:37:0f:c7:a8:33:9e:a8:50:6d:62:b3:4c:a8:c5:d0:db:ba:
34:48:35:a1:b4:cf:ec:13:79:92:ad:db:57:bc:d8:61:c5:52:
0b:5b:90:7a:7b:75:c2:99:50:f9:12:a0:da:67:b2:65:c9:3a:
6e:7c:98:68:0a:da:01:f4:f2:b1:ed:08:63:c5:4d:97:53:bd:
2c:2d:93:56:57:4f:a3:ed:dc:c9:df:d0:a3:3b:f6:74:01:e8:
69:28:9d:83:64:f5:d7:e5:e8:67:5f:db:1d:52:2d:dd:53:15:
61:70:45:ee:8a:2d:6d:d2:77:ad:f1:c8:93:c9:51:7f:48:05:
3a:44:0c:26:3d:0f:5f:db:ac:9b:7a:df:40:c8:ec:59:fb:4e:
b4:35:3c:d2:0c:e2:73:87:3b:d0:ea:06:ba:39:de:e2:63:9d:
fc:1b:3d:46:13:6a:d7:21:ed:b1:19:9f:c8:ca:93:96:6f:db:
4b:f9:e0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:36 2025 by rpki-client