Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: Fjsp0/nfhxVf3Yj/NKHunoBhc/hVsY0M797c7CgNn/8=
Subject key identifier: 5D:23:C2:57:A6:9D:F3:1A:18:BE:10:6E:E8:59:1E:92:D3:96:95:08
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 0195DFD8FB87AB60CF1C48918C986A4A3247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1456
Signing time: Sat 29 Mar 2025 03:01:34 +0000
Manifest this update: Sat 29 Mar 2025 03:01:34 +0000
Manifest next update: Sun 30 Mar 2025 03:01:34 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: fh23crIFCBPeRJ8snh3jfCkw9iuMkMbe4uggeYfukWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:fb:87:ab:60:cf:1c:48:91:8c:98:6a:4a:32:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Mar 29 03:01:34 2025 GMT
Not After : Mar 30 03:01:34 2025 GMT
Subject: CN=5d23c257a69df31a18be106ee8591e92d3969508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:72:4f:99:da:c9:1f:6c:14:8a:40:65:ea:
94:33:ac:18:d8:76:28:18:8b:20:da:cf:74:ab:74:
16:4a:4e:ea:c7:f2:0a:09:47:1e:f2:86:6b:13:7d:
fe:27:48:d0:63:3d:0b:5d:d6:3f:f0:2d:af:00:e8:
28:a6:51:4b:a6:b2:a0:5e:cd:03:b5:7d:71:45:c6:
73:65:8e:c8:51:3f:89:33:47:f5:e8:1d:dc:9a:06:
34:1a:1c:a7:41:d8:48:ed:59:21:14:49:dd:28:87:
2d:b4:ff:c8:45:be:2e:94:e8:02:8f:bc:18:aa:2c:
36:d4:d2:5a:c1:63:1f:96:7b:1a:58:fc:c5:d7:70:
38:af:40:0c:5a:04:f4:c3:3d:17:2e:82:bc:ba:e4:
af:68:40:7c:4c:ac:34:32:e5:07:99:43:11:32:29:
b4:97:da:70:3b:45:01:26:c3:56:ad:7d:df:9e:17:
f9:ad:95:4a:ac:ff:35:d7:05:34:00:35:b1:6f:d6:
06:4c:51:e7:2e:b2:c4:39:c6:6d:72:dc:43:76:e9:
6a:1c:90:4a:b5:e5:fa:2b:34:07:54:de:d8:00:5c:
d9:68:32:82:65:65:36:e0:91:84:f1:6b:32:c1:15:
16:19:39:a5:5c:28:c1:b3:16:f3:62:b9:e7:5e:b3:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:23:C2:57:A6:9D:F3:1A:18:BE:10:6E:E8:59:1E:92:D3:96:95:08
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c0:70:19:38:ab:ca:ce:bb:0e:df:dd:bf:fa:67:a0:20:dc:
f4:4d:f6:b6:d4:75:7d:b3:dc:9c:4e:13:54:6f:be:e6:6a:02:
3c:f4:ba:fc:e9:02:e9:32:6b:44:18:e5:38:20:46:db:58:56:
54:f6:bd:68:39:bd:32:ef:1f:24:04:0d:46:48:e6:07:3a:2a:
f5:6b:75:c2:fd:f4:41:32:cb:f0:71:b8:61:39:6e:11:d0:03:
ab:39:9d:bd:e2:59:6a:b1:f4:e6:24:83:a4:2d:a7:d1:8a:3b:
22:5f:98:23:a8:00:52:d4:37:0b:71:f6:c2:38:34:e2:42:a5:
43:cc:a7:19:93:e0:e0:2d:1c:09:1f:66:cc:8c:22:d1:75:75:
0d:ac:e0:68:45:7f:db:cc:44:57:d5:a1:9a:10:b0:8c:c7:4f:
72:10:22:a8:1b:45:f1:83:3e:24:80:2a:0f:bd:b3:7c:2d:7b:
8b:aa:71:11:10:9b:e6:c8:2b:77:d3:fb:90:22:a5:6b:c4:0c:
a9:63:76:1a:2c:5d:2d:07:a8:e0:a9:a9:71:77:19:4b:77:58:
6c:47:a6:2d:1e:42:b7:c3:e1:be:46:fe:4f:ee:3c:65:43:fa:
ca:dd:51:a1:ce:dc:64:fb:90:04:6c:da:f2:cc:c2:2e:0e:42:
83:d6:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:03:01 2025 by rpki-client