Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a9331-45a9-4b18-876e-caf60305bafe/1/zilsBah7rykNDKkh0lD1QQFIp9Q.mft
File: zilsBah7rykNDKkh0lD1QQFIp9Q.mft (raw, json)
Hash identifier: vYYLhFlvIdJhE5ELkI2uFjOUqhCKbtKNdse7/l6oXo4=
Subject key identifier: CD:2C:0F:70:3F:25:15:2D:F4:F1:A1:BE:51:01:A3:35:1F:52:87:77
Authority key identifier: CE:29:6C:05:A8:7B:AF:29:0D:0C:A9:21:D2:50:F5:41:01:48:A7:D4
Certificate issuer: /CN=ce296c05a87baf290d0ca921d250f5410148a7d4
Certificate serial: 018A4EAF020B9A9A4E4030B115E53245344E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zilsBah7rykNDKkh0lD1QQFIp9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a9331-45a9-4b18-876e-caf60305bafe/1/zilsBah7rykNDKkh0lD1QQFIp9Q.mft
Manifest number: 04C4
Signing time: Fri 01 Sep 2023 03:00:06 +0000
Manifest this update: Fri 01 Sep 2023 03:00:06 +0000
Manifest next update: Sat 02 Sep 2023 03:00:06 +0000
Files and hashes: 1: U30UWRHCV35ommuJq3IHSo6Dffk.roa (hash: joa0e8DKaFCt4neoalLgUFlnXQHyG8al2fdOlxCatHE=)
2: zilsBah7rykNDKkh0lD1QQFIp9Q.crl (hash: rQqMkhmbJohrNn/HTNwxJYlSvDrrnRZTNdnbb1xYuLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4e:af:02:0b:9a:9a:4e:40:30:b1:15:e5:32:45:34:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce296c05a87baf290d0ca921d250f5410148a7d4
Validity
Not Before: Sep 1 03:00:06 2023 GMT
Not After : Sep 2 03:00:06 2023 GMT
Subject: CN=cd2c0f703f25152df4f1a1be5101a3351f528777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:1e:5d:b1:2e:2b:cb:ea:f2:dd:ee:92:05:
9e:89:cc:01:9c:a7:8e:7a:02:b1:24:ca:42:2a:f6:
23:0d:55:89:03:c2:98:f6:2f:9a:10:c2:07:a1:91:
f4:c2:f3:45:c0:36:88:b5:71:cb:02:91:eb:11:d1:
96:56:0d:37:2f:91:8a:1c:ae:80:60:b9:b2:ee:a0:
4a:a8:d7:8a:d4:81:34:1f:70:72:10:45:6b:79:70:
93:f2:21:0b:6f:06:f4:f0:a2:c7:f5:3a:48:1d:67:
24:8a:66:9f:8a:fa:fc:4c:61:90:8b:24:f9:0b:35:
6f:7b:17:71:90:66:de:1a:b8:69:09:14:37:62:f3:
32:05:39:43:6e:3e:54:4c:ff:7b:7a:7f:65:74:5d:
ae:48:14:e5:84:13:09:ec:67:8e:3a:77:49:2f:71:
24:5b:12:61:9e:e1:dc:4e:79:c0:ad:47:62:70:70:
cb:b5:72:5d:58:1c:d0:56:a0:5c:8e:6e:da:89:2c:
38:1a:f0:3b:a1:de:d8:e9:b9:34:66:76:00:4e:b3:
35:77:8e:a7:8e:e5:e9:74:65:df:95:22:78:8b:a3:
b4:e4:32:48:15:53:93:49:db:3c:df:59:e6:98:de:
10:b0:b2:80:d4:7b:ee:2d:9c:a0:6c:86:47:e0:52:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:0F:70:3F:25:15:2D:F4:F1:A1:BE:51:01:A3:35:1F:52:87:77
X509v3 Authority Key Identifier:
keyid:CE:29:6C:05:A8:7B:AF:29:0D:0C:A9:21:D2:50:F5:41:01:48:A7:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zilsBah7rykNDKkh0lD1QQFIp9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a9331-45a9-4b18-876e-caf60305bafe/1/zilsBah7rykNDKkh0lD1QQFIp9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a9331-45a9-4b18-876e-caf60305bafe/1/zilsBah7rykNDKkh0lD1QQFIp9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:5a:e4:93:a8:97:ff:78:0f:5e:24:46:e4:58:c3:52:58:
90:f6:3b:d3:c8:a5:b9:54:f7:fb:c0:6c:5f:6e:39:a0:4a:a2:
4d:ed:0d:0c:0b:e5:6f:6b:b9:f1:f6:2e:76:50:c2:c1:3f:28:
85:50:58:ad:c1:1e:d7:e3:6c:f2:8c:9d:ad:79:ce:35:33:9b:
68:e7:0d:a6:a9:92:0c:9d:63:4e:25:c7:21:c7:ac:21:27:0d:
a0:cb:68:d8:55:17:7b:49:25:23:3c:14:99:c0:7a:3e:54:0e:
d5:76:71:ac:31:7b:91:d3:5e:13:f3:52:d6:70:d1:d9:ed:3f:
41:22:da:6e:d4:36:db:0c:a3:c8:4b:3c:44:58:c5:3b:23:9d:
df:9a:bf:55:03:07:29:1b:87:1c:22:95:e8:04:f9:3e:74:05:
2a:0f:e8:43:94:0b:80:57:1f:18:81:d1:bf:94:39:c6:6b:70:
74:18:8f:f3:64:51:52:ba:93:08:3d:2d:bc:ef:cc:0e:03:86:
fb:99:16:1a:e0:10:00:95:fe:ca:38:a9:ca:71:6e:ab:dc:99:
2e:fc:61:72:18:7b:06:ac:9e:70:1b:71:bb:b2:a7:68:23:84:
a3:8d:94:fe:91:54:36:6b:84:6a:dd:56:c6:08:75:5f:f1:99:
99:05:cc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:43:39 2025 by rpki-client