Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.mft
File: zFshNT-Sy9vzt9JRO5pGWsU7LTk.mft (raw, json)
Hash identifier: XwJ5kbjfu8Y4L0yzQ66fOoyV1mcb1vDhWVfD6cL6r5U=
Subject key identifier: 5F:E5:D6:48:09:A5:42:96:BD:7E:C4:0C:D3:02:C7:CA:11:3F:3C:08
Authority key identifier: CC:5B:21:35:3F:92:CB:DB:F3:B7:D2:51:3B:9A:46:5A:C5:3B:2D:39
Certificate issuer: /CN=cc5b21353f92cbdbf3b7d2513b9a465ac53b2d39
Certificate serial: 019415148297EBB8C5B367317293E25B48FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFshNT-Sy9vzt9JRO5pGWsU7LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.mft
Manifest number: 13D4
Signing time: Mon 30 Dec 2024 01:00:53 +0000
Manifest this update: Mon 30 Dec 2024 01:00:53 +0000
Manifest next update: Tue 31 Dec 2024 01:00:53 +0000
Files and hashes: 1: Ix4P_zSSw5Kfs7nW9cHRoqc-oYU.roa (hash: mY7IzT7TZXcV4jXselfA5oYlrfU8nZn9s1tJybo1XAI=)
2: zFshNT-Sy9vzt9JRO5pGWsU7LTk.crl (hash: I+cVohyaQNiLYt+lNmzgDRlrqEKZ9RvGzj8rEUqeHaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:15:14:82:97:eb:b8:c5:b3:67:31:72:93:e2:5b:48:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5b21353f92cbdbf3b7d2513b9a465ac53b2d39
Validity
Not Before: Dec 30 01:00:53 2024 GMT
Not After : Dec 31 01:00:53 2024 GMT
Subject: CN=5fe5d64809a54296bd7ec40cd302c7ca113f3c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:14:fa:78:e2:2a:c4:ca:cc:b5:d1:2d:7f:
11:9d:e3:92:e7:60:7e:0c:70:8b:9b:76:82:82:81:
1d:5a:5a:2a:7f:e0:b6:6c:1a:61:e9:ad:84:08:14:
e9:19:ab:a8:5d:fa:4c:ce:49:e4:b7:73:bc:db:c8:
bc:d1:a5:b2:82:49:f8:ef:b3:76:62:16:d4:9d:c8:
85:62:1a:b8:bd:0e:6b:79:fa:f9:d0:19:1e:70:63:
e1:1d:45:54:63:bb:48:93:25:b2:b7:5b:07:1e:e5:
80:1b:0d:69:f9:c4:d5:11:d8:b4:16:31:5b:24:e7:
82:58:a3:f0:5f:8a:62:aa:99:27:74:92:f4:18:e5:
c5:cd:e8:57:5c:0f:0f:15:bb:6b:09:11:25:b3:ea:
72:dc:0e:8e:0a:08:8e:30:16:71:0c:72:49:70:1d:
5d:82:30:6c:d0:d2:24:8d:34:e8:70:d0:1e:32:45:
eb:5d:eb:95:fb:e9:75:7a:39:65:b7:1c:63:96:1a:
aa:38:af:90:55:80:d4:0b:bf:93:83:3a:31:9f:12:
cd:bc:4b:dc:6e:fd:4b:04:3f:cd:f5:33:ff:d1:03:
c2:91:7f:ad:8c:35:d3:0e:81:1f:f0:85:08:d0:4f:
5a:69:ee:50:8a:81:68:b4:48:35:ad:ea:b8:48:af:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E5:D6:48:09:A5:42:96:BD:7E:C4:0C:D3:02:C7:CA:11:3F:3C:08
X509v3 Authority Key Identifier:
keyid:CC:5B:21:35:3F:92:CB:DB:F3:B7:D2:51:3B:9A:46:5A:C5:3B:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFshNT-Sy9vzt9JRO5pGWsU7LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4fb057-5dae-4851-ad47-5ad5f33cc99c/1/zFshNT-Sy9vzt9JRO5pGWsU7LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0f:9c:46:80:cd:c0:35:46:f6:85:f9:6a:e4:98:33:e9:d9:
7d:9d:5e:99:97:85:08:55:20:2e:2b:41:a4:fe:b4:66:6f:cc:
b6:20:24:cf:8e:9d:3b:18:ea:3a:00:03:28:2e:12:92:06:19:
60:72:56:c1:48:35:12:6d:b8:a7:32:15:85:87:6f:d4:26:4b:
71:bb:95:84:20:a4:5c:41:be:2e:81:65:31:5e:30:d4:65:42:
d4:e6:b4:e7:31:85:6c:c4:e3:d4:b2:2d:2d:64:86:fa:91:93:
30:d4:31:77:87:e5:c1:5e:7d:50:71:cc:cb:26:0b:99:8c:bf:
18:28:bc:9e:ab:17:82:c0:dd:a0:19:6e:7a:00:90:fe:52:ee:
f6:ce:63:5c:02:87:48:32:b5:8b:c2:b2:5d:1c:db:85:26:0a:
2a:e0:0d:4d:dc:1b:ea:3e:e2:ce:41:98:58:78:e5:38:42:5a:
65:71:d3:e5:72:84:2b:a2:a2:2d:41:67:87:49:09:1d:84:07:
ff:a8:93:fc:1f:55:6f:2b:3e:a5:c4:90:ab:a8:d5:f1:47:a1:
05:e9:0c:3e:66:e6:9b:b1:65:8e:b9:be:4f:8a:50:93:b1:0d:
7f:4e:79:56:1d:30:2b:cb:f2:04:0a:60:79:8a:9a:87:72:3c:
49:7e:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:23:27 2025 by rpki-client