Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json)
Hash identifier: 6g8AskqXm9nA0tOdgw4A/OpB0ep2PKtHK5YaktpYhdQ=
Subject key identifier: BA:98:E3:8B:B9:20:28:48:59:3A:7D:00:3E:7A:5F:9D:61:24:68:9B
Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f
Certificate serial: 0194BC04F9DE0C323E8B689BA261CB342D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: O/bL3aPPvh4twzWW0mjj86FPu3Fu1e6PMrk21xkOs0c=)
2: tClIzpB8AXYvJfeCisA8HxpOd74.roa (hash: sXbqNinLjTETFbK42QOaktsLVCyYHDlotZvPtCRaxBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f9:de:0c:32:3e:8b:68:9b:a2:61:cb:34:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=ba98e38bb9202848593a7d003e7a5f9d6124689b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:b0:59:a9:51:0a:9a:fc:01:e1:6d:7f:1f:
2c:74:9c:9f:2a:78:8a:78:ac:f6:91:98:9e:63:b4:
d1:4e:fd:85:bc:21:dc:0d:82:91:ac:02:b9:65:43:
ec:a4:13:75:8e:db:fa:2d:89:2d:63:71:d0:5e:a1:
67:63:c1:71:04:26:12:96:ed:54:6f:9d:79:34:52:
ea:e0:95:c2:12:8e:2e:6c:7c:e6:99:ee:15:93:05:
c4:f6:b1:ca:2e:bb:db:8e:f2:18:36:71:34:73:85:
c6:22:9b:4a:ac:19:90:b6:21:17:c7:28:91:9f:28:
62:47:82:69:50:b6:12:b4:19:e8:1b:03:f9:c8:e6:
b4:97:34:34:1a:69:c5:15:c0:3c:75:d8:ff:3e:aa:
c4:7a:95:ee:92:0c:a1:37:30:ad:dc:4e:ae:22:21:
07:dc:1f:51:16:0b:11:69:ef:ad:21:19:96:a4:45:
42:c3:01:92:71:52:85:4b:77:44:83:92:38:6a:fd:
25:f1:67:fb:ef:b2:69:89:34:55:a6:23:98:d8:1d:
d5:a2:aa:71:94:c7:fb:8f:db:fc:c4:e7:a8:96:24:
a7:b3:a6:a4:95:74:8a:63:82:50:ec:18:04:1d:9e:
ff:d5:04:48:58:3d:e2:5d:46:50:00:89:61:4b:b2:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:98:E3:8B:B9:20:28:48:59:3A:7D:00:3E:7A:5F:9D:61:24:68:9B
X509v3 Authority Key Identifier:
keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:69:7a:0a:2b:d5:e6:bf:c2:c7:d0:8c:53:94:f2:d3:2d:a5:
3b:b3:1a:6f:d1:bc:1e:cd:c1:53:46:22:53:a7:14:4c:3e:19:
ae:0d:26:f9:0a:0a:4c:3a:f9:c5:be:49:13:04:3b:a7:e7:9e:
8e:ee:c1:e7:fa:96:67:8d:e2:0d:09:aa:58:b1:63:5e:b7:6c:
65:ce:31:b7:92:e5:b1:38:01:93:1e:3f:71:76:85:a0:c0:09:
bd:07:43:ba:72:7f:54:b6:d0:b1:c2:99:10:51:e8:16:be:2d:
cf:d0:63:a2:4f:3b:f6:66:06:38:51:02:3a:f2:f5:a0:d5:41:
81:c6:b6:b2:b7:03:03:e2:07:39:b7:e8:d4:74:22:ca:ca:6a:
03:d4:e1:d3:f7:3c:10:49:cb:81:50:a8:a7:a8:36:cf:78:34:
42:96:09:81:95:84:06:95:96:2b:00:70:85:fc:ed:7e:b4:c5:
b7:a8:be:13:2d:b0:ce:d9:43:b7:c7:88:69:ce:5a:dc:db:ce:
c3:01:ac:78:e0:3f:e0:bd:dc:63:f5:45:ea:4c:8a:bc:03:ce:
ed:5e:12:eb:33:ad:de:af:ca:0e:22:b5:48:ef:41:26:ab:49:
2e:4a:61:93:f2:88:f8:08:f0:87:6f:98:3a:e8:ea:8d:27:77:
67:cf:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:39 2025 by rpki-client