Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: VT1pFHv01m+eb3o+1E9E2xJzZbU0KCateGy+L262gjM=
Subject key identifier: AD:56:1C:2E:F3:D1:18:87:A1:53:5A:18:70:0F:6E:3C:C1:5A:94:F0
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 0194BD4E9373FA9B303F75FF5230ACAD7095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: nGsjG5J988CoBB5ORITt7e6LUpkH1CpoTgMfl1J5Zw8=)
2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=)
3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:93:73:fa:9b:30:3f:75:ff:52:30:ac:ad:70:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=ad561c2ef3d11887a1535a18700f6e3cc15a94f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:e5:a4:a6:7a:1e:38:a4:de:65:e8:63:96:
07:b2:d1:37:ab:64:c5:c2:4d:7b:51:3f:ed:a1:8b:
c2:4e:78:a5:ad:b7:a6:d5:cd:96:ed:26:e0:3e:12:
9a:1a:46:d8:de:f6:9c:e5:22:b8:62:37:cf:d8:b8:
c7:e3:16:db:c3:ce:5d:27:73:1f:92:26:2b:1d:d2:
d2:7a:a0:cf:cf:1e:71:02:08:3b:c8:a1:14:ab:4a:
fb:c3:33:02:97:df:88:ed:6d:61:ff:64:88:3e:5e:
1f:74:5c:ce:f7:bf:35:c8:e8:58:99:2f:d9:b8:ce:
f5:f8:20:e8:04:80:35:6b:70:74:bd:e9:3d:43:b6:
59:4c:09:27:e9:6f:5f:fe:4c:5b:84:e2:5d:74:b1:
5b:c8:32:23:03:bd:43:d0:91:0c:16:2c:a3:0f:32:
b5:de:e8:10:9a:77:bd:d3:32:5c:ed:36:b7:0d:c8:
a2:00:d8:87:8d:40:b0:e0:43:56:17:ef:e2:cb:94:
69:40:3a:ff:7d:b6:50:7f:11:37:e8:91:18:b8:41:
e8:c9:5e:81:eb:ae:84:79:9c:a0:5a:80:35:92:a3:
fd:bb:51:c2:48:05:da:cc:d7:e9:ef:24:02:30:29:
f1:b4:26:9a:5b:70:d3:d0:7e:80:29:ce:fb:6f:95:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:56:1C:2E:F3:D1:18:87:A1:53:5A:18:70:0F:6E:3C:C1:5A:94:F0
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:89:7c:8e:cc:9e:b0:c5:0c:ad:ed:4e:de:f2:17:20:55:1a:
bd:63:83:a9:07:f2:63:3a:ea:ea:2b:64:cf:bd:86:4a:0f:b5:
58:32:f9:89:da:91:fc:94:8a:8c:4a:08:dc:54:89:dd:82:e4:
33:11:da:7a:f0:00:67:7f:b8:d0:05:9b:c6:08:39:ca:63:46:
4d:ff:18:dc:66:74:56:ef:d9:13:6b:5f:20:51:73:10:29:97:
8f:6d:1f:f9:82:a6:cd:cf:0d:15:c1:02:e6:ec:1a:a7:9f:2d:
ab:e3:65:cc:c7:e6:2f:d2:8b:dd:9c:8c:98:84:e2:0e:25:1c:
be:c7:89:9b:b5:50:6e:eb:2e:c8:0e:6f:d6:95:ba:3c:08:e9:
18:07:e4:82:a0:59:ed:5c:82:cc:62:ff:6d:af:75:7a:24:13:
e2:aa:53:24:f5:a3:7b:36:65:06:42:80:56:3e:ea:2e:e8:ca:
1b:66:b2:86:b9:99:b7:22:90:35:4b:17:52:c2:03:05:02:6e:
1f:ea:b3:7c:81:2d:3f:a7:f2:94:24:a9:3d:cb:63:8a:40:41:
d6:a4:10:75:7d:ba:e1:90:8c:49:24:22:a9:5c:a8:93:7b:3d:
a1:e7:21:88:e1:88:0c:bc:0e:10:9d:36:be:ae:25:5d:3b:61:
5c:dc:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:51 2025 by rpki-client