Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier: pBNEdV8PQbRQdNv9n/JY7mPaaFuOjxKTC1iehbZECTQ=
Subject key identifier: F3:FB:52:69:5C:31:DF:B9:E6:32:48:86:C6:0B:EF:A7:ED:05:2C:59
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial: 0194BCAA140227859FBA141A58AF0C6A74A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: U0b6gboi64n531Jc6zyEuav6vyg.roa (hash: PZafjNuKkOPJe0JHguIOtwXHpUoa+ViotM7w88t40Yc=)
2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: 7VWR9NkwRFs3p3DTRRNh4uwTt047QTGZyXWjuUemdz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:14:02:27:85:9f:ba:14:1a:58:af:0c:6a:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=f3fb52695c31dfb9e6324886c60befa7ed052c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:55:b1:70:27:fa:46:05:9b:b5:6e:9f:3c:
e2:68:d9:75:3e:58:50:6c:67:fc:81:49:aa:41:e4:
b3:76:36:2c:fe:f6:2a:68:52:4e:2e:43:04:19:66:
a3:d7:06:ca:ac:ac:08:dc:17:86:e9:c9:72:5e:08:
ec:29:dd:62:c9:42:90:d1:91:b6:28:75:0a:ad:f6:
31:f9:93:b2:67:1c:1a:74:dd:c9:19:35:ca:a7:72:
a3:92:e6:68:04:e6:54:1b:23:c8:18:aa:9d:ee:fd:
cb:c0:ba:20:24:5f:c4:d2:a8:d8:a6:91:89:b3:36:
81:db:f2:c9:6f:aa:c0:57:78:ba:8b:64:9e:e5:10:
b1:7f:6c:e4:f0:e1:2d:9f:5f:bb:e3:f7:9f:80:ba:
d3:6f:69:12:d6:1a:65:4d:10:c9:51:53:96:64:32:
3f:2e:f9:3c:f8:c9:f1:47:c9:af:1b:9e:a4:47:95:
18:68:cc:b2:b2:4e:be:7f:c4:be:76:f2:d2:91:03:
95:35:62:e8:f3:14:39:59:f2:eb:3d:e5:7b:73:9a:
bd:57:1a:ec:ba:4c:ff:f5:7b:a6:94:23:14:87:c9:
cb:07:a4:9b:21:56:02:db:0d:f1:88:e3:53:5c:4c:
8e:94:a3:cb:53:6b:aa:a0:54:d9:14:0a:5b:dd:5d:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:52:69:5C:31:DF:B9:E6:32:48:86:C6:0B:EF:A7:ED:05:2C:59
X509v3 Authority Key Identifier:
keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2f:27:13:14:f0:28:75:66:6b:f2:47:19:ff:d1:1a:21:be:
ee:d4:26:b8:79:7d:bd:f4:fe:91:ae:93:ee:36:db:77:82:53:
73:32:bb:76:bf:3c:92:f8:09:41:8d:df:5e:1b:19:b6:70:64:
79:8e:98:6b:89:e0:cc:95:30:37:ce:a1:5c:82:24:15:f1:fc:
a0:1d:61:3c:ee:ac:a6:6b:61:74:cb:f6:62:c0:62:cb:99:9b:
3b:d4:39:60:0a:51:23:fa:e1:a5:6d:7d:1d:35:d5:a8:92:9c:
27:28:6e:58:6b:5a:73:3e:82:a7:f4:12:46:53:9b:53:5e:01:
6a:90:1a:06:99:ba:ac:14:57:b0:5d:1b:72:54:8f:a2:b7:49:
b8:34:6c:21:95:eb:50:22:63:cd:4e:90:82:25:5f:e4:83:14:
f9:15:0d:de:d9:0e:0c:cb:c8:e6:71:bb:c6:25:0a:83:8f:d5:
0a:c2:f8:03:23:52:84:51:02:81:90:b2:0b:2e:11:b5:1d:b4:
22:d9:e0:a8:f5:d2:fe:e5:ce:ef:f5:3c:17:3a:03:23:35:2f:
37:a5:1f:ee:0e:3d:83:c8:56:be:d6:16:e0:eb:64:a7:e1:4b:
2c:db:8d:72:b7:7e:42:b9:e3:15:36:b4:66:f9:ee:13:77:f0:
cc:3c:99:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:19 2025 by rpki-client