Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File: ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier: 6dl05Zw+xiy3nHMC1YByp3Wea0KkQ4fXN6jeYFyTRkA=
Subject key identifier: E1:EE:F7:C0:55:71:3B:6E:5E:44:4B:1A:C6:E6:33:50:6B:9D:86:6F
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer: /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial: 0194BBCE07E659032181B45552F7D4FF2FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: FgRtxSzMemLzyS3Hdlh3xoGF2O9H5Bv5Vgmn72mB+og=)
2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:07:e6:59:03:21:81:b4:55:52:f7:d4:ff:2f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=e1eef7c055713b6e5e444b1ac6e633506b9d866f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:b0:c0:00:eb:a1:45:8e:b4:5c:ac:b9:f9:
12:e0:dd:e1:12:e2:ee:3f:77:34:5f:85:9f:d1:a8:
50:95:cc:6c:15:2e:57:f0:ae:0e:30:7d:58:e3:ce:
c7:a7:03:09:a5:53:24:e4:c6:a0:a1:ca:19:8f:ec:
81:b5:16:f5:92:68:17:60:d5:db:77:30:56:0c:db:
6f:ec:ff:d2:d8:a9:e7:8a:21:35:a1:c9:33:42:e5:
66:29:a4:79:2a:c4:ab:7e:bf:82:d1:24:7c:20:6e:
29:90:40:6b:1c:2e:a7:db:60:22:25:33:b3:af:38:
e4:2c:a4:06:88:19:c7:d3:66:11:f5:2d:cc:4b:fd:
11:44:ac:a5:ef:51:31:b5:e7:f5:78:36:5d:0d:b8:
ed:1a:5a:28:64:f7:1d:f2:3e:5e:a5:4f:1f:a1:e5:
2c:fc:37:2b:de:36:8f:94:12:dc:82:2e:02:1d:89:
07:11:d0:2a:a6:cb:66:79:d6:fb:d5:c8:27:01:19:
95:c7:90:75:ae:a0:76:88:a5:af:d8:8f:75:2d:00:
72:ee:01:6f:f8:02:66:43:b3:a7:e4:6b:f8:81:e8:
ff:5e:bf:c8:cb:c6:f2:dd:92:00:7b:38:2e:3d:f0:
76:b8:cc:1d:3c:66:87:cf:c4:21:ef:3c:c0:d1:13:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:F7:C0:55:71:3B:6E:5E:44:4B:1A:C6:E6:33:50:6B:9D:86:6F
X509v3 Authority Key Identifier:
keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:73:69:1f:6a:a7:34:2e:99:b6:c0:bf:46:a3:9d:29:3b:02:
43:90:17:55:63:70:15:bf:9d:0b:8f:fd:ce:21:d5:e3:bc:e6:
87:64:62:a9:99:22:51:13:35:d9:65:66:0f:fd:99:60:e9:b1:
dc:36:14:93:90:9e:b1:04:99:4f:ec:29:45:80:d1:53:b6:3f:
50:79:8f:ab:81:f3:86:99:ee:8d:b4:ae:9c:59:5d:30:85:72:
e1:65:74:0b:b1:3a:8e:2f:24:9c:e4:31:5f:35:93:1b:e2:0a:
19:b9:ed:84:e2:65:ba:fe:a2:7c:1c:c4:e1:c6:fc:8c:f2:07:
a6:0b:ab:90:3d:d4:7b:39:e4:8f:52:ec:4c:15:83:51:30:71:
88:86:31:66:cd:8d:57:03:4b:3b:01:36:be:3c:82:43:b9:08:
78:26:c6:c8:e9:66:b6:6a:bd:f3:6f:77:db:34:9f:9d:1b:60:
7e:7d:50:09:dd:76:96:26:bc:41:f5:f5:93:40:9a:9e:ba:16:
6f:ae:7f:5f:d0:db:18:67:9b:ae:d8:34:1f:8f:c4:c6:b8:82:
6f:d4:d1:d8:25:1f:2e:fb:14:b1:be:ee:a7:fe:2d:2f:fd:be:
e5:85:21:22:7f:13:8e:6f:dd:c1:d4:06:0d:fe:dd:15:22:77:
e7:9d:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:20 2025 by rpki-client