Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: tXCXD4PbdQhkv4CRv073j1xgbDnaTCpVqiWRiaiXggo=
Subject key identifier: 40:61:69:D5:23:39:FB:B7:A9:90:22:00:FC:D5:79:D7:34:02:FE:B4
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 0194BD179617068ED8D76A08C658FFDBCE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=)
2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: fNkPGzcXxF5vUDOBJp/v09SqjRgh8aXnGGenpY/iD+U=)
3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:17:06:8e:d8:d7:6a:08:c6:58:ff:db:ce:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=406169d52339fbb7a9902200fcd579d73402feb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:82:9b:7a:1f:fd:e2:79:0c:30:bd:67:eb:
a0:5a:4e:62:8f:fd:2a:db:bb:8c:b1:c6:c7:0d:ce:
02:65:4e:3b:26:fe:32:0f:65:0c:8e:d3:38:9c:56:
ee:68:5f:8e:81:bc:1d:ff:5e:d7:f3:fc:8d:f9:e3:
89:2f:bb:e9:db:02:d2:95:de:8e:c0:46:ff:8e:28:
7f:b0:bf:ec:c1:94:36:a0:ce:76:6b:47:05:d5:85:
ca:c3:72:10:2f:09:80:de:ac:f7:71:28:11:2b:93:
45:a9:44:a3:f4:b8:3a:ee:20:b1:58:cb:a7:5e:b9:
21:57:a4:ba:0d:a9:04:25:11:d1:e5:4b:5c:63:ad:
31:9e:7a:c6:4d:93:43:c7:61:d8:a3:83:72:f0:bb:
55:ae:2a:64:f2:d8:a5:39:fe:40:47:8c:15:bb:c3:
3d:02:dc:4e:f4:cb:5e:57:3f:c1:3a:d7:b4:34:4a:
45:ab:43:5c:a9:a3:ab:e2:b3:67:08:28:a6:15:80:
25:0b:83:82:b7:27:08:08:f5:9f:5b:7a:02:b1:b7:
c3:82:a6:5c:34:94:97:f5:a4:af:c5:55:9f:10:25:
f1:0f:54:60:ef:ad:dc:d4:cb:40:2c:96:13:45:e0:
3a:89:b7:68:59:fa:3c:d8:2a:8c:92:e3:ad:b0:d2:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:61:69:D5:23:39:FB:B7:A9:90:22:00:FC:D5:79:D7:34:02:FE:B4
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:19:6e:1d:5a:15:62:7d:a1:17:09:cf:70:d1:63:f2:53:6d:
55:c8:83:ad:30:a4:41:8e:78:8b:c1:43:24:80:0f:75:60:87:
3c:4e:cf:a4:86:6f:2a:bb:fc:47:82:84:91:6e:67:f4:5f:4d:
c2:02:6f:fc:e2:13:98:66:9f:46:6a:86:b1:d4:8b:48:24:77:
69:0a:e8:b4:40:17:7a:be:39:06:46:3d:c4:4b:7d:4a:89:c2:
72:17:85:a8:1e:71:e0:8c:ee:93:80:b7:9a:6f:29:26:62:21:
62:56:d8:8a:6a:38:fd:78:0c:df:81:f7:98:9f:55:20:6c:59:
95:a6:b7:b6:e5:a8:e0:3a:37:54:11:6a:73:19:73:a9:e9:d2:
c4:5a:0c:a5:d2:79:54:34:6b:c7:f5:c0:7e:2e:40:13:9b:37:
c4:4b:b9:ec:29:eb:be:05:5b:3f:67:f0:bb:ff:5a:99:d8:11:
d4:dc:3d:32:7a:2c:28:85:90:d1:b3:9c:27:fc:dc:6e:7b:59:
6c:d3:b5:15:da:2b:2b:56:a8:29:84:2e:0e:6d:4e:6d:64:6f:
37:d2:50:69:b4:86:2d:b0:98:3c:3b:89:19:60:fb:35:a2:b0:
05:be:ab:b5:32:ec:1c:e6:4a:4f:52:d6:03:62:ae:30:d2:81:
1f:9d:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:56 2025 by rpki-client