Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
File: Z6FPJDBIdf8VT-Kysstuugr5RSM.mft (raw, json)
Hash identifier: VLDKr+KNAooa6mixSTeUJmENZzvqsMOEBSGFefUwKig=
Subject key identifier: 35:E1:86:38:11:C8:9E:1D:BA:22:F6:E5:32:74:77:A0:DC:16:D2:CD
Authority key identifier: 67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
Certificate issuer: /CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Certificate serial: 0194BCE08AD3925DE402653E27D60CA394B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
Manifest number: 1303
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: Z6FPJDBIdf8VT-Kysstuugr5RSM.crl (hash: iUi0Vez0jZFxMSusC4XuYtkgJVPbIPlPB5VEvLLlTmg=)
2: pl66MpODxtxRoZhLJAW-nkoD_Sc.roa (hash: sJLlhjSfYMWQixCxG3V31R8LPRit/+p4sujJjRjMO3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8a:d3:92:5d:e4:02:65:3e:27:d6:0c:a3:94:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=35e1863811c89e1dba22f6e5327477a0dc16d2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:10:df:8a:ba:d9:8d:b3:46:09:cc:e0:19:
cd:63:40:a0:79:8c:4d:ba:c7:f8:93:00:b0:b0:45:
9e:e7:a0:d9:63:a1:7a:b2:a9:2c:a6:31:1c:a8:9e:
89:fb:21:bb:65:23:ac:73:bd:81:44:17:e0:ce:0e:
41:e3:f5:c1:bc:c3:7d:82:b1:8f:e0:48:22:05:b4:
38:4f:f8:a2:fc:c0:f6:e1:fb:28:a5:88:c0:9b:79:
7c:f3:b1:6c:f1:78:c4:27:bc:0b:0a:ca:5e:30:89:
8c:00:3f:51:fc:c3:ee:1e:dc:4b:b2:2b:6e:74:71:
7d:02:bd:fe:db:1c:2d:1d:5b:13:39:b0:f4:e3:f2:
8f:a4:2a:da:fc:33:23:dc:2c:9c:8a:df:4a:87:82:
76:83:a9:f0:c0:42:a3:bc:1a:62:40:57:ee:1c:2a:
a7:45:1d:0c:8e:ed:36:ee:36:b0:70:e6:1b:11:6a:
14:95:b4:bc:e6:fd:3f:a7:0b:ba:0a:2f:70:59:1a:
fb:af:bc:02:22:d3:a3:26:78:9c:f5:db:bf:9d:55:
a5:58:2d:ba:05:bf:b2:ce:a3:af:70:cd:f4:89:25:
57:77:6e:4c:9f:c9:bb:33:86:9f:fd:7a:08:73:14:
28:0b:97:a3:5c:3e:31:c3:4a:97:4e:a2:f9:39:08:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E1:86:38:11:C8:9E:1D:BA:22:F6:E5:32:74:77:A0:DC:16:D2:CD
X509v3 Authority Key Identifier:
keyid:67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7e:0a:fe:ce:4d:c6:d4:ea:e4:bf:f9:47:4d:54:42:7e:d2:
d9:c1:dc:7d:64:ee:1b:50:48:31:ef:6d:4a:09:ab:27:b1:8f:
66:2c:f8:59:68:3c:ce:19:cb:37:07:2e:ed:2a:e6:56:ba:4f:
c3:ec:3d:6e:84:ad:19:8a:45:c7:db:bb:28:aa:2c:51:ee:a7:
32:b0:49:63:7d:8e:d6:10:b5:4d:1c:4a:50:e7:39:92:87:31:
0b:1d:81:82:f1:0b:83:66:2c:d8:78:2d:bf:d1:35:ed:fc:42:
12:22:47:72:3b:d0:e5:1b:56:bf:12:0a:f6:f2:b1:81:2e:b8:
b6:04:3a:0a:b5:d2:17:07:80:72:85:29:6f:f5:40:13:7c:f2:
f3:2c:20:01:b8:ad:8c:4c:1e:c5:4e:6e:a6:b2:51:e2:07:ba:
16:70:74:5e:14:d8:90:b4:e3:e9:30:29:bd:6b:d5:b6:f3:62:
51:97:4b:9d:39:4b:be:30:d9:a2:b2:db:7d:6c:ea:e6:85:a2:
56:7f:c4:9f:a7:20:c7:de:93:e9:99:2b:11:9d:d9:60:a3:a6:
a3:a0:fe:15:75:36:83:fa:9e:f4:6c:2e:10:f0:ba:89:19:8d:
82:f3:61:44:93:f4:60:e9:3f:ed:69:38:19:13:23:f3:5e:1c:
b5:2e:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:27 2025 by rpki-client