Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
File: Z1Zd_fZrIS4XodmKf14rCzJkza4.mft (raw, json)
Hash identifier: Mkn2k7c8qnc4N9wIoPoWAZwiwj7XMsh8ktlaWP+n1KA=
Subject key identifier: 60:61:16:B7:C5:32:69:D0:3B:00:04:F9:E8:21:ED:FB:75:0C:25:AB
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial: 0194BBCE74DE5D8F693EE28F1D8770D04134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: Z1Zd_fZrIS4XodmKf14rCzJkza4.crl (hash: iLBpbOMskJo1uRPRu82KjHkjjDhfo621+pPMEBrwMgE=)
2: edLAr30NQ2j1eS2szlFoVf6cZ6k.roa (hash: YX6gw5+qXpVJdrJ3QtQM0C2faqlrGQ4u2zGhs6Hy6CI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:74:de:5d:8f:69:3e:e2:8f:1d:87:70:d0:41:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=606116b7c53269d03b0004f9e821edfb750c25ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:f7:d3:9d:16:e6:db:45:f9:7e:83:3f:be:
ab:ac:94:c6:5c:d3:0b:56:e9:34:64:75:e0:4e:dc:
73:1c:c0:c0:f3:ca:ca:83:2e:06:55:7b:ae:b7:2f:
94:35:c1:53:1f:a8:ba:2c:ce:16:24:78:98:b8:ed:
4c:c2:53:1f:74:e6:70:70:86:e9:68:53:36:85:5c:
7b:c2:6a:b2:df:3c:8f:f7:6f:39:35:1d:28:76:8c:
38:81:51:cb:72:c3:2b:4d:b4:fc:05:6d:b0:de:9f:
81:18:1c:98:5a:38:d0:26:49:ad:2d:0e:12:72:6b:
3c:cb:f8:a3:d2:13:92:df:43:29:fe:e7:03:41:3d:
a6:df:ef:02:99:0f:87:ac:3d:74:ba:ef:4e:06:b4:
54:d6:b9:4b:da:ea:bf:9f:2b:02:15:99:18:94:78:
f8:7e:a0:d6:15:da:6e:2b:e9:e6:c6:5a:f0:da:2d:
25:01:56:12:94:65:f4:85:c2:e1:67:6e:8a:ed:24:
b7:e1:9b:40:54:c0:02:5c:19:29:79:8c:98:95:37:
fd:7e:c6:91:c1:17:2a:72:e8:ab:22:96:ff:cc:ef:
87:4d:a0:3d:cd:b1:6a:ff:c4:02:35:31:74:76:3c:
c1:b4:2c:b0:cb:0c:00:bc:d3:fe:8a:27:66:77:66:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:61:16:B7:C5:32:69:D0:3B:00:04:F9:E8:21:ED:FB:75:0C:25:AB
X509v3 Authority Key Identifier:
keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:9a:ee:1e:29:a4:51:d2:ec:c2:dd:24:8d:c5:a1:b0:5c:
99:72:e5:42:aa:0a:fc:0e:aa:e4:30:4c:98:d8:8a:f6:a8:61:
58:28:53:13:73:25:91:4b:45:52:b4:e1:22:2f:62:fb:3b:b8:
df:6e:45:1b:c3:21:b8:08:49:50:17:e8:98:cc:1a:a8:a6:4d:
7c:57:3f:37:f3:f9:49:7c:5a:9e:c4:d8:da:14:ff:42:c8:2a:
5d:8f:47:65:2b:75:b6:e3:03:57:d8:b0:c3:a1:aa:6c:cf:61:
bd:51:bc:e4:44:f0:96:68:a4:5c:de:1f:77:28:da:78:c4:8e:
26:67:96:62:e2:d1:75:a7:82:7d:92:14:27:42:85:ec:db:a8:
56:5f:75:fe:c0:a8:cd:98:b4:f9:bf:11:b7:da:14:6b:6c:09:
d6:a9:a6:ab:9f:a7:bb:89:08:ad:0f:63:fd:e1:3a:af:d0:cf:
ee:86:ab:3c:cb:3f:70:79:86:4e:3f:45:f7:de:fa:e0:bf:e2:
55:ba:fe:0d:a3:02:9a:2e:ba:86:07:e7:d5:b6:c2:8b:01:34:
e5:d5:8a:85:d3:3b:15:49:c3:4d:8b:58:9d:a6:82:8e:4b:0c:
92:c4:a4:63:0b:c9:0a:3f:55:2a:18:25:af:4d:29:75:c0:bd:
d6:df:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:45 2025 by rpki-client