Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier: t39aBL1O/Buh0234ydeymmUW0O700Cdoh9YNzPTYHtI=
Subject key identifier: A1:D6:6E:3F:82:7B:E2:38:B1:E9:58:36:89:B8:FF:5E:8E:35:36:BC
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0194BCE0575FCF1A671375DFB5A80DD727C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number: 1459
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: GaKfTqsXTBbzB0l6PPjCOtbieE8.roa (hash: bGjsSkVxtFTtg2bHcJH2NQE4duud/iaOMe/znbQ8Z78=)
2: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: Y89p09L8gh7uvBM6zulQEQKvphguQcoFwhAdanA2no0=)
3: hmDY1FymVXe286d5ZNgwBFIGxm4.roa (hash: Zbu1bt5R8yR+6iSFlZwKImktTYOEWVgQQduF/IlpQPQ=)
4: vZCiwKajLAj94g_r1KS02gxe_XQ.roa (hash: /9FsroII+PnZV3EcII02TBLCdlztOBLTex1BPR/WLFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:57:5f:cf:1a:67:13:75:df:b5:a8:0d:d7:27:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=a1d66e3f827be238b1e9583689b8ff5e8e3536bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:3b:af:49:75:de:f8:4a:d1:54:98:a9:b6:
42:e6:43:96:d3:36:60:8f:7b:e3:5c:1f:56:e0:d8:
b4:39:fe:0b:6d:6a:62:21:ee:01:44:e0:96:ad:99:
7a:aa:c0:65:a7:05:53:13:79:4e:94:41:70:73:39:
1f:66:6b:70:1c:77:10:71:81:36:fc:d9:5c:ad:b8:
0d:cb:8d:a9:25:5d:1d:60:c5:2f:64:31:f0:ae:05:
3b:8b:3f:7e:07:3e:83:d5:c2:94:09:e6:f8:84:f7:
da:58:9c:df:1e:c0:d1:71:d2:4d:ad:7e:c8:5c:de:
ba:28:2d:c5:73:d5:3e:1b:ee:87:5a:e8:2e:a4:27:
7e:90:54:73:9d:22:28:1f:58:1b:7b:99:a5:67:2d:
74:18:ce:b5:1d:e4:5b:f6:ed:bd:a7:f3:1d:bf:b1:
be:23:5e:68:1a:0f:b0:36:b0:cd:ce:78:d5:2b:c7:
b3:75:33:6a:b9:19:8e:62:fb:a9:11:89:10:5f:a4:
db:b0:cb:39:c2:d3:67:b6:65:b7:76:97:a3:e5:3f:
c5:eb:eb:e9:be:db:65:ac:dd:8f:f7:d5:67:61:c5:
e6:2b:e3:88:0e:9f:d1:41:7d:73:d3:bb:4c:c6:6a:
f8:07:3a:5e:31:2a:d6:24:79:85:e7:c7:c2:ae:14:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D6:6E:3F:82:7B:E2:38:B1:E9:58:36:89:B8:FF:5E:8E:35:36:BC
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:99:25:80:f7:8b:b7:0d:96:a1:03:97:82:09:ac:49:75:56:
17:6c:4b:c3:2d:aa:63:1e:9a:23:aa:f8:5e:4b:d8:65:cc:1b:
48:97:c7:90:d1:81:03:d9:47:a6:a9:31:f1:ad:c7:90:5e:4d:
33:13:e2:4a:7c:a9:94:09:cc:a0:93:35:a2:83:ca:a6:ff:1e:
36:f9:9a:25:d9:24:a7:0a:f9:ee:cc:76:9d:81:28:55:50:83:
60:16:75:be:67:db:7b:52:e7:0f:47:fe:2c:45:6f:8e:df:64:
a6:58:49:42:fb:53:c6:ce:ed:01:dd:01:65:a4:7f:74:1e:00:
a2:12:9f:e8:23:8b:8b:08:da:5a:b9:be:d0:52:48:14:27:d4:
a5:3d:91:d7:45:98:a0:1d:95:22:7c:8c:f5:5c:cb:96:cc:56:
fe:9f:75:b5:00:2c:f1:d3:95:a7:0e:85:4f:c9:57:2b:8b:b2:
5b:89:fa:a7:7f:53:30:44:7c:39:2b:b3:34:b3:89:33:c1:2a:
5d:b0:2a:4c:d2:1c:ca:0e:83:4d:99:ee:30:7f:d0:fa:2a:62:
53:dc:7b:19:47:34:4f:db:40:a2:41:b6:1d:5c:31:ec:56:67:
dc:80:72:e8:52:14:93:b6:01:43:66:3e:1e:8e:f6:ed:1b:ba:
15:bb:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:30 2025 by rpki-client