Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
File: Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft (raw, json)
Hash identifier: owIK8l255FyvVQne+2zVMbeJ57zTuf+Lo/8bCTjDbuI=
Subject key identifier: BB:F2:1D:C8:29:2A:0F:5E:AF:0F:8A:84:0E:7A:CF:0C:C1:43:5F:DA
Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627
Certificate serial: 0194BC3C6E7A2278D275560A169F262735F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
Manifest number: 1385
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl (hash: m1kL8rbrRxHsH68ejRLJiho8Hukoy5c1X9i/UcqNAV8=)
2: ZBPuASXAJcjpb4z2Gk47z8Bokws.roa (hash: xXQRbhIxvcjZLo2Nk1OZPyhXjwNTzt2gl2oGbinvPSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6e:7a:22:78:d2:75:56:0a:16:9f:26:27:35:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=bbf21dc8292a0f5eaf0f8a840e7acf0cc1435fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:55:18:80:0a:9a:5d:cd:55:c4:eb:0e:e9:
5b:96:61:4e:3b:e7:cb:46:65:53:47:1d:60:3d:e7:
75:36:5e:a7:84:ef:ac:0c:d8:fe:83:40:d5:88:58:
7f:70:60:de:0f:51:c4:b3:ff:8b:c6:2c:36:10:e7:
c9:f5:cf:0d:7c:a4:74:cc:8d:2c:cc:eb:f5:9b:f8:
97:53:65:5b:29:a6:c9:05:35:4a:f1:db:30:69:e5:
f2:b2:32:82:60:0f:23:1d:47:2f:f1:4d:6b:f8:28:
ad:da:8a:85:69:0a:0c:fe:9f:cf:6d:b4:bf:2e:87:
5f:a2:5f:3a:83:02:f3:10:e5:91:c1:8a:68:3e:54:
72:45:05:53:34:ad:e6:67:1a:68:27:dd:d4:c5:b2:
21:82:f1:f4:c2:31:df:59:9e:a7:32:89:c3:c1:3e:
9f:9b:7b:8a:4b:ef:4c:61:c3:39:0f:6b:01:d6:d2:
ec:2b:da:51:db:cb:c0:e8:0f:44:4a:04:96:86:f6:
dc:12:c6:0f:ed:a1:55:cb:b4:24:16:04:cf:ad:19:
e3:a6:05:61:72:a7:a5:53:b2:3c:f3:77:7d:0c:93:
73:30:a6:b7:ce:f7:da:3a:f3:d7:2b:6d:ca:a0:c7:
7b:06:0f:0a:07:9f:a3:ab:0d:69:8b:22:23:04:26:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:1D:C8:29:2A:0F:5E:AF:0F:8A:84:0E:7A:CF:0C:C1:43:5F:DA
X509v3 Authority Key Identifier:
keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c5:03:80:89:cb:d5:05:a0:67:8c:fb:dc:06:77:d2:0f:73:
96:fb:ba:fb:f1:7d:cd:03:a8:b8:24:1c:97:b4:cc:58:ce:bf:
16:d8:28:e4:35:04:c8:4b:2b:ff:ec:89:c1:fb:fe:8d:b5:29:
6e:07:f7:42:3c:03:a0:93:ac:c1:21:44:88:79:38:47:04:74:
e1:d0:fc:41:3b:56:d3:df:d4:c0:71:ec:42:c1:a4:8a:09:cc:
74:3a:0a:7a:b8:02:cc:e5:f6:15:73:a7:cc:b8:7c:f4:8d:a2:
9a:5a:1a:40:a7:60:ab:67:9f:bb:74:61:51:15:9f:6f:c3:2b:
96:28:18:ac:7a:7c:81:97:a6:85:7a:11:5c:6b:63:d3:4c:30:
23:40:fe:52:e7:34:08:58:13:cc:5f:fb:ce:00:ce:c6:c7:32:
d2:10:81:48:c1:02:9c:d2:4e:77:0b:87:3c:9d:cc:a3:75:41:
b4:01:a2:5c:97:f6:80:0e:3b:d8:40:f8:a9:f4:e9:90:1a:8c:
6c:88:76:99:3a:87:db:1b:b3:bf:a0:d4:a5:7d:c5:0f:31:e4:
0d:bf:6e:4b:62:f7:af:23:4b:4a:1a:f7:76:e4:02:56:01:31:
ff:25:58:67:d7:64:65:c4:34:e2:e8:ea:7a:61:c5:59:24:5c:
e5:f6:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:43 2025 by rpki-client