Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: 6rKpQzPqbBESbAiBIGeeQ2Mf5daoQcNgL7KEYguG9pc=
Subject key identifier: 67:2D:68:DD:AC:32:6F:9C:06:F1:F3:D4:2D:6F:C6:C1:00:6D:C1:99
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 0194BCA99F2B008CA88308CDCA91BADC03BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0B28
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: l6EG1hiOlryt4otars2ay3ZzxNBqwQHdNVc3Lz6nqlU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9f:2b:00:8c:a8:83:08:cd:ca:91:ba:dc:03:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=672d68ddac326f9c06f1f3d42d6fc6c1006dc199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:fa:e8:71:49:69:99:17:fe:76:25:db:fa:
47:43:b5:c9:72:a9:1a:30:36:fc:d0:fd:45:ad:4e:
6d:87:33:6f:45:92:14:7c:50:79:d2:c2:f9:a1:ff:
0b:6e:b3:0d:89:9b:2f:b1:d5:1a:47:a2:97:3d:cf:
00:19:4c:69:7c:10:cc:db:c5:f6:39:0f:43:34:e9:
41:36:c5:0c:ea:36:6f:fc:89:99:54:e6:68:3a:87:
6b:47:0f:d9:21:db:e2:0d:1f:01:4d:3a:60:38:70:
3c:c4:d4:01:f0:b8:e2:83:db:8d:af:cd:f0:17:ea:
fd:8c:13:b9:37:61:b8:97:5d:c9:cb:9a:25:78:c8:
7f:25:07:cf:ce:6a:20:97:56:dc:cc:fe:7b:a8:8e:
5a:32:66:84:7e:b9:b9:3e:85:ea:5e:05:34:39:13:
6f:29:0b:57:2b:d2:dd:47:f6:9e:1b:da:9f:0f:83:
a2:60:28:0d:34:76:06:8e:41:9c:cc:ce:77:4c:45:
73:c7:ea:86:a3:2b:ea:db:7a:32:36:fa:38:18:9d:
12:f0:a6:3f:d7:cd:71:28:06:68:7a:0c:62:eb:de:
83:72:a0:ba:fa:1f:b2:ef:cd:c6:72:4a:0c:4f:e9:
5f:b8:58:7c:73:8f:f2:1f:8f:0b:bb:0d:6b:78:04:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:68:DD:AC:32:6F:9C:06:F1:F3:D4:2D:6F:C6:C1:00:6D:C1:99
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a3:80:89:19:62:e6:e7:56:3c:9f:6a:76:31:ab:34:16:06:
e7:b0:a6:26:bc:5c:be:c0:05:06:fb:31:99:ee:df:d2:fb:67:
f1:5d:80:ae:d2:e2:75:7e:99:09:56:0f:47:9e:32:44:01:47:
b5:0a:1f:be:35:29:3c:1a:f5:2e:33:95:0a:63:b9:bf:22:e5:
94:ba:b1:3c:ca:8d:76:20:dc:6c:7b:67:25:fb:61:ad:87:06:
d7:09:30:34:d9:36:90:4a:46:35:75:38:cf:43:27:f1:93:df:
8b:ad:51:e2:ac:fa:51:0c:27:83:d6:38:4f:da:a9:07:46:91:
80:35:0c:28:99:b3:77:61:d7:45:4e:c5:3f:0e:d0:9f:42:94:
9b:1e:b3:91:fc:40:82:68:1f:1c:7b:26:24:27:12:bd:8c:74:
73:35:42:5e:ab:b1:d0:5f:82:c3:8b:6d:8b:0d:6c:df:62:36:
99:34:1f:fa:85:9d:4c:f7:18:81:95:f4:93:45:8c:bc:8a:cc:
fa:74:2c:0e:89:a5:bb:88:04:b4:76:fc:e9:d6:ac:d9:1c:ea:
e0:84:22:8b:62:da:5e:b4:ef:71:e4:53:06:a0:27:dd:33:d8:
fa:5f:b9:5a:fa:a7:dd:e8:4a:71:73:13:ce:ae:4c:f5:ac:e0:
e6:c6:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:14 2025 by rpki-client