Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: qmJ+yeTY+KQWaLJsv1oG32qgvINZlq376iPXIcNyW9k=
Subject key identifier: 1A:56:29:A1:87:53:09:1F:9E:31:23:C6:19:D2:96:8A:22:69:66:83
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 0194BBCDBF953B1DD4963E708EFDBBC492BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 071E
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: ps22dWL6LjGBFQmeP7vBVYX++u4QhMyXyahV82O9sCA=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bf:95:3b:1d:d4:96:3e:70:8e:fd:bb:c4:92:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=1a5629a18753091f9e3123c619d2968a22696683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:03:40:6f:4e:fe:62:97:4f:63:df:bd:ec:
62:46:60:75:2a:d9:9f:07:7c:32:0d:61:72:1c:fa:
63:0f:39:91:72:c5:d0:fa:6f:24:eb:d4:d4:f1:d1:
a5:30:d2:70:c9:c0:31:a4:be:f5:fd:4c:e4:94:92:
d1:48:3a:02:00:81:a3:1a:91:df:9d:1f:d6:9e:69:
39:f8:c4:40:94:17:89:48:4f:6c:bb:0b:fb:60:55:
fc:3f:17:6d:44:83:f6:88:09:da:97:12:3f:3e:ce:
c7:b0:12:11:8d:0d:b8:76:04:2b:9b:4a:9f:8e:24:
a9:76:0c:79:e1:e5:da:ad:d4:26:2a:b1:b1:15:47:
f7:02:d7:ee:c1:4c:e2:86:9c:5f:99:d9:be:6b:1f:
ad:58:a1:c2:19:66:65:82:8a:73:bb:6c:b3:33:ed:
06:68:e1:d5:0c:62:54:22:1f:15:62:65:c3:60:cd:
09:3f:0f:02:14:15:ed:b6:a1:3c:47:43:38:43:0d:
e6:3c:65:6c:fa:09:a7:0b:31:c9:aa:af:54:1f:16:
ed:a2:69:66:43:5e:55:04:7d:1a:30:55:da:ff:bb:
af:ff:b7:97:bc:96:63:41:28:46:49:02:13:15:23:
9a:a5:40:63:c0:fd:9e:e8:90:80:85:93:f2:fe:c0:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:29:A1:87:53:09:1F:9E:31:23:C6:19:D2:96:8A:22:69:66:83
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2b:4f:82:ba:d9:d6:3b:fc:60:e1:41:d4:ea:4e:71:86:9a:
83:96:65:da:ca:b9:e5:73:54:01:4d:00:c6:00:3b:e4:9d:25:
35:f1:66:05:b5:0b:3a:26:41:ee:6a:28:30:96:f3:f9:e0:a1:
cd:b7:97:b9:22:d6:56:60:98:1b:46:71:51:cb:17:f6:3b:c1:
d1:a5:a6:c1:b2:a9:33:de:21:23:dc:50:0a:6a:f6:a3:81:e5:
f1:4f:b1:61:46:bd:82:1e:9c:9d:c2:d8:2a:61:bc:67:06:85:
c8:a4:12:e0:9e:1c:20:8c:f4:f3:79:5a:41:87:c3:c3:98:b2:
ab:6f:84:94:bf:6c:a5:86:36:1f:43:39:a4:da:ac:7d:5b:2f:
b6:8e:e4:bc:96:04:b8:25:54:3e:bd:01:24:dd:06:87:78:a0:
93:91:e3:be:2d:f1:0e:8a:80:97:ee:28:59:a6:bf:1b:a7:90:
e1:1c:90:1d:21:4a:93:e3:c1:26:69:38:a5:e3:49:e1:15:12:
5d:09:ea:32:5f:7b:17:aa:dd:af:10:77:d2:43:eb:43:dc:f6:
29:d5:c3:78:d6:75:65:a5:5f:10:b2:e4:cc:dc:3f:12:85:24:
ef:8f:45:75:ff:0a:bc:ea:30:8a:eb:3b:d6:e1:91:4e:f8:05:
75:c7:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:28 2025 by rpki-client