Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
File: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json)
Hash identifier: urwqqaV5teFsfPnJ5TGj178Ltt7jWgfhhvmakKs9Mss=
Subject key identifier: 88:5D:A4:F0:46:90:0C:CE:CC:F0:97:FA:01:B1:1E:42:AF:73:1D:C9
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial: 0194BCE080397E5B729D5721873A3D88F830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: 6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa (hash: E8YKQ+7oKbQVBsilOuJbTsXN0BQkzpHb4tN03LRQOhY=)
2: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: gePHUOtEJNy/S1/nyK2FWZ46KarEdZ8QyfFHm5lTAs8=)
3: jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa (hash: VJTPRYmj0bLLGoSUyYkDz754dQcYj27q2IKg/a+56Gg=)
4: rWTg50lIWr4eBCYZpN1g2rEsvwA.roa (hash: h6askj3XUZ9cNfHdvd89Te7uFDoO162bWotdGeS5FPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:80:39:7e:5b:72:9d:57:21:87:3a:3d:88:f8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=885da4f046900cceccf097fa01b11e42af731dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:53:41:25:19:13:81:e5:f7:fb:99:f7:53:
3a:d8:7e:b9:08:66:4b:a4:cf:90:fb:a2:68:da:d8:
73:cf:42:ef:3c:e5:75:ed:eb:7e:33:1b:46:7f:8f:
ca:cd:60:de:20:5e:1a:f2:d5:82:28:13:25:da:a7:
7d:76:83:c4:ca:a4:1e:01:e3:35:6d:13:62:5e:3a:
63:2a:bb:5a:75:b4:d1:8e:e0:77:bb:25:14:bb:59:
f1:02:f0:aa:26:c9:39:d5:00:bc:fe:b2:db:e2:86:
50:b9:3c:a1:6a:fc:2e:76:93:83:81:ce:17:00:5b:
3d:96:9f:6c:c7:eb:41:ac:cc:5c:4b:da:18:9f:67:
a7:70:76:8b:0f:d7:54:24:7b:d4:c7:39:88:7e:e5:
ca:99:52:fd:67:ec:de:96:26:c8:13:69:8c:19:a4:
b2:de:47:a6:d5:b0:58:d6:c7:e5:dc:dc:bb:f2:76:
14:c5:b5:ae:c2:24:9b:73:09:51:e4:d1:e6:cc:b0:
62:df:c5:2e:91:5b:9d:44:7b:95:3b:21:7e:ff:81:
a8:40:1b:23:eb:d7:f3:32:75:47:d8:68:8d:4a:01:
76:f1:0d:69:45:79:aa:74:4e:64:fa:dd:e0:f7:62:
6a:b0:3c:52:f0:44:42:21:8e:5b:2f:ea:cf:7c:ca:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5D:A4:F0:46:90:0C:CE:CC:F0:97:FA:01:B1:1E:42:AF:73:1D:C9
X509v3 Authority Key Identifier:
keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:d2:e9:91:55:bf:91:37:38:fc:ce:67:75:7d:74:77:57:
30:c2:73:16:8b:23:81:2a:55:4f:c9:6b:ca:92:78:a5:64:18:
2a:26:f8:1d:8c:85:55:b7:9d:26:70:14:6c:7b:27:7a:99:66:
86:cd:56:38:6b:0b:d1:ba:d5:e3:2a:f2:91:b6:d4:76:f4:6e:
5c:28:bf:d1:3b:d5:f4:1a:34:6b:b8:ba:d5:b3:49:1a:f7:28:
5a:8c:69:8f:24:64:68:cb:2d:bd:7b:3e:43:61:6f:6f:c9:07:
91:9b:a1:28:31:ca:6c:0d:68:83:52:f0:2c:f9:63:87:17:d7:
9c:4c:08:46:14:f9:b4:22:57:3f:c7:6e:2c:54:95:ff:8a:fa:
23:22:af:af:d6:5a:51:96:16:aa:39:28:97:0f:ad:54:a2:a3:
2c:74:23:ba:ad:35:20:c8:42:18:39:64:15:7b:ee:07:99:5c:
fa:e3:ec:2c:84:6e:96:44:d3:28:6a:d1:4c:b6:df:ee:da:ba:
48:68:f0:ee:09:ed:be:dc:67:60:2a:d2:8b:39:5b:4e:b3:44:
64:ce:21:d9:25:59:27:91:7c:35:4d:4a:2d:66:8f:1c:32:c2:
8e:c3:65:d4:36:fc:0b:10:ab:db:7e:0f:ea:7a:0c:fd:85:b3:
0c:60:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:46 2025 by rpki-client