Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: iiswQJ9Fz5sRLpXotxpsqIgKIZ48kCko+ELoWYRjW+k=
Subject key identifier: B1:0F:A8:FD:BC:7B:1A:72:EA:6F:78:35:69:F1:B7:16:5B:A8:DE:23
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 0194BD859E64B6214C717F8C9FB5A22B05F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 0D97
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: i-wVHRnuTYtFq7EOptpWJBt3Mdw.roa (hash: dyBwX82dFdjJwih5rdCwN8ZxNRpPJvl5rysORp718qc=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: 6F7aCEMG72FABdd98X8hac+zsATgxzzyM/WVz2g3ElY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:64:b6:21:4c:71:7f:8c:9f:b5:a2:2b:05:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=b10fa8fdbc7b1a72ea6f783569f1b7165ba8de23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:2c:3f:b7:23:4e:ac:13:76:66:7f:bc:e5:
43:c9:6f:31:6a:4c:d6:b8:04:dd:e8:ed:0b:16:a6:
68:50:77:aa:03:2a:24:13:ef:3d:de:66:cf:03:44:
5d:92:7e:98:0b:54:ef:17:9a:9a:10:6e:39:55:27:
f1:05:60:97:17:19:81:24:be:f0:d3:6e:be:3d:f3:
28:cc:7a:ca:08:ee:12:29:dc:c7:63:f3:5c:ef:ed:
17:05:3a:b8:11:12:98:e0:b1:d5:64:c6:b0:81:9d:
1b:ea:20:ee:ea:6c:2f:90:f6:00:11:15:39:4a:fc:
68:00:86:af:f1:60:07:82:fc:1a:ac:58:95:a0:68:
55:4a:a8:2e:1c:49:a5:bd:e9:27:8e:25:22:e2:bf:
c8:68:9a:a2:68:ce:4a:7d:2f:4f:ef:4a:ee:0f:f0:
14:82:49:15:38:a6:56:1f:de:70:b5:53:8a:39:d1:
65:01:c3:3d:71:db:1d:85:f2:a8:bb:35:20:34:6e:
aa:2b:db:c1:20:53:30:5b:b2:ac:19:a2:0a:05:42:
5c:f3:40:84:94:0b:fd:77:bc:a6:77:5a:f0:a8:a0:
95:ea:4e:a3:b6:ce:d9:24:67:9c:6a:da:39:e2:c0:
de:23:1f:8c:ff:72:4f:9f:f3:0a:18:c7:ad:09:c0:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:A8:FD:BC:7B:1A:72:EA:6F:78:35:69:F1:B7:16:5B:A8:DE:23
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:01:6b:07:0d:56:d8:81:6a:57:18:3d:dc:99:fb:70:19:92:
b5:8c:b3:c8:e1:a4:2e:86:63:e9:30:43:de:f8:08:3d:b0:18:
2a:7a:8b:8d:61:1e:d2:a0:6c:0a:3a:cd:c7:e7:60:6a:5f:24:
ad:ca:79:5f:66:3f:73:45:39:3e:7d:5e:88:fe:7c:d9:90:3f:
30:c5:6c:86:6a:b8:58:8e:2c:f9:3f:78:35:0c:50:e2:b9:27:
7c:5f:d6:be:59:59:81:17:94:cc:f5:86:1f:83:3e:a8:17:69:
61:61:6f:0d:70:84:d3:57:b1:15:2e:0b:80:a6:52:a6:d9:57:
06:67:63:3f:3e:05:dd:55:77:df:f0:23:3b:7d:25:c2:5c:8f:
58:20:3a:9d:35:55:43:9b:a6:16:ce:67:60:5b:7e:05:c6:ad:
54:e4:f3:50:29:2d:f4:f9:87:e3:67:04:97:1d:2f:ff:00:0f:
49:6f:ce:21:f5:fa:fc:54:7e:63:7b:c8:25:6b:7f:2e:21:cc:
e6:e0:33:18:b6:ce:5a:d0:bb:77:ff:86:d2:3e:f1:30:a9:c6:
3c:57:ef:21:89:29:b5:af:ca:7a:27:72:92:3c:37:c1:af:4c:
76:da:fe:d8:97:06:15:9c:de:f2:af:e0:3e:ef:70:a0:37:a3:
25:21:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:17 2025 by rpki-client