Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: tQ1FKUrz9vpwBN1qo0/swes2cWS04iuTlcu9pUPVElQ=
Subject key identifier: DE:68:A3:21:B1:1B:F5:B0:AC:09:87:3F:A0:0F:F1:14:D0:D0:C7:A9
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 0194BCA9D5CC27791131E705450886169040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 0826
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: Cv5i8UkLcqCwvPF/cB7S/wILC3NmnVeda5buhZibMIA=)
2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d5:cc:27:79:11:31:e7:05:45:08:86:16:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=de68a321b11bf5b0ac09873fa00ff114d0d0c7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:b8:f3:be:ee:0a:ae:09:86:99:98:fb:7e:
ff:63:b3:50:31:8d:98:89:7e:51:0f:b5:f0:dd:31:
ab:19:c4:90:a9:c0:dd:ea:c4:5a:14:68:aa:65:42:
bc:44:96:2f:d1:86:86:7d:f1:6b:9b:52:4f:15:7c:
84:45:1b:be:15:eb:e0:01:fb:89:51:5c:58:3b:86:
4a:37:26:45:b6:40:84:64:73:f9:fc:56:cd:d7:38:
21:a0:15:10:6a:91:45:ba:73:7b:55:03:b3:a6:5f:
24:bd:7c:c5:6a:44:da:69:a5:0e:c8:56:09:ba:1c:
eb:b6:48:22:e7:fb:f0:d1:5d:02:3d:82:45:ee:7f:
c4:2d:11:3d:bf:03:73:28:9b:d3:44:61:c8:a1:23:
c5:db:dc:3b:d9:64:aa:14:f1:8f:87:c8:7a:c8:d1:
2a:fa:55:da:65:a5:79:f5:72:e2:b7:cd:c7:65:69:
e1:92:ac:94:0e:ba:bb:ff:34:c6:4a:2e:6d:e7:36:
09:69:e4:6a:a4:44:0d:a0:83:ef:d8:79:98:b5:53:
b0:5b:cc:26:1c:39:64:b0:94:7c:77:5b:1f:e2:50:
a7:a5:e6:6f:04:8b:49:46:86:ef:92:29:c0:99:bc:
85:43:bf:7b:b8:02:87:19:e7:cf:f1:0d:e6:cf:85:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:A3:21:B1:1B:F5:B0:AC:09:87:3F:A0:0F:F1:14:D0:D0:C7:A9
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:01:08:67:0a:e3:33:d2:4b:bc:f5:b7:93:52:a1:52:ce:ef:
9f:c6:1e:33:5d:2f:21:61:c7:68:37:e3:87:a6:7f:8a:f9:ee:
9e:cb:a7:ce:49:92:c8:7c:5c:b4:f1:d0:89:28:38:35:4f:57:
36:45:39:ea:fc:bc:44:1f:61:be:1c:ed:6a:7f:fd:ab:db:4a:
43:16:01:2c:08:d9:a0:80:c7:51:77:51:a7:1b:ef:39:13:40:
85:90:c1:54:7e:ae:15:10:71:f1:e3:2e:66:18:e4:22:03:b3:
6d:ff:a8:34:26:21:3b:71:2a:05:2a:1f:17:c9:44:a4:f4:98:
63:60:f9:15:02:c2:8c:91:04:a2:af:8a:1e:99:76:08:3e:03:
4c:c3:c3:e9:44:a0:a1:14:cf:a6:2c:f5:d2:5b:6f:ee:fb:26:
4a:4b:b9:21:73:df:e3:2b:d2:8b:15:68:c9:b5:06:22:11:8a:
37:4c:5b:db:ee:2c:02:d9:6e:07:88:23:6b:66:87:02:a5:01:
f7:13:33:75:83:c6:d4:d6:70:0f:4a:85:26:c5:4f:97:39:33:
7b:de:7c:e7:6f:0a:5c:5b:56:63:c9:66:5b:02:fd:36:9c:4b:
13:d1:57:8b:93:17:c2:e3:0a:48:37:6b:e5:21:db:2c:63:28:
b8:2d:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:31 2025 by rpki-client