Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: /eX67ZGpNwt/ZypH6ygaSxAC6W5F9eolmCr1F3xbf3c=
Subject key identifier: BD:42:7D:70:3D:D6:91:7E:FA:A5:93:CE:E8:97:4F:BB:78:F7:86:1B
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 0194BC72992E2EA33038647C2CABD6FE249E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 1F
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: Rh1-3odcKsHE-cbcsOPqzTGwaik.roa (hash: gW+wBKfqraJTbuMXfCglcuvN6Kb55qCQd+sGLIt/fpk=)
2: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: B2H1ZTTdlVYfa0aFLa5c+FgqA8IaGMokcWNood62UWM=)
3: oZpGbVUpKUH0VrpNLhpu97i1M_M.roa (hash: oW6hkmxowE3qg/Jyo6V/wTo6z6868bLjjZkfHvalrnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:99:2e:2e:a3:30:38:64:7c:2c:ab:d6:fe:24:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=bd427d703dd6917efaa593cee8974fbb78f7861b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:37:71:b3:73:fd:74:7f:26:f6:a0:0d:f9:
c7:cf:eb:ef:e3:e1:5d:06:6c:1a:9c:ff:18:9d:26:
ae:2f:ac:9c:46:40:82:1b:66:d4:2d:2b:75:03:ad:
f3:2f:5d:83:96:64:b6:4b:29:73:bd:40:a1:a8:71:
20:17:13:a0:5b:3b:b6:c8:4c:28:6a:c7:c3:50:b8:
a9:9f:6a:1f:92:29:8b:44:bc:47:0a:18:65:98:42:
68:bb:3a:30:16:64:40:9e:63:f6:dc:d7:35:78:5b:
11:ba:e0:f8:73:7f:b4:da:38:bc:1d:86:b8:6e:0c:
9e:26:19:d1:7f:50:05:44:e1:9d:48:f1:54:e5:62:
72:24:7c:75:4c:8c:b4:6f:db:40:39:cd:59:7d:71:
b9:29:ff:bb:a3:57:c9:d1:8f:ae:fe:7a:9c:1b:a4:
a8:a7:e4:68:23:58:0b:98:e3:27:47:f3:91:6e:a2:
6b:bd:9d:b1:4a:0a:db:6c:8e:f0:6e:cf:2d:45:00:
42:a1:f5:b1:15:11:69:bf:a6:d2:f0:01:76:4d:4a:
73:ec:90:fb:d2:00:2c:86:49:61:8c:69:74:d4:e1:
49:fb:29:68:5e:fa:e1:84:da:15:21:53:98:57:ad:
c4:69:45:9b:24:1a:7a:a9:ca:74:e8:6a:99:64:e7:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:42:7D:70:3D:D6:91:7E:FA:A5:93:CE:E8:97:4F:BB:78:F7:86:1B
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:80:b8:8a:13:24:36:a9:eb:c6:54:dd:0d:ed:70:62:97:f6:
da:8c:99:af:9f:30:04:b4:8d:e4:24:27:f0:ae:d1:10:c3:94:
7f:b8:d4:d0:37:47:42:3e:af:6d:6b:c0:24:ee:6f:e8:8b:0e:
e7:8b:bc:9d:65:ea:eb:c7:0d:bd:a6:51:1f:99:ec:45:dd:b3:
e5:38:18:69:f1:1a:b8:94:7b:65:03:ba:fe:2f:d5:d7:a4:c7:
b8:10:d7:18:35:ed:76:d7:78:f9:76:51:c8:ed:f0:7d:18:4d:
55:c5:fb:d6:64:93:8b:a5:99:06:15:59:36:40:07:1a:96:b0:
c9:5f:53:15:a2:50:0c:7a:b7:87:99:c6:f0:1d:38:b6:34:ea:
9c:11:cb:ef:3c:67:5e:11:a2:0a:c9:3b:74:20:53:8c:28:42:
9b:0c:c6:e2:51:12:6c:30:44:4c:ee:ff:65:5c:15:c0:78:95:
c6:e8:92:2e:41:bd:c2:fd:56:59:6f:5b:c7:f7:c6:36:ea:58:
04:37:c9:5c:ec:1b:d2:9b:08:6e:66:4b:7f:97:c5:09:37:93:
10:e3:24:df:40:8c:90:f5:78:67:e2:91:4c:74:4c:28:03:b1:
c2:ff:cc:8b:6e:7a:ae:15:64:e5:fa:30:29:6b:d2:b8:63:51:
d8:93:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:34 2025 by rpki-client