Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json)
Hash identifier: BZV54Vj4Cr7HtMzb8DD7kyUKXDqV6xocMmWyHXpk5rs=
Subject key identifier: DC:5D:32:FD:65:6C:C0:E7:A9:A9:2F:14:F6:75:0C:FB:84:44:66:80
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial: 0194BCE0BE1B87964748336503B7A957345C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 35bIez4DE4f8IctL5QEgdASB-4Y.roa (hash: TCPS2vFGt9j3BHs+mf2M0eQppw/ELA+Rm7h4Oyv00F8=)
2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: wUGbqj0+dbU/ZEe7IphAvIFKNkPHzwAPhBrs+69N8J8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:be:1b:87:96:47:48:33:65:03:b7:a9:57:34:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=dc5d32fd656cc0e7a9a92f14f6750cfb84446680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:3d:08:7a:a5:ac:2e:9f:c6:aa:5f:6a:3b:
bd:df:07:d8:3e:b4:cb:fd:04:24:43:5a:fa:02:f3:
a5:62:cd:76:39:65:b0:ba:0a:54:99:f2:02:99:4b:
7b:cb:8f:8b:4c:14:29:53:e9:dc:b2:09:85:05:01:
6f:ee:99:08:72:c6:8d:18:df:71:2e:f0:51:a1:47:
f0:85:eb:c1:07:9b:82:41:40:cb:84:aa:c2:7c:c0:
86:28:93:7d:74:e9:44:08:a6:85:5e:12:fa:6f:ee:
f7:72:f9:67:06:e6:87:48:e3:b4:c6:9b:42:97:bd:
77:ee:e7:77:0a:39:8d:9c:ca:9d:f4:08:4b:90:6f:
29:a5:5f:ee:2c:a3:2c:6a:a6:9a:2d:9e:b4:c1:f9:
5d:94:6b:c4:5a:dc:aa:48:a0:e1:c5:9d:e7:92:a2:
9d:75:c1:76:64:3f:4f:80:cd:04:eb:90:33:7e:f3:
fe:38:7c:64:9b:54:f2:51:f9:93:3a:4c:32:cf:f4:
58:d8:db:cd:8e:37:2a:c6:73:bf:54:73:0d:4a:b7:
1c:d3:df:02:a4:d9:0a:26:26:6d:44:07:25:83:31:
f7:ff:31:f8:57:eb:f4:8d:da:f4:d7:93:d7:e5:7c:
ca:26:30:87:1d:2e:67:23:5b:f6:89:4e:e3:83:47:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:32:FD:65:6C:C0:E7:A9:A9:2F:14:F6:75:0C:FB:84:44:66:80
X509v3 Authority Key Identifier:
keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:82:56:05:f3:b7:bd:43:13:5c:4c:28:9f:c9:75:f5:d8:77:
22:eb:9c:31:d4:c2:9f:82:57:03:8f:b9:6d:be:d6:ce:00:b4:
a4:36:ea:36:69:5e:6f:1d:3f:b8:38:8f:62:3d:a2:76:b6:6e:
57:4a:cb:4f:d1:4a:89:55:8a:60:f4:30:e5:3e:e3:71:a1:62:
6e:ce:bb:70:3a:e6:7a:ed:c4:6f:3d:b2:87:22:9c:93:d8:f6:
a7:8a:3d:75:e7:90:d9:94:23:06:ae:18:25:43:52:be:8b:9d:
ba:55:ff:ec:c6:d5:fb:14:f1:e2:9f:3a:4b:79:3c:a4:42:07:
27:77:5b:e3:14:bb:d2:9f:f5:b2:7d:fd:84:2b:c1:56:24:a6:
c2:a7:d9:4c:80:15:38:f9:c8:d5:b5:e4:35:8c:d8:90:f5:c1:
c8:84:94:75:ee:77:f2:06:b2:d5:35:00:a6:81:7b:3a:34:ce:
21:91:1c:a1:67:45:f4:9c:05:fd:24:bf:eb:26:d1:b6:14:66:
1a:6e:31:14:07:0b:73:9e:bd:c2:21:83:e9:29:2e:61:73:83:
c2:11:09:4c:0f:90:55:43:d0:0c:13:6b:0f:3b:a6:f2:5c:e1:
37:70:86:88:49:ec:bc:44:e8:cd:9e:2d:8c:c7:65:7d:ab:4e:
20:f4:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:07 2025 by rpki-client