Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: FwTcxnD26T9zGsj1BTL24XONCNq2SR+SGsd8uH9Z2nQ=
Subject key identifier: 6C:92:50:07:40:3A:9B:8D:D0:FA:C0:9C:2F:6C:E6:F1:46:95:31:8A
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 0194BC050E42A025EFF9E7FB27121424A652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: hKi3Za0J3KrCW4M9ydFJSuZ5z8p++3HZs7kczjjQkKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:42:a0:25:ef:f9:e7:fb:27:12:14:24:a6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=6c925007403a9b8dd0fac09c2f6ce6f14695318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:33:ed:7f:f8:3b:69:e1:75:df:73:e0:61:
2e:5b:c7:97:fe:30:ab:ac:7a:4e:7c:73:08:c1:71:
1e:da:a3:4f:56:52:42:a7:9b:b3:b6:b9:44:f3:84:
fd:15:95:53:a1:6d:f7:67:63:31:92:84:ac:fe:ed:
52:71:69:d0:58:c6:43:4b:ab:db:a7:6c:42:64:ad:
c6:2b:cb:c3:ca:9b:69:50:53:70:61:38:25:20:64:
46:3e:c5:b1:4a:b5:d4:33:ea:9a:8c:4c:64:24:7c:
c4:09:4a:3c:a6:4d:a0:97:97:76:29:1e:20:2e:16:
80:6a:d3:67:e4:39:76:24:d1:f9:9f:35:22:79:9e:
28:e4:42:58:3e:57:78:e3:8d:9d:da:c0:f7:da:08:
b6:50:37:77:26:b0:99:e5:3f:34:e8:c9:28:d7:8f:
d2:9e:aa:7a:10:21:7c:5c:57:70:58:2f:94:e2:b2:
62:53:93:8f:ce:8a:14:a4:c7:c2:0f:4a:37:49:32:
17:15:6c:2b:c0:be:be:03:89:01:80:00:c2:5a:3d:
00:25:95:18:29:64:ca:d2:7d:7f:12:c2:25:03:76:
a1:9f:46:dd:75:95:2d:ce:4d:af:6d:b9:10:17:78:
68:e8:82:13:bb:c3:08:6c:73:a3:23:c6:09:41:fa:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:50:07:40:3A:9B:8D:D0:FA:C0:9C:2F:6C:E6:F1:46:95:31:8A
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0f:ac:bc:8a:21:20:d4:dd:e2:ef:af:de:71:e6:6f:fd:70:
6a:88:d1:dd:44:97:ee:e5:c5:10:90:e7:23:54:0a:18:7a:d0:
dd:12:45:5c:32:7c:66:bb:1f:17:c9:5c:fd:84:63:81:b1:2f:
00:fc:7c:03:80:6f:4b:06:36:4a:22:b1:9a:f3:4e:5b:30:11:
7d:68:27:8b:f1:0e:7e:0e:51:b0:4e:64:28:a1:ae:32:e0:52:
b8:7a:1f:0e:83:e0:24:8c:d3:22:d0:83:54:73:fc:be:6d:80:
08:e6:a2:e2:b1:cd:8e:73:db:73:1f:d7:d6:c3:38:a7:5c:ad:
f9:bb:5e:b1:8f:58:6f:68:b8:e4:15:a4:34:b7:c5:07:ca:16:
a8:a3:91:f9:a5:c6:12:18:88:37:ee:0a:0f:b9:fb:0a:5a:e6:
38:6e:f5:05:42:1f:e2:4b:f8:cf:01:9f:80:2c:fb:b7:ab:c4:
6c:9b:45:e9:07:a7:e8:18:37:a0:0f:b8:dd:e2:78:c7:e6:4f:
f5:57:61:3f:d6:66:f0:96:e5:e2:cb:4f:d8:58:1e:f5:5a:f7:
23:c8:93:a6:01:ff:49:a0:cf:e0:a5:1b:ae:5c:89:43:ce:5a:
6e:38:2a:00:c9:c0:5b:37:7c:4c:75:ca:05:fb:86:9b:0d:41:
c2:c7:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:08 2025 by rpki-client