Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
File: zsyfK4Jf2WfpeMQgknlZX88zLFo.mft (raw, json)
Hash identifier: brfV+Xu8sVu3EDtSnmdmGSySf5dN96Vz4Qsk+45K4C4=
Subject key identifier: 26:9F:72:E9:86:CA:34:A4:18:D5:8A:30:4A:1D:FB:08:20:2C:43:38
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 0194BD1787EC8A5E7F7B87E8282399A5FB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: r-LFYkPYLB9SHC2Z1B_qz_trgHY.roa (hash: te2VOfUQNAnLZdAmjhbUK4WhCj5kkTOTXCATaV2iEvM=)
2: zsyfK4Jf2WfpeMQgknlZX88zLFo.crl (hash: zyzMCPylpstgH1NfJ9P0inztBSZL1cgDETw9FRORV2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:87:ec:8a:5e:7f:7b:87:e8:28:23:99:a5:fb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=269f72e986ca34a418d58a304a1dfb08202c4338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:20:9e:c0:e5:81:b1:26:79:42:6e:c9:73:
70:47:b4:72:f1:da:57:f4:c3:b4:25:3f:5a:c7:7c:
76:0a:1b:c4:b8:27:18:da:d8:6e:d9:b4:9f:1f:77:
a5:d2:3a:5a:65:4b:87:fc:20:eb:5c:94:27:77:52:
b2:4d:29:92:80:fa:aa:cc:47:56:12:df:6d:f1:f0:
12:6d:fd:5a:30:ff:d7:f6:2a:1b:bd:cc:e5:a5:f9:
c9:25:d2:92:84:18:12:03:3c:bb:50:22:ab:53:c4:
da:e0:a8:e4:47:f7:b1:7e:f8:8f:b1:7d:5c:b9:58:
cb:08:9f:24:43:bc:9c:47:29:6b:7e:6a:bb:4f:00:
50:a7:d8:51:3b:2b:97:8b:00:68:7d:4e:1b:b1:5d:
88:2c:25:ff:8b:f9:90:4c:0d:d4:14:00:7d:70:cd:
da:29:ba:81:de:e4:54:57:86:8f:be:94:ab:03:cd:
65:06:9a:bb:01:f3:74:3a:ea:12:81:8e:a6:f0:95:
b3:68:7a:ce:25:d2:57:53:0a:52:80:4f:6d:7d:6e:
fa:95:61:34:d7:c1:48:ba:19:14:35:42:77:12:af:
c4:3e:10:44:f0:0b:08:ae:3a:3c:a9:35:ba:de:74:
c4:50:b6:8e:0b:a6:e1:56:b8:93:13:59:e8:c5:a7:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9F:72:E9:86:CA:34:A4:18:D5:8A:30:4A:1D:FB:08:20:2C:43:38
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8a:5f:c3:aa:6a:04:df:4e:6a:7b:02:3b:31:ce:fb:b1:97:
56:c8:f3:eb:d4:7f:de:6a:c0:ae:51:06:3e:10:bd:91:17:49:
ef:b3:e3:6c:34:08:20:d0:72:07:a4:f2:cd:bd:0a:70:f4:de:
08:53:29:7b:53:ec:ac:10:a9:ae:74:ee:95:55:cd:ac:36:e3:
04:c1:d7:73:e7:6c:40:6f:3a:90:43:80:c4:bc:95:a7:31:f7:
8d:f9:17:0d:5c:b0:6a:4a:8d:2a:82:e8:55:ef:4c:51:28:ae:
4a:65:2d:49:d0:08:b1:0c:6c:c9:df:b3:3a:dc:fb:41:b8:55:
6d:12:10:8d:2c:23:72:b2:95:28:1b:3b:df:8c:39:b9:04:28:
6d:a8:4b:78:60:b2:b3:dd:7a:4b:ab:93:dd:be:d3:d1:44:a8:
d8:6d:ff:9c:9d:f7:f9:e6:fe:fc:85:b8:76:7e:44:53:f3:82:
ef:19:e6:a2:97:2b:3c:2a:f2:94:38:6c:a2:6a:ed:14:10:58:
47:4b:30:0c:27:9c:5f:1c:72:e6:ba:fd:91:a4:58:a6:c8:60:
17:28:4a:cb:74:08:c3:42:da:e0:60:cc:7f:ba:c3:4c:a1:f1:
ae:c1:93:3f:04:a4:71:82:12:0b:22:51:f3:1a:39:23:e9:00:
91:06:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:37 2025 by rpki-client