Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier: BASosae0bPHoLLh3lmhnUDHztTTfubbOYwy55vnnsyw=
Subject key identifier: C2:0E:75:55:DA:7F:65:3F:76:71:EF:A6:DF:7F:40:60:E2:BC:21:BD
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 0194BCE05C7EB2A1DB25FDEB18CA16590C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number: 11FC
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: byf5VWD8Bec3JPSuw91KMDr6BQMF73fWlBhexfCNn4U=)
2: sdPecCSO0KixXu_CzDAp6RAcnGQ.roa (hash: lK/qLvjn0531iisqXiHNH5vrvX6cngnheVb4lVEkcTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5c:7e:b2:a1:db:25:fd:eb:18:ca:16:59:0c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=c20e7555da7f653f7671efa6df7f4060e2bc21bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:d5:5e:7b:5b:59:6c:45:26:f2:80:98:de:
e2:e5:4c:57:8a:f6:f3:bb:c7:93:b5:10:d6:75:8a:
ee:09:08:9f:c3:0b:3f:9f:7d:53:79:ea:f6:00:ad:
63:79:66:f8:8f:14:a8:56:61:a8:24:bf:1a:f5:49:
e3:01:a7:e2:21:2d:26:d2:68:4f:1a:54:e1:5c:8e:
87:32:30:1b:9d:98:e0:53:33:f0:77:db:1a:07:45:
ec:a3:58:9d:86:89:40:ff:95:4e:06:74:d1:c6:bc:
ad:21:bf:c8:fd:28:c7:a0:35:c7:e5:ac:cc:92:71:
f8:67:11:e0:51:c9:8f:48:c3:db:8f:cf:fb:5c:12:
fa:d0:7f:77:1b:ca:a7:46:6b:fd:fa:0e:5d:a5:b9:
18:57:4c:79:f5:b2:d2:08:8e:59:3a:e5:fa:f1:9a:
00:bf:a2:15:82:ac:f3:60:7d:97:24:b4:fb:a0:41:
2c:2b:33:71:db:59:10:c9:a5:b8:37:b8:de:e9:98:
d8:e4:5d:c0:91:19:85:20:2c:d8:42:c9:8a:ab:23:
e8:2b:cf:5a:99:53:e5:38:f3:d0:88:8b:3c:8c:c5:
72:33:a2:a9:bb:4e:94:f0:93:11:1a:29:f7:35:5c:
e6:c1:e1:f1:70:cf:c5:21:23:bc:fc:9d:6d:e8:39:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:75:55:DA:7F:65:3F:76:71:EF:A6:DF:7F:40:60:E2:BC:21:BD
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:27:5f:bd:8c:24:56:c3:03:b1:9e:2e:fe:e8:10:15:a8:ff:
0c:e7:23:20:95:92:1d:c9:07:58:90:92:7c:9e:d9:cb:5d:cb:
fd:51:e5:b1:3d:c7:f3:63:2b:89:69:8a:fa:41:f1:fc:69:d0:
73:57:59:84:d1:35:32:87:e9:b1:00:22:1e:56:c9:49:19:a9:
b6:3f:d8:ed:41:ba:45:93:01:d8:dc:db:ad:1c:e0:58:c0:87:
83:a9:ae:31:0e:7e:1d:86:2b:62:75:0b:fd:96:cd:a5:b6:d1:
d2:5e:fc:98:12:0c:b7:1b:09:85:2f:6e:6f:ea:ca:7c:c5:fb:
ca:54:b6:02:ab:fc:66:f7:f7:86:26:fa:6c:35:9f:07:74:62:
f6:22:e2:8e:92:bd:5f:99:27:47:da:10:aa:95:37:91:cf:00:
cc:c7:b5:2a:9f:22:50:3f:ca:2e:3d:39:ec:3b:3d:26:b2:66:
60:25:7f:ad:8f:2b:8c:31:a3:d0:2c:72:05:26:c7:e4:20:62:
68:51:8b:33:70:86:ff:a7:1e:26:f6:e6:4a:30:e5:28:d2:ec:
1c:2f:ac:9f:bb:e4:cb:fe:8a:f8:6f:02:6f:1d:41:12:a8:99:
f1:8f:19:1a:ee:9f:2c:00:fd:a3:ec:b0:8e:29:30:70:bc:f4:
37:59:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:30 2025 by rpki-client