Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: b/BuLEZatGL5zlWJ+SjKyFNPgKDfvrkN1t/T/iFIMyw=
Subject key identifier: 2D:DA:94:F4:EB:D2:E0:C7:EE:69:92:CC:84:A9:34:A7:E0:0E:62:BA
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 0194BC0515D7FC67CA40A695722A4B5ADE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 03A3
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: CNanKGITt6BZ7mvdQ6Xv0MVd_cg.roa (hash: qTzgtOOAjYnbYX/V8tOmm+S0TaEKxSqcRfCFeliNRNI=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: Av6o+zeWeHsOjMsR+b6K3/RaY4FhhJyXIpSMN11Br7g=)
3: kLdYNlBxoUsO0xToRjcSbRZEf5M.roa (hash: uSz8pizyGPkpRJKc5zYo+RcDvjmGd3gE3D8JNJ5Va40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:d7:fc:67:ca:40:a6:95:72:2a:4b:5a:de:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=2dda94f4ebd2e0c7ee6992cc84a934a7e00e62ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:06:10:4f:08:f3:8b:50:e7:97:97:f9:9c:
08:6e:e3:89:3e:7f:6a:20:8e:41:37:97:ac:77:40:
9c:f3:a2:f7:00:f5:94:9a:5b:b3:1e:ca:fc:b1:ce:
65:8c:c3:b3:1b:30:5c:0f:65:dc:cb:1a:32:5a:f6:
94:bc:d9:5e:61:0b:58:8f:e9:6e:fa:7a:fc:e0:4d:
d6:e4:dc:90:64:17:84:93:78:aa:52:7a:96:49:bb:
45:92:09:dc:5f:85:d7:38:d7:a5:db:b9:75:36:f9:
6c:4f:0e:9d:ad:ee:1d:39:87:36:44:9d:ab:41:e0:
bd:62:3d:03:f7:09:d8:7c:91:96:3c:e9:7f:03:fc:
a3:17:eb:5e:af:73:c5:99:14:af:5b:74:fb:ef:5a:
85:8b:fc:7e:05:fa:ae:06:92:04:00:2f:e0:9d:c5:
87:94:77:4d:5a:f4:c2:63:89:4f:74:f1:c0:e2:de:
56:4e:7f:7c:11:79:1b:d5:ed:e6:9f:27:cf:a8:45:
1f:11:41:a5:bf:42:b6:9e:d9:02:cd:1d:df:2d:e8:
ea:bd:97:4e:94:10:0f:94:39:f4:fd:80:5c:9a:e1:
e4:ab:b3:36:d3:44:44:3f:30:34:b5:fd:b5:89:30:
14:45:75:90:8c:cb:fa:0c:cc:70:6c:86:6e:b4:55:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DA:94:F4:EB:D2:E0:C7:EE:69:92:CC:84:A9:34:A7:E0:0E:62:BA
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:84:d3:2d:d7:3b:34:77:d2:19:36:23:30:f0:ac:19:f5:63:
00:a3:6e:8d:e8:14:06:e9:55:b4:ff:a1:c8:bd:9d:f8:60:21:
9a:b5:07:74:18:94:a4:66:14:f1:46:22:65:4e:30:cc:c6:45:
00:5a:49:06:5c:ed:0a:8a:cf:fc:a5:93:f4:4d:48:98:31:1a:
a1:03:4f:f8:71:80:39:56:51:64:ad:a6:94:bb:3d:ec:80:6f:
e0:8b:43:1f:16:25:64:4f:3a:05:d3:a9:33:7a:61:67:cb:72:
dc:9c:42:53:ff:a9:17:9c:84:43:e7:84:1b:5a:94:3a:e3:c2:
7d:c4:ab:82:a4:63:ea:e1:16:6c:8d:c1:53:6b:8d:d9:d7:01:
b2:64:cf:54:06:32:f7:0a:df:cd:a3:a1:b5:0a:cb:f4:14:22:
0b:43:9b:a3:b4:90:f5:4d:4e:00:3e:1e:78:ea:09:f5:c6:12:
b5:8c:d6:e9:d2:be:20:01:e0:87:7c:30:9c:62:ff:10:eb:f2:
22:75:ff:93:c9:88:8a:9d:5b:4f:ed:4a:ec:45:41:47:a3:8d:
b4:09:72:b4:c0:74:74:55:2e:8b:c5:5d:d6:30:17:0c:c1:7b:
be:4b:d0:12:5f:de:a8:17:be:12:46:70:bf:24:1b:67:50:79:
79:4d:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:19 2025 by rpki-client