Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: O1gEoPoBxATRKRf1aJPL/45XfHGMDNEVPIuWZ/3D6hY=
Subject key identifier: A4:D3:29:94:50:3E:D0:46:B4:DD:B3:B5:0A:87:42:E5:B5:EE:8C:AE
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 0194BBCEFC8A41E4A587E80792E968CF35B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 097D
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: IqOEhe9Ep07MhKXzGEmpKkRgUbXvHP6gS7AFJkByucI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fc:8a:41:e4:a5:87:e8:07:92:e9:68:cf:35:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=a4d32994503ed046b4ddb3b50a8742e5b5ee8cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:e3:9a:7b:e5:83:22:7f:34:90:28:44:96:
32:22:b7:c5:db:4a:db:1f:32:8b:43:83:28:88:25:
e7:b8:45:67:5f:4f:e7:d1:b2:bb:d1:e6:cd:8f:7c:
5d:40:35:1f:54:97:89:7a:40:6b:e0:bb:3b:d7:1e:
83:1d:25:fd:05:db:88:83:b5:9a:9f:f6:4f:72:0f:
ec:b2:94:92:18:68:fb:d4:60:fb:3a:a8:05:5f:2a:
be:f1:98:f5:8f:1e:1f:43:fc:fd:74:60:e1:31:b1:
c4:9e:bb:2a:7c:89:6b:af:1a:8c:b2:24:ad:bf:8e:
37:a0:58:51:d9:95:1d:f3:eb:d5:41:66:a1:e6:5f:
e7:82:48:00:00:82:c7:ea:ae:b0:38:4c:00:d0:c8:
eb:27:39:27:4d:0b:ab:5f:54:a1:55:68:71:39:cf:
64:f4:1b:70:b3:3e:43:9d:25:4c:72:99:ca:36:1e:
5e:d8:77:7b:60:fe:b5:64:05:47:42:e6:83:b9:26:
4d:97:6d:87:96:4a:32:5a:ba:8a:66:6f:97:de:86:
c0:ae:4e:50:43:d3:8b:ec:35:1c:7c:99:1d:97:d4:
cb:19:99:bf:57:c3:25:ad:a4:44:82:44:c9:06:cc:
55:78:80:96:22:5b:49:d3:f5:f3:38:d3:f4:33:a3:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D3:29:94:50:3E:D0:46:B4:DD:B3:B5:0A:87:42:E5:B5:EE:8C:AE
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:a3:02:a3:30:d5:3a:87:1d:f7:f4:80:03:0d:f4:05:72:
6d:88:1d:f4:e5:78:3a:62:29:b0:f5:a6:c4:54:40:90:9e:8a:
ea:78:6f:4d:2f:1a:5b:7a:df:50:bc:ab:e3:4a:8d:29:89:71:
3d:9a:9c:3c:12:7f:94:de:55:da:5a:46:a3:30:8e:3b:47:1b:
b0:76:54:88:63:05:fc:32:21:72:8e:85:5c:39:9b:14:27:c1:
7c:29:16:51:1d:08:79:5c:44:ba:09:84:8d:0c:ff:24:37:3d:
f8:dc:1e:ec:92:20:fb:00:fd:25:87:7b:a1:0a:c9:35:f5:71:
98:d6:40:d1:36:bc:fa:2c:a9:fc:a7:db:ba:ef:a1:e3:20:98:
bd:14:33:19:71:b4:41:9f:4d:45:02:ae:97:b8:4d:77:ac:d0:
b6:9a:0b:0b:98:fc:ce:95:87:c0:81:39:3b:ab:6b:0d:97:97:
e7:bc:5e:29:9c:b7:ba:f7:14:4e:63:95:c2:b9:ed:a0:49:38:
63:ad:6b:b4:0c:6d:48:3a:30:ea:b9:97:94:01:2f:d6:88:ca:
98:eb:cf:af:e9:f7:bf:b9:8c:76:d8:46:70:13:9f:0f:7d:3c:
0a:b6:52:ea:1e:3c:d2:00:b5:c5:96:d7:06:16:e6:3a:99:13:
7d:c4:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:17 2025 by rpki-client