Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier: iQxXWMce8Kh0Y6OFtIrn/GNupUkinFRAOsuvYXJHGH4=
Subject key identifier: 29:CD:F4:29:96:3D:95:FF:7B:55:C8:50:BF:D9:FB:E5:8F:05:CD:19
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 0194BBCE9635C60B490056FFB2DCC6D09CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number: 0466
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: 8ejqwk9nQXP2vJ+ylb8QoWOkXWTF0Dxk8von8J44rAE=)
2: z_g_oyYscLU1IVMsubV8om2IHIM.roa (hash: TMMjkM/DLDsCF3bsXeBPNo5kbzaCJniVgP9Feba83Jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:35:c6:0b:49:00:56:ff:b2:dc:c6:d0:9c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=29cdf429963d95ff7b55c850bfd9fbe58f05cd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:43:5e:53:01:e5:d1:30:9f:61:fc:81:e9:
06:a4:43:35:da:d9:71:e6:95:79:24:d5:b3:a1:03:
b3:2d:5a:93:35:11:66:43:d4:d6:61:74:25:1c:32:
41:6e:91:8b:6e:da:08:6a:e7:f3:f1:9b:a1:61:c5:
41:54:c8:02:52:b3:b8:41:f8:d9:9b:08:ac:ee:ae:
78:c9:be:d4:ec:fa:47:ec:30:ff:4c:57:4d:f3:51:
67:40:2c:f3:87:62:18:85:39:f9:57:87:cd:79:40:
b0:03:0f:d7:b0:c7:93:88:07:ee:3c:eb:04:31:26:
13:44:b4:74:de:76:41:b3:a1:d5:c0:44:27:b4:a0:
23:30:bf:e9:02:83:bb:5a:e1:c6:28:82:ef:e9:4a:
10:81:32:aa:14:bc:2d:09:ef:0f:1d:d3:09:d2:8f:
81:33:5e:0b:c1:56:c7:e4:88:f2:ea:af:22:89:d0:
34:e2:d3:58:28:88:fd:8b:bb:d0:cd:db:5e:54:b6:
32:8d:00:08:b8:51:d0:49:f9:cf:85:f7:e9:b1:b5:
bd:bf:ae:8f:75:ad:e6:a8:0a:1b:4d:2b:1f:a4:dc:
69:b5:39:da:da:aa:f7:24:35:42:ea:1b:a1:17:a4:
5e:a8:9b:7d:63:34:d3:da:6a:37:e4:99:b1:50:90:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CD:F4:29:96:3D:95:FF:7B:55:C8:50:BF:D9:FB:E5:8F:05:CD:19
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:56:f7:11:8e:b7:14:aa:cd:0c:e4:67:0e:7e:bd:ca:54:cc:
59:68:56:23:a7:cf:55:42:d4:fc:85:26:77:0e:18:1a:bc:51:
b2:a3:60:ca:d1:f5:48:7d:1a:81:d7:fe:f9:0f:1d:53:d4:3b:
1d:a4:90:1f:58:a7:d3:3d:a3:70:8a:80:27:1a:ef:7f:ab:f0:
ee:7f:48:8d:54:ef:b2:ca:04:4e:ec:de:a8:ee:0f:c1:f7:0e:
86:43:b4:c3:33:01:9b:5f:d2:78:c7:7b:57:12:7f:23:c2:21:
9f:a8:c5:78:ed:d3:2d:6c:35:5b:4b:69:90:31:10:e8:10:7c:
bf:23:0c:cf:92:2a:30:19:c3:a2:3f:d6:82:c2:8e:fc:04:77:
63:1a:79:94:6a:d9:f0:43:9b:77:13:99:ef:f4:96:9a:0d:74:
7a:6d:82:b8:8d:2e:14:f8:6b:fe:bb:9e:91:3c:ea:71:cb:fb:
5b:d6:81:6a:a5:7f:23:79:f9:b6:04:78:93:15:1a:f0:9f:54:
fd:b9:07:e8:ec:80:b8:e6:0c:0d:db:4f:a6:ad:92:db:10:ae:
8e:8c:38:9d:bd:d1:db:c5:9f:ba:87:eb:19:ab:c9:2c:c3:fa:
69:30:5b:3e:d0:d4:9c:2f:ea:21:95:90:f2:62:e7:fb:57:0b:
21:46:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:48 2025 by rpki-client