Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
File: zkn8E0twZULK8aHvvgNPcBG0lDY.mft (raw, json)
Hash identifier: ZV6pB+Hbj0gLJMiqxKb6CcZm0xfrHdkbvXNfnTbBaTk=
Subject key identifier: 38:52:68:44:9A:CE:41:8A:A3:AA:D3:05:57:FF:9B:36:F4:75:39:D6
Authority key identifier: CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
Certificate issuer: /CN=ce49fc134b706542caf1a1efbe034f7011b49436
Certificate serial: 0194BCE0DC08747D74FFAC5664B92D33B264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
Manifest number: 0352
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: SGAPHhpCJa9JFOb_Zf20G8kvkhI.roa (hash: 27D8nmxY/4y8rMryghx5LNMAGS+7aTblTkGND6PBRy0=)
2: zkn8E0twZULK8aHvvgNPcBG0lDY.crl (hash: OtkgDeLVpiWMUwbjOhE1Hu/Nmik0lhmwhwT3J7t0og4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dc:08:74:7d:74:ff:ac:56:64:b9:2d:33:b2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce49fc134b706542caf1a1efbe034f7011b49436
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=385268449ace418aa3aad30557ff9b36f47539d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:e2:40:cf:d3:7c:5c:ba:b7:de:79:33:3a:
99:dd:0c:17:15:91:ae:f0:4c:39:f3:e7:e6:bc:09:
9a:8a:8e:16:b1:f7:e0:a5:ac:1b:2f:3a:c2:f1:1c:
7c:3f:80:3b:e0:95:df:65:74:1d:1a:ea:ba:84:cd:
8a:21:e2:fd:4c:d7:c6:b4:11:87:75:8c:c2:ba:f7:
b3:8a:6e:d2:ca:dd:16:82:1d:ad:7b:37:b7:64:a2:
b6:a2:75:98:68:68:aa:e4:84:e7:e2:ea:50:1c:3e:
28:49:ae:85:45:9c:bc:6c:7f:69:7f:b7:45:a9:2c:
d8:85:81:f2:b5:d4:51:e2:42:d5:1e:1c:28:4f:57:
23:21:b2:ca:43:25:f4:98:ba:2d:b0:0c:f0:c9:ea:
a2:e1:73:ad:a5:26:96:3f:5e:48:f9:dd:62:89:41:
72:f1:68:42:9a:6c:30:f2:ba:47:0d:75:07:81:ba:
50:b4:26:5d:26:1e:b7:e4:bd:d7:2d:f6:42:a3:73:
e7:a3:be:e0:34:33:1f:24:8f:88:06:e6:c8:06:f4:
44:77:23:4b:18:47:75:f5:c0:21:6f:fd:bb:f0:94:
0e:58:0b:b0:7e:5e:4f:cc:e3:95:46:f0:48:9a:5f:
2f:bc:ed:e0:57:da:81:df:2b:4c:e4:db:09:c2:92:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:52:68:44:9A:CE:41:8A:A3:AA:D3:05:57:FF:9B:36:F4:75:39:D6
X509v3 Authority Key Identifier:
keyid:CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:e9:a7:b4:40:14:f6:1c:6e:c7:05:64:02:2c:b3:04:2b:
67:06:af:29:57:e7:92:df:4a:d9:f3:aa:f9:04:52:31:2d:99:
19:67:b1:17:e3:3f:b6:9b:95:ec:11:71:f6:db:12:2b:f6:ce:
7f:fd:e4:2c:59:0a:99:d2:a7:f2:5d:b9:3d:04:b4:5c:f3:27:
09:35:4e:2b:cb:25:fa:00:ae:35:15:f8:01:91:7c:62:d1:c8:
ca:e0:e4:61:45:73:46:da:32:5c:9e:9b:d8:d0:00:bb:24:8a:
7e:41:1a:fd:58:ce:d8:5d:b4:3a:65:9b:fe:0f:bd:55:3a:80:
64:61:f0:2d:1b:9a:01:0d:a9:56:b3:78:02:92:2d:81:49:22:
70:75:6b:9f:d2:6d:f8:cf:67:c6:00:fa:a8:5c:de:97:92:23:
26:74:86:d9:9f:4e:2a:2d:a0:ee:8b:b9:e3:26:00:06:3c:b1:
09:2d:33:72:be:8e:31:9a:b5:06:1b:e3:c3:68:3d:a6:b3:32:
1b:3a:f0:4c:92:42:26:ca:0d:46:28:55:40:bd:d7:aa:3f:4b:
be:7e:d8:72:7f:db:bc:42:a3:64:b0:4c:1a:7a:a4:c8:d0:ee:
8f:1c:dc:47:e1:d2:5f:e6:4a:ab:ca:36:c9:54:e5:4d:2c:c0:
ad:de:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:20 2025 by rpki-client