Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
File: ZKPnXG0KuryTHChHzaqGX7jX-c8.mft (raw, json)
Hash identifier: bmv0yAijuCz33Ue/bpt960fU84JEmS/Uq8gGLV4mwSk=
Subject key identifier: 77:09:4B:EF:CD:B6:21:40:8C:D2:79:AA:98:68:80:E9:9F:93:D8:34
Authority key identifier: 64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
Certificate issuer: /CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Certificate serial: 0194BD4E8D7306EDC82FEC4DC7595238B52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: ZKPnXG0KuryTHChHzaqGX7jX-c8.crl (hash: Jk5UUQDEwfGHcKAlOCe0s7os2Ly17Jt2ojPVLq1b7A4=)
2: y9vY7PQkblV9_5mGvnjpI_1sy2c.roa (hash: IUOwXFsA4FATdHPgwe2EY1C0pHGXri80WzQO/bHofMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8d:73:06:ed:c8:2f:ec:4d:c7:59:52:38:b5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=77094befcdb621408cd279aa986880e99f93d834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e3:9d:bb:c9:e1:c3:92:6a:9e:cc:7c:da:a8:
8b:4c:83:69:79:37:70:e8:56:5d:55:3c:db:e1:5e:
72:3c:1c:29:cc:ed:4f:08:75:42:7b:fa:3f:ca:f0:
01:cf:17:66:94:4a:2c:5c:12:af:94:a3:c6:fc:72:
35:ce:78:2f:0a:63:59:41:63:f6:0a:74:8f:05:5a:
94:5d:cc:38:9e:58:01:d9:63:24:58:8b:ce:d8:9d:
f4:65:7e:34:2e:69:d9:bb:6a:70:3d:84:bd:98:2c:
89:f1:69:b9:ef:16:68:d8:de:92:79:e7:91:46:07:
af:11:c3:b5:4c:d7:42:77:72:dc:42:0e:c6:cd:f4:
30:87:83:d3:4b:be:3c:3f:f1:f7:f6:ee:01:f7:6c:
6e:f9:16:30:da:d2:8a:b5:8e:68:05:3e:b6:d1:d0:
62:f2:4c:04:1a:ec:9c:b9:35:ba:ce:db:7b:68:5d:
0c:04:3a:0a:79:53:2e:f0:35:59:5a:f1:8f:d2:b0:
d7:ca:50:89:60:5c:02:bc:5e:8e:24:9d:36:85:9e:
ef:90:9b:9a:78:80:d6:0b:ba:c2:df:8b:d3:37:92:
9a:be:da:0c:56:8a:a7:d7:cf:8e:48:30:e9:4d:ff:
81:ff:b2:43:06:88:9f:82:d8:9d:90:53:28:63:9c:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:09:4B:EF:CD:B6:21:40:8C:D2:79:AA:98:68:80:E9:9F:93:D8:34
X509v3 Authority Key Identifier:
keyid:64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ad:86:e1:55:d2:6b:37:d8:d9:0d:c7:67:93:1a:34:6b:24:
8b:3c:e5:70:24:ce:2c:a0:dc:61:42:76:5e:ea:e1:0f:cd:43:
9e:2a:f9:5d:ef:1f:6d:e9:d9:bc:f2:f9:6b:1c:ec:cf:8e:44:
56:a7:3c:91:9b:fc:42:bc:a0:33:d7:88:97:42:8b:2a:47:6e:
02:39:8a:4e:cd:21:6a:c0:09:28:80:85:ce:35:62:b7:e9:6f:
f4:b6:7a:15:8e:9b:51:41:ef:af:2e:30:ad:55:0a:12:ce:cc:
c1:c9:34:7c:20:1d:71:10:32:77:5b:8d:ba:12:29:48:21:bd:
7a:39:5c:6d:c7:e9:cb:c9:80:3e:01:94:20:10:f0:0e:34:2c:
a6:19:f6:74:e4:6c:99:88:9a:cb:b0:61:57:a3:5f:09:33:01:
1d:e0:5f:7c:e9:3d:1c:69:1e:75:0c:54:b2:51:c4:57:86:83:
f2:bb:53:ff:11:31:43:27:61:7f:c5:a1:44:de:8c:d3:b9:52:
91:4f:c5:25:b4:aa:18:42:01:13:f3:d8:91:b7:de:38:86:0b:
8d:0b:67:c3:86:41:41:60:82:b5:1a:98:e3:1d:12:1e:26:dc:
4d:6d:6c:57:38:79:c6:ef:87:2f:28:7a:6f:c0:66:59:af:57:
79:a9:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:27 2025 by rpki-client