Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File: Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier: s7yUTQBrlnTmtFlmCAp3d9dTqH+kkRq7h6vKE3oNzJE=
Subject key identifier: 9B:34:03:13:55:2A:95:58:61:71:7E:D3:B1:F1:46:45:EF:74:1C:3E
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial: 0194BD854BABEC05E0922580AD157DA5B2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: ZLef86UZ8-ykPDzWWLmzoQSdgC4.roa (hash: 9D+NhHpbmJi6ZpbrwdmFqtG+bLkEiMEM9kjTpQm+k4M=)
2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: zyCE2oNYJ0McpuVQ+fxnxfvvlRGOcNoQLB8Q0Fd3+j0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4b:ab:ec:05:e0:92:25:80:ad:15:7d:a5:b2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=9b340313552a955861717ed3b1f14645ef741c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:cf:e8:d9:be:27:3c:d3:2b:0f:fa:1d:aa:
e8:9c:c7:b1:7d:a5:08:0a:5a:80:37:f1:df:ec:80:
a2:28:44:9b:a3:98:0a:b7:29:34:e8:58:65:a5:96:
fe:25:e5:47:6d:21:21:18:27:90:76:d4:27:9c:b4:
0d:b7:8e:0e:8e:d4:24:53:54:9f:67:24:50:28:0d:
0b:15:6f:74:a0:19:0a:d4:26:2b:06:a1:40:31:9e:
ad:19:6b:f5:7c:7d:14:2e:fc:90:09:51:ad:97:98:
b4:18:86:4f:74:ef:26:f1:ee:bc:1c:d1:cd:25:73:
0e:4f:95:84:a5:7c:a2:72:b2:4d:61:f6:5c:a5:00:
35:a8:48:83:e8:ce:7c:84:73:b5:bb:9a:45:7e:30:
36:bd:e5:9c:68:c0:26:d7:9b:9c:11:c0:f8:4c:e2:
dd:c6:ce:7f:66:2f:ef:f4:b9:6c:41:47:df:82:df:
6b:2e:11:ca:10:eb:10:12:75:c9:7b:36:2d:b7:f2:
97:26:0e:c8:6e:8b:fd:fc:55:b4:59:f0:ce:0d:53:
f0:0b:c5:88:1a:09:2a:c5:6f:b6:57:f0:1d:6b:c7:
2d:a1:33:26:25:14:84:03:dc:ed:75:5c:05:30:99:
61:97:6d:44:03:a5:c6:d9:36:a5:1a:2f:75:87:e0:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:03:13:55:2A:95:58:61:71:7E:D3:B1:F1:46:45:EF:74:1C:3E
X509v3 Authority Key Identifier:
keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:62:38:73:26:db:91:80:86:ce:c3:a2:9a:12:9b:f7:55:a2:
1d:9b:b0:fe:09:6d:be:cf:2b:35:a2:ba:eb:58:93:c5:92:d6:
ef:84:9c:e9:2c:49:35:4c:5c:0c:76:ac:9e:4d:f2:ff:8d:89:
5f:82:50:8c:5c:7a:e7:ff:b0:11:d3:6c:f5:8d:fa:14:59:e0:
52:2e:51:34:29:a3:76:d9:a8:9d:1e:df:5f:c1:af:48:3a:1d:
c4:71:9c:9c:3f:d9:c2:0d:80:d5:6b:67:f4:56:df:9e:96:65:
09:5a:51:1c:55:49:01:0b:89:75:53:c5:46:4c:78:4c:4c:a5:
f5:f5:bb:08:0c:b6:83:47:e1:b1:26:18:11:f9:e7:d5:75:5c:
f1:83:a7:50:71:95:49:a5:f5:d3:cb:83:55:2e:cf:2d:3f:3d:
88:f2:06:58:39:26:f3:70:b4:5c:b1:23:b8:e7:d0:41:af:81:
ff:07:89:58:0a:30:b1:2d:b9:50:b5:37:ea:80:ee:a4:5b:f6:
aa:7e:03:0d:a5:95:05:75:73:72:6e:e4:f2:12:d0:91:d2:b9:
22:d1:75:2f:7c:d0:fc:7b:b6:89:a9:34:e5:dc:db:bf:92:07:
9c:23:1a:2b:3c:93:6f:76:93:b0:e0:83:e8:aa:64:69:d2:24:
85:ed:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:17 2025 by rpki-client