Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
File: Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json)
Hash identifier: sK9MZgfQgWi7r0RGi5YK6UvtLVbm7xIyNsfVfts3T64=
Subject key identifier: 27:09:A5:0A:52:02:DF:1A:26:1C:05:A3:DF:BF:48:D8:78:67:22:96
Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43
Certificate serial: 0194BD85667F8C4A23E65F2082D382C24BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
Manifest number: 78
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: qqFouGz2vKl6E6d0ZHgBujvncCoNuEbTfmovd6i9tx0=)
2: gH87DnFCIVeDMCdzZgdgeo0PCRQ.roa (hash: pS4ieprkTVj7xtpm2D2Dk/zZSNZ4iIRcoOU3KEt530k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:66:7f:8c:4a:23:e6:5f:20:82:d3:82:c2:4b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=2709a50a5202df1a261c05a3dfbf48d878672296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:fe:e8:1c:4c:5a:16:24:74:89:e2:2f:e9:
5b:28:98:75:f4:f4:7c:0d:6f:06:4a:80:c1:ea:ee:
bd:dd:e0:a7:af:23:39:ba:3d:6c:84:b5:4c:63:de:
27:f0:9e:a4:0d:66:25:7d:de:2d:4c:56:27:a7:6f:
91:08:56:40:91:66:d2:a8:c1:48:8c:77:3d:54:a3:
06:89:5b:03:90:81:f0:f2:5f:de:5e:ec:db:ef:d7:
53:2a:dc:6a:32:ed:12:e5:ad:bc:36:df:4d:b0:2f:
32:b6:6a:75:12:4c:88:fd:2a:ca:56:95:4c:1b:f8:
3f:29:7b:7e:d5:79:84:aa:b5:6a:8e:8a:e4:58:f3:
ea:c0:ef:58:2b:d0:bb:8d:e5:ad:69:4e:2c:fb:c7:
f2:22:18:08:57:f2:3d:3b:e2:56:31:1b:28:9a:f9:
c1:1b:c9:d5:86:fa:21:5d:d0:22:53:be:06:ad:b0:
fc:f3:dc:7a:57:6f:60:35:fe:c5:da:96:e1:15:bf:
7e:ef:ed:ba:fd:6a:92:e5:5a:0c:cd:81:08:7e:f1:
2c:2b:2a:a8:72:d2:6e:f9:6c:75:7b:ec:81:17:68:
2b:5e:09:a6:f0:62:9a:40:60:6c:c2:99:5f:0f:35:
b8:0b:77:7d:b2:fa:99:5e:ad:56:72:55:33:e4:e4:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:A5:0A:52:02:DF:1A:26:1C:05:A3:DF:BF:48:D8:78:67:22:96
X509v3 Authority Key Identifier:
keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:11:62:59:17:d5:d4:7a:f4:d9:07:03:0e:8e:5a:cf:fa:4a:
7f:c7:da:c1:14:8d:05:b6:bf:51:4e:97:90:dc:43:3a:b5:49:
81:bd:ca:e9:34:20:0c:8c:0b:b5:f7:d3:3d:3c:16:ec:83:8e:
5d:c0:64:66:02:23:ba:9d:34:ea:a9:8b:d0:81:8d:56:34:af:
6a:27:95:6a:19:b9:3e:2c:04:93:a9:10:a1:00:2d:c3:d8:1e:
39:27:1d:3a:f9:4d:88:9d:9b:f5:bb:11:56:68:ea:6f:b1:fb:
b2:05:46:ed:54:c8:65:f7:1a:20:e9:15:8f:d9:a3:f0:a3:41:
96:00:38:c7:06:f4:99:57:0e:89:13:d3:e5:61:52:89:96:bc:
fe:6a:d1:bf:33:93:ed:f1:d5:90:ff:c9:87:5d:9a:15:b5:5a:
84:e8:f3:8f:f6:f7:f8:72:0a:67:b2:c8:74:52:46:e2:64:c7:
73:fd:a2:cc:2f:5a:a1:9a:18:ae:2d:fe:ec:0f:28:46:bc:78:
4a:78:18:99:c3:38:3f:12:bf:ca:6a:ff:57:64:e8:6a:d9:60:
bc:a4:5b:e7:d3:b4:f6:09:62:17:d5:ff:39:97:fe:f0:ce:30:
0e:81:e0:2e:87:2d:42:15:80:80:07:9a:4f:3a:34:c7:3f:a2:
63:15:48:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:11 2025 by rpki-client