Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: jlGmoClrKf3UIAqYf614q68tGaQRwDFDTP8/HA8uDPk=
Subject key identifier: 15:BE:67:6C:DB:2D:F2:9A:F1:35:04:2E:19:36:51:DC:78:C5:95:25
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 0194BC72A202A8F73A0356F8DE2E58EA7ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 0322
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: h+bYCdKJMRW5ZydXHg3UNRib+hqHRF/l4U2IeXAn0zY=)
2: qV1VADgnM-UwMyvnzX700wlOQrY.roa (hash: fchq7gmgdQ6iV6UqjjJyNU6Y7myn1bicxh9WArTx5O4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a2:02:a8:f7:3a:03:56:f8:de:2e:58:ea:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=15be676cdb2df29af135042e193651dc78c59525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:be:f1:5f:9a:6e:17:99:c9:00:a2:b5:ac:
78:cb:fe:9b:ba:c6:73:87:83:fe:1a:2b:e6:28:3e:
3b:fb:b3:68:c7:e5:d1:51:e1:0b:ea:60:82:bc:40:
76:d2:45:3e:0c:5f:31:d3:61:5d:cb:31:4e:90:41:
1b:b6:23:e9:67:8b:46:b0:f5:8c:c9:61:b7:b3:57:
a5:b1:45:9b:72:fd:23:d4:e5:16:82:e2:20:2c:5b:
a5:d6:28:7b:58:47:98:60:cf:23:3b:c8:f5:bc:6a:
db:98:7b:e6:1f:09:27:9b:e9:55:38:c0:14:c7:0d:
6a:37:04:fd:f8:e6:ea:f6:01:5e:f3:bf:ee:55:68:
01:36:77:95:ad:fb:f4:c5:fd:ec:9f:74:3e:99:fe:
d2:d1:99:49:4f:a0:80:8f:f5:ab:bb:3e:c6:7d:f6:
71:b6:99:42:5e:8d:bb:62:99:b4:61:a9:07:52:56:
5e:f8:1c:58:5a:09:cf:bb:1e:fa:3d:98:cb:7b:34:
76:40:55:84:a3:b6:6e:85:ad:8a:7f:0e:0c:48:fd:
66:de:99:7d:ac:40:05:90:88:20:04:be:73:d9:5e:
78:8a:7a:70:35:67:72:ab:73:7c:c6:bf:39:19:3e:
b4:1f:e1:09:38:a1:d9:a2:53:42:04:d5:f2:e4:f9:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BE:67:6C:DB:2D:F2:9A:F1:35:04:2E:19:36:51:DC:78:C5:95:25
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:07:0f:cc:aa:e2:3d:41:63:88:29:f5:50:5d:3b:04:cb:af:
fa:d5:87:5b:a8:7d:8e:40:b0:83:d8:b2:35:b6:59:9d:b9:8f:
56:75:d8:05:c9:f0:4f:2d:3c:13:30:21:33:50:46:aa:a0:ae:
6e:f7:b1:4e:9b:76:68:f9:52:c3:4b:01:21:94:62:a2:06:45:
14:85:b0:72:f2:2b:85:ed:b5:40:ef:85:9d:58:eb:ec:14:a6:
5d:f1:32:28:dd:2a:8c:64:cb:97:98:10:e0:a2:00:72:ca:aa:
d1:90:2c:e7:98:29:e2:a2:bd:98:d5:30:7e:be:a5:51:0e:ae:
a0:de:ea:25:56:ee:f6:2a:a1:d9:bd:01:ea:e1:1c:d3:fb:94:
eb:61:27:b1:8a:7b:56:90:15:0e:ea:39:3f:c8:21:6c:3f:12:
c0:2c:60:b7:68:8e:2f:f5:16:42:10:78:eb:ec:e5:5f:72:bc:
50:16:92:aa:ba:cd:25:4f:2d:0d:ab:6d:f4:ad:be:1d:01:14:
67:5a:35:4f:27:b5:cf:a8:b8:6d:cc:eb:02:f0:0f:66:3c:84:
8f:57:58:c5:0f:f2:55:65:6a:0e:97:b7:a6:55:e2:6c:c4:b3:
4d:a9:81:0f:bc:44:54:71:9d:8d:86:7c:cf:90:e0:55:70:18:
a7:93:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:28 2025 by rpki-client