
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
File: Zp7b-uhlCtvWryB7bqIlZUObSZw.mft (raw, json)
Hash identifier: eNYpvPGvetOBuO3BX/0lxhpevKIHcf+/eBh3JnhrJBg=
Subject key identifier: 4C:9F:62:39:0F:34:AB:DC:33:EC:85:A7:CC:FE:DB:39:D1:58:CA:81
Authority key identifier: 66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
Certificate issuer: /CN=669edbfae8650adbd6af207b6ea22565439b499c
Certificate serial: 0194BC3C400AFC2560C4082783D81B6E6903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
Manifest number: 076F
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: Zp7b-uhlCtvWryB7bqIlZUObSZw.crl (hash: Fe0K2sJduOAByNQLr7h/Wksjb6C0cXciX3w9tYcGJmc=)
2: v7HN1z-hIgMA1JNadgPizSrJJ8k.roa (hash: D2dlwsBojyjnhUUBcM6gmSASwHH0fMP571DfVs0x/SM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:0a:fc:25:60:c4:08:27:83:d8:1b:6e:69:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669edbfae8650adbd6af207b6ea22565439b499c
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=4c9f62390f34abdc33ec85a7ccfedb39d158ca81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:28:8b:b6:8a:53:b6:df:96:e0:d1:f3:5e:
cb:5f:09:94:db:c5:b0:4c:1d:1f:be:c8:ee:6c:d3:
d6:83:8b:7c:b5:b6:5b:54:9b:a6:e9:6a:f2:57:e8:
82:d6:33:f6:27:41:49:65:ca:fc:06:a0:62:68:eb:
2f:3a:a3:07:25:27:5d:6c:aa:58:8d:30:57:e1:37:
a5:22:a7:65:19:00:47:b8:c6:fd:f8:4d:8f:ea:5b:
ee:af:4c:6a:0d:c9:a8:ac:fa:f2:53:77:4c:05:f7:
0f:25:ea:07:e9:60:ba:fa:68:9b:1a:83:ec:ac:d0:
ea:ad:11:2e:aa:77:38:c3:35:77:2e:0d:c4:23:37:
ed:d8:4d:9c:20:a8:08:0a:b2:4e:92:25:d9:23:34:
b2:be:f8:75:59:5f:c4:44:56:af:ec:f7:60:98:ee:
19:4c:12:91:15:f0:de:c3:d7:b1:97:2e:82:1a:53:
a0:53:54:0b:e7:56:4c:45:74:4a:27:b8:cb:20:65:
74:56:9b:e6:40:e5:4d:74:a6:0d:5c:2e:50:28:ff:
15:3e:68:9a:5d:ca:54:89:ac:94:9b:e0:4f:06:3e:
90:1c:f3:31:dd:cb:7c:92:7f:8b:88:df:db:18:86:
2d:04:86:9e:23:be:1b:f4:1a:e8:0c:f5:6a:99:d1:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9F:62:39:0F:34:AB:DC:33:EC:85:A7:CC:FE:DB:39:D1:58:CA:81
X509v3 Authority Key Identifier:
keyid:66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f4:54:e5:d2:8e:d7:ae:82:6f:a8:8d:5f:d2:f8:b9:d9:5d:
44:f1:60:53:aa:68:cc:34:d4:8a:86:3e:0c:77:7d:39:f5:ad:
ad:8b:a9:bc:aa:04:b4:61:a7:41:fe:e6:37:d0:82:61:1b:d0:
e6:14:c1:f0:39:4b:a2:38:0c:05:34:6b:3a:e5:d1:0d:c0:36:
5f:fc:47:98:7b:2e:96:23:0a:70:90:3f:c2:17:82:3f:45:dc:
13:b0:8b:8a:bd:fd:ef:6b:7f:5d:38:a0:37:02:0e:c7:9c:80:
6c:71:68:9e:32:d1:98:61:36:bc:ef:a1:d3:e4:ff:38:b1:65:
9c:d9:26:b6:91:28:1f:ae:79:d0:42:d0:f0:63:fe:6c:ce:26:
53:0f:bd:d5:bf:49:e4:e5:52:f9:ab:6a:6c:1a:5e:98:78:3c:
3b:a0:16:05:71:5f:3c:5a:ab:f7:99:e9:4a:7e:d0:cc:ee:c5:
d7:68:2a:8b:3c:aa:a1:f1:a3:e6:f9:70:76:64:fa:fc:44:58:
9a:40:7d:28:a7:ec:45:e4:e5:7e:89:5e:b7:20:02:5d:99:58:
50:67:95:05:c8:ea:ed:48:2a:f2:ef:2f:05:23:e8:19:e0:3d:
fc:49:cd:12:74:56:8a:54:23:89:aa:e5:6e:5d:6e:1a:90:80:
44:c5:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:23 2025 by rpki-client