Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: OYYpKAxr52EG4nKZ7gF6KFxSZ1khzs73NLfAmlWkWDI=
Subject key identifier: 81:89:C1:0F:B6:A5:44:5F:2D:CE:35:5C:74:4C:57:F3:C7:CE:CC:C8
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 0194BCA98BF98B70911F3BDF105473EF7B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 08E0
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: bNQBI1n49zI8mny+HmXAieJhU+CZ95+N5JnmLvYiqDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8b:f9:8b:70:91:1f:3b:df:10:54:73:ef:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=8189c10fb6a5445f2dce355c744c57f3c7ceccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:7b:e0:f9:74:cd:8b:1f:fb:d4:21:56:b6:
86:b1:7f:5a:9a:f6:5f:3c:2b:9d:fb:09:b7:ac:a4:
21:df:9f:13:90:14:ee:04:1c:95:8c:8a:b5:40:4d:
7c:ad:e8:e1:2f:03:1b:52:5d:a5:aa:b1:9c:2b:a4:
2a:4a:0c:f6:9b:b1:c8:8e:69:24:29:cb:a9:7f:92:
f3:f6:aa:8a:a8:93:89:9d:f5:97:6a:07:70:c2:6f:
e4:a2:f9:41:e1:a0:02:19:ca:6d:b6:f0:be:69:dd:
a5:ab:2f:21:1f:18:99:42:21:6e:ab:dc:04:75:0b:
3c:8a:49:67:31:6c:00:d0:7e:42:87:1b:b4:02:9f:
36:b2:95:01:08:96:ce:f6:11:47:a8:da:e4:b7:21:
9f:5f:08:6b:95:5f:e5:98:b9:7d:3e:67:78:4f:f9:
45:be:a6:9c:f2:7a:4a:1f:ab:b7:e3:54:82:a7:71:
3c:e2:86:0d:69:7f:1a:e1:23:6b:91:5e:5c:1b:30:
b4:2d:ad:c1:9f:12:e5:a8:b2:ca:af:3c:cb:9b:5a:
49:05:bc:e2:eb:c5:90:43:5a:db:3b:24:57:f0:78:
9c:dc:32:95:80:ea:37:b8:81:35:d3:50:16:21:ed:
83:cd:67:c1:4a:9f:42:16:f9:60:73:d0:d2:cd:c1:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:89:C1:0F:B6:A5:44:5F:2D:CE:35:5C:74:4C:57:F3:C7:CE:CC:C8
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:74:19:57:ab:7d:f7:2d:a3:41:91:90:45:5c:07:14:56:c7:
90:0a:1f:f8:8e:7c:9c:d7:85:01:5a:63:78:dd:de:aa:37:f9:
14:7d:9c:3e:ae:dd:9c:50:ee:b2:c4:26:93:e3:65:46:a4:87:
4b:d4:1c:1d:df:0e:4f:a2:4a:9e:7e:32:07:2b:1c:7c:e4:df:
c6:60:52:5e:b7:0b:49:bd:38:52:ba:55:c3:3d:f0:40:e7:fb:
d1:a7:f2:c1:67:dd:61:e9:d1:99:bd:09:cc:a6:6a:e7:b8:ff:
89:63:7d:9c:4b:1d:c9:38:7c:61:c9:49:06:26:bd:26:41:46:
08:51:65:02:05:af:39:a5:2c:78:c8:80:03:13:80:7d:4b:3e:
d2:eb:5d:c3:f6:b1:ea:d0:a9:d0:db:86:b2:fb:80:6d:21:88:
36:b8:3b:b6:3b:af:90:a8:a2:0a:2f:08:fa:59:fe:7a:73:4a:
5c:d3:ec:17:34:0a:46:52:a7:a1:46:4c:a3:8a:16:83:04:2c:
fd:6c:c6:ab:ab:fb:a8:54:5a:50:4a:4d:a1:e0:21:6c:8b:3b:
38:2c:38:77:7b:39:af:2c:49:56:93:bc:c9:b5:b6:62:32:7c:
6c:13:b1:e8:b1:b3:c8:dd:f0:b9:c7:51:10:75:04:6c:d5:18:
77:b8:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:27 2025 by rpki-client