Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: FbXMUQWHEnn3Gj/8kaarIH+DNr3EM3ri2zPrdtIko5Q=
Subject key identifier: 7D:5D:55:CF:B5:6E:04:72:51:CB:1D:8C:10:E4:C1:E1:E6:C4:03:D1
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 0194BBCDF9219B0242A7CCC01C03D3E800F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: W2DMRJ_k9e8AoJXRItyS4Y_0GsE.roa (hash: u28JHNr8um784JuRkZF/hrHuBy1UKccyyYxb4cD+A4A=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: DUZsMlmUtcQWZF3NT3WdIOd939XXqME3G37/mXe/q6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:21:9b:02:42:a7:cc:c0:1c:03:d3:e8:00:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=7d5d55cfb56e047251cb1d8c10e4c1e1e6c403d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:95:d6:cd:ab:24:64:31:28:0b:89:7e:61:
29:a6:af:ca:81:95:fe:23:8c:c9:28:1d:53:f5:f3:
07:86:ee:4f:4e:68:a3:f1:23:bd:63:b8:0a:37:13:
4b:a3:1e:be:09:91:ff:8c:38:a1:a2:8e:d8:3c:91:
69:25:a6:60:86:3d:8d:87:39:df:f2:9c:5c:10:24:
ae:f7:32:8c:db:a2:b0:7e:7f:fc:00:46:f6:6d:67:
fb:6b:b2:04:05:55:47:73:e4:89:34:2b:73:b3:08:
ae:5f:ff:cd:5b:d9:56:cd:40:83:7e:fa:e1:21:c0:
fe:e8:ea:f0:ad:e2:56:e6:11:bd:df:0c:fe:aa:62:
7b:08:a0:ba:98:13:56:4b:0d:d9:a3:eb:74:64:21:
29:34:d7:fa:18:46:d9:aa:d5:de:26:37:e1:cc:8f:
f6:a8:5d:8c:63:e1:1f:b9:96:08:44:4a:e2:f7:cf:
99:d8:1e:16:09:64:0a:6d:f6:fc:f0:1a:e3:53:5a:
b5:ba:d3:9e:25:01:31:22:05:a7:6f:51:50:e8:d0:
ec:0d:53:b3:ce:2c:c6:de:fe:b1:36:fe:37:05:c0:
78:19:d8:f3:0f:64:42:07:85:5b:e8:66:1f:08:ea:
0c:a8:51:70:50:65:c7:fc:3e:6b:ae:61:50:91:6f:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5D:55:CF:B5:6E:04:72:51:CB:1D:8C:10:E4:C1:E1:E6:C4:03:D1
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:41:62:bd:7f:4f:6a:4b:3b:71:d6:36:db:ca:9a:72:60:0f:
4b:95:3a:7a:9e:1e:ca:09:4f:ae:4b:29:e0:a3:61:2e:32:55:
32:b4:32:7c:bd:c9:a6:8e:ef:29:e6:d7:4c:8c:4c:1d:5f:36:
1a:9c:8b:1e:20:66:bf:6d:b5:d9:ac:59:2e:19:16:23:61:0b:
cf:7a:98:d0:bc:df:25:c7:5c:c3:4f:5d:59:64:5a:98:23:20:
19:c2:12:ab:5c:bb:d4:9a:8e:8c:21:66:de:12:8c:3d:75:08:
4e:ce:cc:75:37:6b:d9:84:c3:44:4c:8b:d5:a2:c9:e5:94:fd:
92:73:3a:ed:fc:10:bf:f2:6d:41:b4:5d:ec:74:c9:46:36:c4:
d4:a8:c4:52:1b:88:c3:94:60:60:3f:6b:be:d4:10:37:75:df:
bc:d6:c0:ac:1c:38:06:b2:a1:31:7a:c0:5a:f9:02:4a:f1:4f:
04:25:2f:1d:6b:b6:35:70:e4:42:7d:20:8b:fc:b4:02:82:f0:
bd:be:89:97:7b:53:3c:ce:0b:c0:3a:36:ef:b4:cb:7b:63:fd:
6b:f2:d8:35:52:f8:c5:22:c6:40:c0:f1:ce:f7:32:40:ca:a4:
cb:be:a3:92:1a:93:fc:6a:b2:f2:33:10:8e:c4:bc:54:fa:83:
21:6e:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:57 2025 by rpki-client