Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File: ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier: ECS6bHPKxh+YfUXOeSs1sg2cvj4ZaeKw7RRKKcp8t+o=
Subject key identifier: 01:31:D8:E5:11:26:F5:A8:0E:77:05:C8:82:E2:5A:F6:8B:1E:13:A0
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial: 0194BCA9E2DB40E7C99D9160E3FA3A6E3A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number: 0D3D
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: BZCkhpNz1Igq+PdiAQobpLom1dt8I9IZs7sgkruQD70=)
2: mcf7JveA9sP5q1fzjwTXe1Y9B94.roa (hash: vxgrGFoktHB0oWvn12RjOAHTGS54BioUpfkDuJPEQhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e2:db:40:e7:c9:9d:91:60:e3:fa:3a:6e:3a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=0131d8e51126f5a80e7705c882e25af68b1e13a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:66:2c:13:14:4f:a3:ca:8e:f3:c1:4c:60:
1e:6d:75:cf:23:c3:fa:27:67:f2:ab:9a:c1:1d:d3:
96:63:3f:20:48:e0:4b:76:d8:10:ce:4d:59:9b:cf:
19:1e:72:10:0c:dd:6a:10:92:81:07:34:8a:9a:dd:
a3:00:95:13:27:fb:24:33:15:c7:c9:34:f2:a4:3c:
ca:43:bc:90:1a:df:cf:8e:01:e6:95:ef:55:c9:93:
8b:95:50:d8:85:10:cd:49:b0:8f:5c:a8:6f:f1:c4:
43:6e:77:9e:28:e0:fc:7c:32:02:a2:9c:0d:18:7f:
74:32:19:4c:04:04:76:5a:44:85:64:81:ea:a3:fb:
3d:86:30:26:50:62:c4:49:37:d6:23:41:e1:0e:97:
40:71:71:0b:b4:20:78:2b:15:b4:63:7b:c0:e6:cd:
c7:2d:b4:0b:48:bd:ec:3e:1c:3f:00:e7:42:cc:80:
c9:58:d7:42:fb:f6:85:36:fc:bc:41:09:c0:5a:e7:
35:bf:d0:dc:d6:69:5a:32:e8:63:5e:42:e4:f3:7f:
f7:33:80:cc:16:b4:d4:45:fd:58:b0:0e:e4:85:03:
b7:70:61:53:2d:c1:f3:c9:d1:48:d8:46:ba:e8:b1:
91:27:4a:cb:d1:c5:ae:04:d4:28:e3:18:42:7e:34:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:D8:E5:11:26:F5:A8:0E:77:05:C8:82:E2:5A:F6:8B:1E:13:A0
X509v3 Authority Key Identifier:
keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8d:37:33:98:4c:68:9f:06:19:14:a0:a1:ba:48:79:e1:37:
05:a1:7a:bb:20:82:19:56:88:56:0a:5b:11:06:82:ab:3a:13:
9d:fb:9c:af:40:b2:e1:f8:71:b9:e6:ae:32:f7:80:b3:cd:51:
97:09:58:92:b7:f6:54:1f:7c:a8:d8:a8:9e:3b:a5:30:0c:29:
88:b9:d0:d4:2d:69:4c:df:29:19:05:a8:d6:61:9d:59:c1:7b:
03:e2:83:20:05:70:95:8d:6c:2a:4e:1d:39:8b:a4:f7:a8:95:
c9:d6:0e:7e:fa:57:85:05:1c:d1:99:97:75:89:f6:fe:91:e1:
f5:70:05:17:93:db:8c:26:e6:e6:c2:c2:d7:d9:56:ff:2b:49:
b8:fc:9f:48:be:4e:e2:9d:75:a4:93:a7:72:91:72:8c:18:14:
aa:24:68:71:e3:d3:89:85:d3:3d:fc:0a:7c:44:6b:62:04:7c:
b6:9f:04:a9:8b:04:98:9f:e4:02:53:db:03:be:98:17:9f:7b:
51:17:15:3f:da:2f:ee:fc:5f:a2:d1:ee:4c:25:e7:68:c3:f9:
3b:77:f2:19:35:4c:69:cd:3b:47:26:73:e6:8a:3e:36:3d:d4:
95:f9:bc:b4:fe:c0:4b:08:e0:62:52:46:5b:d8:ba:dd:e0:17:
d1:66:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:18 2025 by rpki-client