Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier: WAWUT9K+ZRuSVyLL/Dg+ZVDbRad2lsIn6zwKfuouEvY=
Subject key identifier: 8A:8F:65:11:03:CA:1B:22:3C:9C:C2:AD:D2:A9:BE:85:7B:02:99:CF
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial: 0194BD4E92FD864DCEA6F6F6ADDDD51C39E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 27WBhhpGCu8KcUXHgHNDtyT7qA4.roa (hash: hASVoi4FkuHDPpmp5IMQcLI7MKWjHmB6IplIj3b2UNs=)
2: BlXtwuXJZi1FsUYJseJuuvLHwG0.roa (hash: E+H4MQ+p60pNwEw6UNfCnrSspvLH+GiOyo4ssEl9XXQ=)
3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: vJuGa81AGw2tvNmFEAQsenXmYXmGlg50u5M8ruNFHh8=)
4: l7PaOk1ocbrgfH7RkR-EmGKNBYI.roa (hash: 2MdjtNxo4ObSDeeX352JxmkPKpeMrJB/59RsZtzSS9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:92:fd:86:4d:ce:a6:f6:f6:ad:dd:d5:1c:39:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=8a8f651103ca1b223c9cc2add2a9be857b0299cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:78:4b:d3:5a:25:bd:78:3b:d3:6f:08:64:
a6:ec:85:4f:86:45:bb:79:76:8b:ac:88:8a:18:86:
e8:60:e1:e1:31:38:4d:24:6f:6b:c6:b9:21:43:22:
ca:32:54:01:fb:08:26:fb:d5:6c:8c:dc:38:b4:95:
1e:61:5e:8d:fa:e5:00:85:c6:ea:d4:5f:0f:b8:dc:
33:48:3f:38:de:87:06:04:53:1d:97:50:23:a5:56:
af:5d:2c:c6:5d:72:89:2d:ed:32:74:27:a5:2f:44:
64:35:af:99:47:06:7b:2d:d6:55:5c:bd:2f:a7:d1:
fa:5c:e4:b6:c5:77:16:70:f2:1b:65:20:3e:94:07:
ba:09:3d:f5:62:cc:68:a8:97:bd:f2:d7:a7:c1:17:
64:b9:19:87:f4:91:86:f5:68:7e:81:7f:2c:4c:6b:
3f:71:e6:ec:37:ea:94:59:f0:b2:ce:22:b4:bb:54:
e2:f3:c4:8d:04:8b:b3:28:15:ec:6b:7d:2d:5a:c9:
fe:37:88:5e:4c:3f:e2:de:82:8e:8a:42:30:ec:c1:
5c:20:ed:33:16:26:91:e2:ae:e2:ca:f9:64:d2:3a:
64:2c:76:bc:07:08:87:ae:82:f4:f6:02:bb:a9:35:
59:b8:6b:45:98:dc:c5:c3:dd:c2:26:ed:16:bc:61:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8F:65:11:03:CA:1B:22:3C:9C:C2:AD:D2:A9:BE:85:7B:02:99:CF
X509v3 Authority Key Identifier:
keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:68:38:be:84:86:96:0d:40:18:ff:0f:6c:a4:af:29:74:dc:
a5:4f:9e:7a:7f:21:41:94:ba:75:3b:17:bc:5a:6d:be:98:d7:
5d:48:61:33:c2:94:67:be:fd:55:12:49:79:92:c6:0c:cf:9f:
2b:d9:dc:0f:e7:be:4a:a2:42:6c:dc:59:13:74:e6:64:2f:ae:
cc:74:66:16:27:6b:7e:eb:13:99:b8:d4:f1:ba:06:27:5a:b8:
6a:3d:93:aa:58:b6:bc:45:79:41:c2:1b:64:57:de:b9:a3:76:
49:7d:e7:bf:18:50:9f:44:91:73:49:85:69:c8:1c:a8:0a:3c:
f9:1d:af:f4:aa:22:69:12:21:cc:3c:36:72:0d:26:b5:8e:c4:
4e:f8:be:3d:ce:aa:a2:33:32:f8:29:1a:95:2a:df:2b:d6:5f:
02:bd:5c:7c:aa:82:35:d6:4a:87:fa:52:41:85:0d:45:bc:36:
80:30:e5:47:9e:be:3a:5e:bd:97:89:52:d6:9f:d0:4e:1c:64:
6e:6e:69:03:12:c4:a5:47:9e:16:f6:d1:60:a2:38:13:ec:3b:
74:c1:36:12:9f:98:13:a3:54:1c:f3:bc:d2:75:0d:83:f1:c7:
85:42:ed:db:dc:22:71:dc:ca:df:63:78:bd:77:a8:46:71:7d:
9a:a5:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:32 2025 by rpki-client