Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: 3rOMokeAYyhlZqQzqhTjJTAxWhlR/+Di2KsOz0FtbJQ=
Subject key identifier: 78:CB:62:8E:81:37:CC:CB:AC:4E:03:3B:66:DB:36:B1:28:85:2F:AF
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 0194BC3C0AC0532CEF3A5242D2A8293B508B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 113F
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: SZmKCk3uRMzBMmqF2HP0AmsvkQ8DaEjOfEtG1338wS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0a:c0:53:2c:ef:3a:52:42:d2:a8:29:3b:50:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=78cb628e8137cccbac4e033b66db36b128852faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:2c:7c:e4:5f:20:b5:27:e7:45:2d:7b:48:
cd:ff:dd:74:69:51:cd:25:35:4f:be:96:c0:8a:4a:
7d:3f:2e:c7:14:c5:66:21:13:c4:13:15:b5:6a:ce:
3e:27:0e:ed:b7:fe:7e:74:e2:b7:84:7c:1f:9f:2a:
16:47:06:48:8a:30:2f:83:e4:ec:95:da:86:c4:0a:
87:03:90:bf:11:23:6b:0a:38:a2:8c:75:39:da:dc:
4d:25:66:6c:e3:78:40:ff:93:94:e5:17:5c:2d:05:
de:8b:1a:e3:17:d9:35:21:67:95:8f:88:35:23:82:
03:93:7c:ab:71:f7:5d:24:99:19:8d:ca:98:ed:7a:
38:cd:5f:35:42:9a:37:74:36:f6:4a:82:d8:6e:55:
37:a1:90:82:9f:34:0d:8f:63:a7:55:91:c1:2b:85:
8f:ba:f7:6f:a6:54:9f:32:c0:e0:28:eb:d4:c2:c6:
7a:64:e9:70:6a:fa:ad:65:7b:39:5c:e6:fa:7b:49:
1e:19:7a:68:13:59:36:69:66:73:9e:41:de:b9:f7:
8d:d8:16:b6:a9:ef:43:d3:77:b6:f0:7e:ef:99:53:
72:1f:29:70:a6:04:db:14:75:2d:2d:95:cd:06:bc:
f7:36:d5:8d:88:a1:da:15:fe:ec:7f:a6:0b:cf:96:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CB:62:8E:81:37:CC:CB:AC:4E:03:3B:66:DB:36:B1:28:85:2F:AF
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:06:c2:83:8a:3f:ad:c7:5b:50:f5:7a:0a:f0:8c:78:cf:d4:
e5:e2:97:ab:ac:e4:1f:fe:76:97:62:14:d0:f6:47:8c:16:99:
9e:f7:dc:be:ac:b6:08:7c:11:aa:2c:1f:c4:3c:66:7c:40:1d:
1c:58:3e:8e:c4:21:3c:d7:ce:a2:5c:ae:6e:01:c3:61:26:69:
2c:10:5b:99:ac:27:56:f0:2c:07:66:25:bb:15:df:8c:35:cc:
60:4d:08:86:97:d0:38:63:77:0d:1a:22:df:43:07:4e:72:3d:
c2:3c:bb:82:1d:7e:d2:aa:e2:ee:23:81:2b:94:3d:93:bc:ed:
d0:b9:9e:c6:d2:1b:3d:e9:72:04:80:12:aa:b0:a1:c2:5f:7b:
33:11:a5:de:9b:58:c7:15:ce:85:39:17:37:0e:6d:ba:43:53:
46:57:1e:d4:51:c2:25:cb:8a:65:96:f9:ed:e7:62:5e:f4:99:
b5:91:a5:93:5e:5e:bb:be:71:0e:25:db:27:d6:4a:4b:ca:72:
9c:bf:19:83:4e:66:a0:99:83:3d:7f:63:0c:76:ad:14:07:a2:
a3:bf:3d:91:19:62:2e:1a:59:22:fe:5b:98:bc:c6:33:c7:28:
ca:86:20:59:a7:40:56:a2:73:d2:d2:c5:b5:0a:d0:ab:2b:e4:
66:c5:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:22:40 2025 by rpki-client