Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: J4kvZ48GJdq5Xxp67QQGP93ASx1l/BySZ81YnlIyoM4=
Subject key identifier: 21:30:79:A0:D1:D9:F9:26:F0:07:4D:94:3C:C0:5A:B6:2F:13:6C:AB
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 0194BCA99D4F9D2BC86343A3E117FD4AA7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=)
2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: PUt3CPyd+rX3v+FvkzLLUieCVYUq08KjWZeYxfdEt0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9d:4f:9d:2b:c8:63:43:a3:e1:17:fd:4a:a7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=213079a0d1d9f926f0074d943cc05ab62f136cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:a0:d8:0d:17:7e:8e:2e:9d:77:8b:fd:a2:
1f:e0:a8:0d:51:3f:e6:65:0f:ab:a1:4e:21:e0:29:
09:16:7a:55:24:1c:4e:f4:c3:42:34:bd:9c:29:e8:
3c:43:f3:0b:2d:42:dd:62:71:c0:1e:9c:e9:2f:00:
e0:36:9b:48:a4:b9:42:bf:58:7b:a0:95:61:d2:a3:
78:a6:10:f2:2e:b4:81:67:e3:d2:9a:40:6e:83:fa:
c1:df:3c:78:9a:2f:77:91:7e:77:65:a2:14:e0:5f:
3e:1d:a1:fa:85:28:ab:56:a5:bb:95:48:dd:fd:4f:
1e:41:56:e0:2b:94:76:1c:d8:1e:b0:5c:06:e1:7c:
af:35:68:17:15:08:a7:ba:c5:36:18:e3:23:6b:0c:
c6:3f:64:f7:7e:4d:82:98:fe:2b:39:4d:c8:80:86:
da:f6:91:f7:18:73:78:95:4b:99:08:da:a8:94:48:
c2:ce:c8:57:8a:7e:27:29:60:a7:4a:aa:f9:3b:ae:
02:31:e1:2b:c7:85:6e:85:63:bd:2f:03:3e:66:d4:
3a:e5:a2:de:db:1b:aa:50:72:6d:02:90:be:0b:d1:
0a:b1:02:59:2b:87:fd:50:30:11:da:0e:48:9c:30:
e6:f0:8b:ea:50:e1:07:71:e4:0c:cd:1e:5d:c7:fe:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:30:79:A0:D1:D9:F9:26:F0:07:4D:94:3C:C0:5A:B6:2F:13:6C:AB
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e9:c6:9f:d5:1b:b5:65:26:35:19:3f:2b:1a:d7:ee:ef:69:
1c:b9:97:75:58:e2:39:fb:89:18:85:70:5f:be:00:73:36:ba:
e2:4a:9e:8b:85:35:d4:b3:95:ee:e8:6b:17:6a:52:cd:09:17:
e4:b9:9e:c1:a2:ba:66:40:88:40:18:b4:f6:1e:60:44:3f:a4:
78:a6:a0:35:3f:22:76:02:ec:75:4e:6f:a3:4e:c4:c0:53:3c:
af:20:73:cc:86:c3:d2:f4:54:58:75:57:31:49:e8:31:c5:17:
4f:c4:9e:b6:06:2e:36:83:1e:76:b1:4f:af:f6:96:a8:ec:a5:
d1:c1:7d:79:8e:68:c1:60:bb:1f:30:8d:da:4b:43:d7:14:72:
c5:30:86:34:91:b6:57:77:27:e7:b4:2f:a3:b8:cf:81:7c:9d:
09:51:5f:6a:2d:9e:1f:d5:fb:dd:51:53:03:b6:59:1d:26:0d:
da:16:41:0c:b3:8b:db:c9:b0:96:b3:ad:e6:0f:c8:62:8f:bd:
c6:53:75:e7:e5:c4:2d:a2:02:6f:f9:f7:c7:c1:1a:d9:1d:c0:
94:b1:e7:63:1b:5c:bf:fa:6a:22:09:27:06:bd:37:8f:e2:34:
7e:7c:fa:3e:16:cc:8d:37:b6:3d:97:b9:92:64:65:ed:7b:32:
2a:9c:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:06:00 2025 by rpki-client