Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
File: ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft (raw, json)
Hash identifier: RfDGsAEN5R00yxv8yY8GzgvvIquB9t3qsYW/TaFpkCc=
Subject key identifier: 36:87:DE:08:7B:A9:3C:0D:B8:9D:3D:16:2F:67:1B:AD:31:DA:63:7D
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 0194BC7292B5A9D5524953C26628848F0589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 77Lxszm6b67-RSjepR0C23JG5dI.roa (hash: 9Xm4YAYAAgADPugT2wEGkyXGaEUt/FjBjGPJ5p3nqlw=)
2: ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl (hash: tIFZ4Eil9T1xb/kZWpHeNiep1iDhvEoQapwMrbuQMFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:92:b5:a9:d5:52:49:53:c2:66:28:84:8f:05:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=3687de087ba93c0db89d3d162f671bad31da637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:ae:e6:d8:b5:f5:96:d1:b1:23:ae:d0:56:
24:98:1f:74:71:05:46:b1:6c:2f:e4:c2:cd:62:e9:
63:24:5a:0a:ec:22:18:df:61:6a:99:a0:77:13:c4:
f8:59:61:86:92:c9:ee:7d:cc:de:6b:38:d6:c8:7f:
e4:31:00:59:82:c4:a6:6d:38:9b:f2:d6:5d:55:0f:
7c:39:4d:fd:e1:98:9b:06:3b:d1:03:7f:3a:f3:ec:
a0:36:dc:13:d7:7b:2e:4d:4b:48:bf:d3:ed:ad:2e:
39:b7:74:83:87:34:a8:7a:e6:27:02:23:e0:b9:5b:
6e:7b:52:aa:57:1e:35:20:4c:5d:0d:48:ad:6e:43:
46:dd:57:e2:42:9d:de:d9:fc:8f:fd:03:e1:51:46:
2b:b7:7b:c1:8d:52:70:2c:ac:15:2d:a7:c8:d3:af:
07:f8:a3:d5:14:7c:28:24:b7:af:6f:72:e1:ec:2d:
ea:80:62:82:55:af:29:66:39:75:af:1a:b2:07:72:
78:29:3a:8a:ec:12:3e:b2:d0:c1:7b:4a:d0:2b:7c:
56:4f:14:96:be:ba:a2:fc:bc:e4:e1:fd:fd:5f:8b:
d0:71:0c:5e:c6:72:ab:ce:1b:11:c5:74:42:9c:53:
3f:3f:33:e5:20:fb:bd:90:e4:62:04:50:3c:64:48:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:DE:08:7B:A9:3C:0D:B8:9D:3D:16:2F:67:1B:AD:31:DA:63:7D
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8b:38:3e:39:1f:c7:55:91:8e:3d:45:17:e1:1a:ab:e2:6f:
05:0b:2e:d4:5b:48:c3:f3:14:2c:a4:15:23:a8:6a:b2:05:b4:
b9:47:c7:89:f6:15:c5:ea:47:68:9e:67:c8:59:4c:ba:bd:7b:
c3:bd:04:a5:b6:01:c6:b4:86:fd:55:01:ca:6d:2b:7a:9a:f7:
eb:da:ac:bc:35:bd:fe:33:b1:ce:e5:bd:8d:69:d0:04:34:45:
be:32:5b:34:34:d8:97:b6:5e:bb:80:f8:45:81:60:72:93:f7:
4e:16:5c:1f:5c:16:3c:bc:e1:c7:2d:2b:4d:7f:fc:df:fb:d0:
0f:c8:94:eb:a6:f7:3b:40:f3:d2:c6:3d:39:17:a4:2c:ca:55:
4c:33:3f:97:06:b7:30:a6:ef:43:ca:84:b1:1c:0c:ff:83:df:
7a:22:82:ec:7c:9c:10:e5:6f:03:66:c9:fd:19:6f:1f:2b:c1:
d6:ce:d9:77:ce:14:05:e7:b7:d3:e2:ce:75:3d:07:81:a8:67:
81:6e:09:9e:22:f6:59:bf:d7:c7:b7:d8:8c:01:d1:95:a8:e2:
1a:18:43:a4:c8:ad:84:5f:2f:72:73:ab:b5:f7:d0:fe:5c:1c:
33:c1:b1:8f:90:1a:66:ce:21:bf:11:bd:79:d9:21:d4:29:6c:
fc:bf:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:07 2025 by rpki-client