Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: lfinSGaHLMayUPbAz+Z+ge3aHwJWWgIekh2bURVSQSg=
Subject key identifier: D4:C5:C6:45:BD:57:AF:73:C4:B0:23:09:DD:2D:C2:1D:01:6E:BF:64
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 0194BD4E700E09895AB2C11D6E3E7C7DC6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 0366
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: S/WS6a4LFrmgRjjzGR5S+ViUn41a4YUD2O9E4KWcFJs=)
2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:70:0e:09:89:5a:b2:c1:1d:6e:3e:7c:7d:c6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=d4c5c645bd57af73c4b02309dd2dc21d016ebf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:2e:7d:bc:0b:7e:c6:9a:bd:7a:5c:0c:9c:
e2:96:18:04:53:40:03:b9:b4:9f:d1:8e:e5:bc:99:
f5:ad:85:3c:49:c2:dd:1b:2c:31:76:a6:ca:9c:ba:
3d:e9:a9:f1:a2:6a:94:5b:2c:fa:92:d3:2e:bf:82:
5e:f7:fe:d6:9f:d5:53:bf:89:8d:09:5d:03:5b:44:
99:b0:73:99:53:91:75:a8:bd:91:f0:89:6e:5f:05:
a4:73:cf:29:43:4f:cc:11:a0:74:be:16:f7:f9:98:
cf:8a:0c:6a:3a:f3:e9:a3:41:d6:85:f6:a3:b7:a3:
e6:8e:ab:c4:9d:d6:33:aa:1b:f0:4f:7a:fa:83:9f:
45:f7:0e:49:b5:4f:ee:1a:a5:e1:b7:7c:14:1d:a6:
db:64:4b:23:7d:75:0a:fa:11:af:35:62:c2:fc:1f:
ce:63:70:c5:72:86:20:4f:10:cc:da:17:21:65:46:
e8:3e:b1:43:99:aa:d7:07:e5:77:2d:2b:dc:a4:4c:
35:51:33:58:85:e0:e7:8c:ed:30:fc:4d:08:4a:0c:
70:61:1b:14:02:63:06:f2:51:36:4a:47:4c:a5:4b:
64:e6:ed:2b:1d:b5:45:ee:25:d5:82:ef:31:7d:d7:
c6:ec:cb:6d:b1:6a:69:4e:8a:e6:5a:23:e6:fc:80:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C5:C6:45:BD:57:AF:73:C4:B0:23:09:DD:2D:C2:1D:01:6E:BF:64
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:60:24:a6:c1:91:3c:54:b8:4b:20:8c:7d:92:f5:1e:cc:b6:
5e:cd:62:9a:42:f3:91:a4:3d:35:5c:b7:0d:e5:cc:84:ce:1e:
97:04:df:8d:0c:1e:0c:4a:07:0f:e5:25:68:61:ac:78:f3:08:
70:ba:97:b6:a3:0e:23:87:67:99:9c:80:ab:48:2e:54:8d:10:
69:d2:27:7d:89:5d:22:07:73:bc:85:ae:9a:24:0a:76:da:b9:
08:00:13:93:79:45:20:3b:4a:b8:7b:68:ab:cf:fc:df:78:9b:
af:c6:8f:2b:de:d6:64:33:29:d4:88:ce:08:e4:30:8b:a0:03:
6f:ee:6f:c6:5f:d7:e1:7f:cc:57:e1:b4:ec:bf:d4:ac:65:c4:
09:a0:f2:f3:f7:92:d7:5c:41:3b:fb:b1:23:a5:4f:74:02:1a:
eb:2b:be:e5:94:65:a1:da:3e:e2:6a:a3:a7:e2:6d:5e:fb:b0:
e9:57:74:03:a2:83:e3:77:2d:df:82:6a:ed:be:17:24:6c:c5:
c3:91:36:dc:4b:4c:29:3c:9e:83:c9:4f:68:20:b7:fd:0c:2e:
66:e9:14:4b:be:32:9b:44:0d:48:93:5a:ba:75:f2:4f:ef:7d:
e0:77:dc:51:98:b0:36:82:e8:54:36:40:26:f2:ba:a7:6d:2c:
10:5b:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:24 2025 by rpki-client