
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json)
Hash identifier: qvhaCzwYcqQsK6bB3mcEKtmy5pdELm0x9XNfixhAeAk=
Subject key identifier: 3A:B2:05:13:19:F7:6F:EB:65:A6:61:E4:EB:6E:F0:B0:32:CF:8F:9D
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial: 0194BD4EACEF0F88134819E04D3075FF65E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 9HdHpErjzm6R2MG9_t1v0LR-DNs.roa (hash: 44w8h4Syl3hPm5qmixckaJ+qDBSvg2af/1osG9t19Ig=)
2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: UUW53iiVmuzwe5dJcCJ0mv3bnzHtAWuqDKMAzwWV2WE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ac:ef:0f:88:13:48:19:e0:4d:30:75:ff:65:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=3ab2051319f76feb65a661e4eb6ef0b032cf8f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:96:6c:66:37:69:1f:89:6e:9a:9c:ca:1c:26:
08:2a:47:f4:36:7d:d0:49:cc:a6:c6:5d:0c:06:5c:
74:1d:7f:ec:30:62:37:d2:22:77:94:88:10:d9:0e:
ac:d3:f1:84:49:95:0a:72:1e:bc:f5:6f:6e:e6:27:
67:6f:e5:6b:2b:db:f6:a8:c0:b7:a9:fd:cd:b3:b5:
94:67:9b:e2:7a:eb:24:84:ad:fa:60:00:29:19:79:
4a:2d:d0:79:24:2a:d6:5c:65:8d:88:2f:bf:fa:85:
a4:fb:2a:5b:e0:52:f4:b4:21:3d:4f:c0:35:bf:5e:
b8:af:2f:22:33:95:02:a9:a6:0a:b5:33:ef:47:36:
62:19:1c:42:1b:67:39:78:bb:78:a2:9a:5a:6a:53:
57:e2:25:ac:76:0b:63:d3:d2:73:44:6c:92:33:f5:
0e:e3:7b:ef:87:66:3e:4c:7e:11:32:c0:c4:21:a2:
b6:3c:a7:cf:1d:97:a3:e0:0c:fd:69:8a:15:be:a6:
e8:02:e1:51:23:52:b3:e9:b8:c2:a4:75:65:99:4c:
cb:1d:e6:dc:ca:c8:2f:1f:ed:33:8b:6b:23:e2:84:
48:e0:fd:a6:42:ab:b2:11:78:7a:89:57:8a:8c:76:
c0:7e:21:a4:bc:45:17:e7:7b:84:a4:db:6e:7c:18:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B2:05:13:19:F7:6F:EB:65:A6:61:E4:EB:6E:F0:B0:32:CF:8F:9D
X509v3 Authority Key Identifier:
keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3b:01:00:53:66:42:19:48:97:35:02:eb:19:cc:07:8e:d9:
c2:23:19:ab:3e:51:36:a5:10:07:cc:cb:c3:21:ee:ee:f2:83:
a8:a8:b6:83:14:09:0c:d0:38:8b:8f:54:8a:32:58:a7:df:df:
7a:69:58:c3:3d:96:73:f0:ea:bf:40:d7:ee:d9:25:cd:69:a4:
86:1f:b6:c1:82:42:4e:c5:4d:b7:72:3b:1e:2c:6a:af:cb:e5:
16:18:20:23:12:85:dd:fd:12:ae:c4:f1:d3:01:fb:5e:a4:57:
b2:1a:7f:e3:b1:da:8b:e7:a8:2e:b0:9d:66:14:85:6d:6a:1b:
a7:13:62:8e:46:ec:c2:b8:25:9d:62:8f:a5:cf:b2:6c:30:79:
1c:9f:a5:18:39:d7:bb:38:9f:b0:7d:72:e9:b3:4e:98:a7:01:
32:e7:fe:ab:24:f1:82:63:60:bd:f4:dc:60:bf:0b:e3:4b:ec:
cf:3a:d1:6a:66:ee:52:1c:7c:f2:1d:1d:2b:d5:98:27:d4:1c:
48:43:60:46:d8:56:99:0c:9b:c1:65:f9:03:dd:0a:99:23:cf:
af:83:6d:f9:b4:fe:fd:d3:8a:88:bd:91:0b:4f:bc:36:12:ac:
74:96:c2:77:a8:c8:7b:b0:b8:6c:9d:10:d9:60:f6:81:70:e2:
8a:6b:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:39 2025 by rpki-client