Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: AX5oIIYaORs28/MuolQhlYvt0A5iCdrYHWzN6XjgqmA=
Subject key identifier: DB:72:43:3A:30:8F:80:D8:C0:8F:D1:64:87:E2:41:B3:95:FE:1B:61
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 0194BC04EFA6BBAD37C320D4830C5277B02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 02A5
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: WQeJLgDtgFYQ5zLiWPFzcKSTUcV6u0uEpq/zNhAoWyk=)
2: p-RJNh9JzuTGAbonv6SiHIGo-Zs.roa (hash: CnUaaNmND1hlUYpUdj93kk7BQgZTe17usUCZnw2w4sE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ef:a6:bb:ad:37:c3:20:d4:83:0c:52:77:b0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=db72433a308f80d8c08fd16487e241b395fe1b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:1c:ee:48:0c:fb:9d:32:94:3d:dd:5a:6a:
7c:e9:59:73:c7:aa:e2:d4:e0:51:e7:f3:f3:28:27:
18:c5:d9:3d:53:1d:7b:6c:2e:6b:1d:2c:0d:d0:70:
e0:0f:17:45:09:3c:6d:a6:0a:f2:b0:71:cd:1c:05:
b1:df:95:89:85:70:53:62:60:4d:16:59:09:9a:4c:
b3:3d:79:7d:f5:a5:36:2b:78:20:e2:be:a1:eb:b7:
37:55:92:1f:b7:fd:03:d9:0f:56:0f:c7:3a:b0:f3:
e4:da:56:8b:57:ef:04:ea:10:24:24:cb:29:da:65:
40:73:7d:d9:7a:3e:ab:a9:21:cd:23:29:c3:72:04:
45:5b:3a:69:22:25:17:ac:63:7c:8d:6d:7c:f6:a7:
2f:f8:c7:7a:e1:59:cc:52:ae:1f:f4:e1:ad:27:af:
75:1f:bb:c5:c3:11:bb:f2:0d:71:fc:d6:84:90:c4:
ac:55:2a:04:18:60:9f:1e:4d:87:2e:c3:5d:0d:2f:
07:c2:45:62:02:9a:89:22:74:48:28:2f:13:38:a1:
4e:2f:96:6a:ff:1a:e4:1e:a0:37:e0:76:d5:8d:df:
a8:b5:15:27:27:01:27:14:da:44:26:4e:0b:7b:d0:
3a:41:5b:f1:0f:bf:2f:ba:de:9f:1d:38:d7:08:a6:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:43:3A:30:8F:80:D8:C0:8F:D1:64:87:E2:41:B3:95:FE:1B:61
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:41:9f:e5:67:41:e1:99:cb:1a:fe:39:99:df:85:cd:40:3f:
3e:7c:99:ba:86:53:0f:02:4f:da:1e:34:95:1d:41:33:76:23:
a6:e1:9a:f3:9b:54:50:fe:46:db:91:d3:3b:19:ff:23:19:1d:
e7:42:80:c9:12:c2:0d:f2:1b:5c:84:9c:de:fd:40:a9:aa:76:
da:9d:be:36:24:31:60:3c:06:93:6c:2c:ab:91:57:3c:4a:cd:
3f:1e:85:08:7a:f7:85:e4:2b:6b:22:1c:5b:2c:03:c8:60:d5:
0d:71:9a:3b:bc:00:0a:57:a1:3a:83:82:35:24:ed:14:7a:9b:
48:50:75:e3:b0:c2:20:4f:62:3c:76:a2:a4:e5:0d:57:b9:49:
10:e9:82:86:d5:a7:c8:4a:6a:ee:8d:33:09:15:46:3f:6b:8f:
3c:75:92:68:bb:0e:39:59:ea:e9:70:fa:2d:3b:ad:98:4b:76:
d8:84:0f:88:9c:1b:e8:0f:b0:1f:99:8b:ba:87:29:59:a3:1f:
2f:c3:b9:5d:1e:78:6a:79:12:f8:2f:b4:14:16:82:7f:1b:d3:
86:69:18:10:69:61:ed:c9:e4:a7:ab:cb:91:11:84:da:8a:1e:
7a:e0:6f:04:d8:02:f9:ea:77:a8:50:20:6c:88:13:62:44:fb:
e7:ff:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:48 2025 by rpki-client