Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier: VlMNvqUHjr9YU4ViMLJlHddWnBMSr3oJY/naqvOrpjc=
Subject key identifier: F2:AD:B5:E7:36:38:92:7C:CB:49:E6:11:0B:53:4F:2A:5F:EC:78:31
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 0194BCA9D7DA608727BEF7DE700EE2C0F9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number: 0FB6
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=)
2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: Ie+sbC6TjZYpi9alxCPWMHKFGjai+qTRFGB8/fU9fZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d7:da:60:87:27:be:f7:de:70:0e:e2:c0:f9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=f2adb5e73638927ccb49e6110b534f2a5fec7831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:0c:55:94:f6:72:58:32:bb:93:c4:ef:f6:
71:c9:e3:3b:e7:c2:ec:52:d1:01:aa:22:86:14:17:
5e:fa:fe:84:ed:ab:31:7d:78:05:07:c0:4a:21:cb:
ce:c3:b4:6a:4c:5a:9f:2f:0b:27:84:59:ac:ff:23:
ec:b2:45:0a:f3:8b:c3:99:24:34:1d:3f:d1:2b:15:
35:bd:51:66:e7:c8:5e:ca:da:01:a2:4c:c3:aa:0e:
32:af:99:65:ff:31:9a:16:a3:a9:80:ba:6e:88:eb:
ab:57:fe:88:6b:8f:78:96:8d:fc:b6:56:94:6b:5a:
70:34:0b:c1:78:e1:f5:d5:03:fb:0c:d5:17:9d:f2:
3d:48:8d:c6:fa:de:6a:e0:dc:38:41:e9:48:3f:4a:
4b:1f:87:8d:29:33:13:b5:3a:14:5b:27:2f:5c:86:
8e:17:75:26:63:31:f4:00:63:20:16:4f:c6:56:e7:
33:33:f3:24:3e:f1:3b:73:a8:4a:0a:94:df:8b:f3:
97:48:d9:a1:1f:2f:9d:04:6d:7e:69:c6:e9:04:79:
d9:fd:22:51:6b:93:3d:c3:dd:7f:1d:03:74:c1:61:
f8:f8:a4:74:ff:db:ad:89:e9:c2:35:f4:4b:1f:ca:
5f:c1:10:14:f3:f2:10:e1:8c:05:97:aa:cb:0a:1f:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AD:B5:E7:36:38:92:7C:CB:49:E6:11:0B:53:4F:2A:5F:EC:78:31
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:65:6c:52:f4:bc:86:5c:67:8c:82:d8:db:60:6a:16:87:8a:
67:80:19:e9:d0:68:10:58:4c:a5:d0:8e:09:8e:96:b1:f6:59:
e1:7d:77:e2:21:90:7e:15:a0:f5:23:f6:38:0d:fa:9b:12:22:
be:06:38:db:aa:28:6d:f4:93:ec:c5:2c:35:ea:01:ae:20:d9:
4c:8d:70:d4:16:08:db:e8:96:7c:e4:fe:33:8a:56:04:8a:67:
4f:07:c2:b0:9c:f1:b9:ee:4e:07:d6:b9:5b:db:eb:89:b3:63:
36:42:31:de:9b:5a:a7:6a:8d:d5:60:16:8e:b4:c4:97:2f:d1:
f5:cb:c6:bd:84:1c:4a:fe:f4:2e:18:39:31:d5:8d:e4:56:a6:
93:de:6d:9a:b5:2c:bf:10:ce:06:b3:c1:0e:6b:c3:c4:65:39:
bf:15:ef:1c:6e:43:36:68:32:f3:f5:b7:34:ae:90:6f:bf:56:
8f:5c:a9:e0:20:44:d6:1c:7c:cf:31:b8:99:d4:c4:43:b3:6b:
aa:a8:28:d8:ab:23:67:44:7a:12:4c:9d:24:2f:f2:e9:da:ef:
27:45:50:c6:a7:0b:12:75:09:cb:ac:7d:83:49:3f:46:48:3f:
76:be:65:84:77:57:8a:6a:b1:a4:ab:fb:ef:2c:f1:36:a2:d4:
e7:b7:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:15 2025 by rpki-client