Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier: e/uMw5BmIaGfiQHLz0Guf6d+3ZDRrgkQSvuBlwfSfBs=
Subject key identifier: 56:00:88:81:43:32:C6:6F:05:0B:84:9B:D3:3E:50:49:F6:0B:66:78
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 0194BBCE9D66F3360F3F2F2732A0C539C2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number: 0519
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: PujR3/tgtb/uEsmYFH8AazjH8Vp+yvqBstbqjiC9o6c=)
2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9d:66:f3:36:0f:3f:2f:27:32:a0:c5:39:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=560088814332c66f050b849bd33e5049f60b6678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:93:f2:7b:cb:8e:df:27:b7:90:b2:2e:5d:
31:47:63:a1:ad:d9:fb:d8:f6:6a:bb:e5:35:b2:62:
ff:1f:49:21:55:31:aa:c1:f3:f4:7b:37:d1:a2:f9:
85:1a:22:cc:a1:22:a7:7f:13:c7:ab:dc:ac:6c:c1:
f1:42:59:d5:ae:de:08:95:73:6d:d3:de:d6:89:26:
17:50:35:51:61:4a:1d:28:bd:7e:90:8a:69:23:d9:
61:7e:5b:e9:c9:e6:4e:96:52:94:43:c8:a7:ff:e7:
3c:5d:32:2a:b6:a7:cd:b2:39:db:fc:0e:a2:c7:2a:
ea:fe:21:23:76:b4:28:e3:f7:8d:35:0d:11:0e:1b:
bd:64:09:53:ac:91:2b:7f:60:6b:9a:92:b6:9b:a3:
ad:52:b2:69:31:00:a2:16:c9:11:52:9c:ef:ea:a8:
b9:dc:6b:10:0a:95:83:17:f3:c6:a6:87:b1:f8:b5:
cc:f4:67:27:1f:f4:4b:12:0f:96:c3:61:2a:74:4d:
d2:44:c5:e4:f2:fb:32:79:4e:35:c3:e1:85:23:06:
de:c9:ad:8d:d8:25:2d:0b:f0:52:c3:8a:95:4d:99:
74:c1:75:7f:e7:a2:07:b6:48:f8:11:f9:bd:9c:bc:
40:f6:c3:a1:88:0e:67:85:39:aa:31:60:5d:34:68:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:00:88:81:43:32:C6:6F:05:0B:84:9B:D3:3E:50:49:F6:0B:66:78
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f3:d4:13:ff:b6:d4:26:64:0d:66:be:e3:5b:05:33:77:15:
db:d7:31:4a:e9:d0:83:07:57:b4:8e:fe:34:58:c8:92:98:bc:
48:34:d5:91:38:99:21:73:8f:f4:15:d3:8d:c7:f2:52:99:ec:
35:28:e1:e8:b2:d1:db:2e:b4:ff:9c:b0:54:94:cf:bb:dd:51:
e1:b5:6e:b9:c0:d2:d3:5d:27:b4:dc:d3:24:60:b6:df:20:04:
ff:c8:54:23:23:09:3e:b3:bf:4d:61:06:74:06:dc:48:44:d1:
f2:c8:21:d2:dc:bf:2f:23:77:fd:73:d6:ac:29:86:a7:86:cd:
9a:53:f4:b6:b5:26:33:ec:95:4d:2f:a7:b5:48:30:40:ac:48:
2d:de:0f:a9:40:38:14:ed:70:55:21:3b:e8:80:6e:63:27:dd:
23:22:1e:cf:46:bc:7a:e6:b8:82:4d:85:7d:ed:a9:a3:f5:15:
cf:d9:30:84:b2:65:4c:72:00:54:26:2b:d5:8f:f5:35:32:85:
4c:1f:02:ae:41:81:b8:cb:72:1f:f7:ee:7b:62:af:24:7f:0d:
3a:f6:bb:6f:d4:5a:f9:68:93:29:49:54:6c:f0:0f:1a:23:46:
62:d4:31:49:6d:76:e2:86:d0:09:bb:71:bd:24:da:1e:ea:c7:
58:8b:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:23:46 2025 by rpki-client