Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier: yMhsyyJK18c6boZEaitM9DvSeDDD+oLti69DC/KMmrY=
Subject key identifier: F1:1C:1F:E1:58:7F:BC:F8:BA:BA:C6:F4:5B:0F:7B:D2:9F:E5:C4:9D
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 0194BC05181D0A61D61D55AF9A57683A8650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number: 0F6D
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: wdjNVWFEbhlIwVe0W0Q4qNNX9d/9XxPyM0Zon3/AmeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:18:1d:0a:61:d6:1d:55:af:9a:57:68:3a:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=f11c1fe1587fbcf8babac6f45b0f7bd29fe5c49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:0b:fe:f6:58:83:63:c8:ee:33:7d:c6:78:
91:02:22:cc:24:3d:ec:49:fa:9b:20:43:02:17:10:
4e:2b:d9:fe:6c:29:1a:37:f0:e8:a7:12:db:be:d0:
ac:80:16:37:63:6b:8c:04:90:ff:f9:ae:42:d2:00:
36:c8:8b:ad:a9:97:3a:92:00:7d:f1:1f:d9:b6:f5:
1b:6b:58:f1:72:97:01:53:bb:1c:19:d0:19:8f:bf:
e6:cd:4b:c4:c8:aa:0e:b2:60:c9:10:88:75:23:fd:
e2:20:55:9c:41:f7:22:b9:23:e7:16:ad:14:56:c6:
6d:45:b8:a1:88:88:82:de:f1:c1:68:0b:37:cf:b1:
8f:77:c5:13:3c:63:82:ae:7e:1d:61:b1:67:bf:d5:
21:3f:99:00:ba:44:29:2f:a2:91:22:c5:58:b9:92:
1d:92:56:4b:0b:30:f7:f4:2b:81:46:df:46:08:73:
d1:47:c2:22:58:65:f0:2a:ea:32:b0:08:0f:76:6e:
1b:9c:df:77:d8:13:fa:1f:c7:84:b9:2b:25:0f:a1:
b9:93:2b:26:52:c7:95:65:a4:98:7f:3d:22:f9:79:
ac:67:c4:20:8d:ef:1d:9a:77:54:d4:4b:31:b9:aa:
78:18:f8:1c:be:06:23:97:74:96:ad:a7:cc:56:3c:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:1F:E1:58:7F:BC:F8:BA:BA:C6:F4:5B:0F:7B:D2:9F:E5:C4:9D
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b3:2d:61:ce:bb:2c:66:d1:b9:52:f0:71:e4:31:d9:7a:4b:
61:71:d7:1b:ed:8a:1b:f5:81:87:b6:15:5e:27:cd:f0:1d:9d:
eb:d6:74:ed:dc:fc:ee:20:db:36:27:00:9a:21:74:59:cb:3a:
d3:f2:34:80:4c:35:77:eb:f2:4b:d5:a6:e7:95:3c:ca:f2:99:
05:83:e4:21:51:11:67:3a:fe:32:62:70:80:7e:9d:aa:d4:3f:
5f:4d:1c:92:da:2e:8d:b6:c2:b5:9f:14:1a:c0:8b:3a:d2:dc:
0c:5f:f8:ab:52:64:2e:38:96:fc:88:91:0e:2c:8a:e0:c9:23:
38:50:20:ae:78:02:62:7e:45:2f:97:00:8a:b4:16:e5:0f:ef:
4d:72:97:ea:50:c3:15:3a:24:81:e3:e5:4e:6d:4a:da:a0:ab:
76:ce:37:1a:c0:d2:bf:80:fd:fe:e9:5e:ed:c7:74:1e:28:22:
83:37:56:d7:2e:5d:a5:85:99:92:32:b1:b7:1d:21:db:d8:c4:
d1:0f:4e:57:99:8e:b5:8a:0c:f1:f7:77:37:5d:76:9f:32:94:
a8:d1:82:8f:06:e1:e1:27:e6:2c:17:8b:12:d6:96:05:b0:6f:
1d:6c:fb:7f:35:f0:f1:2c:4e:d7:34:64:96:96:8d:14:f1:05:
64:87:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:18 2025 by rpki-client