Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: LbR+SfWdZ/gTftnH3Js7HNUwym90WoxQP0nCrqPhIYY=
Subject key identifier: 71:96:20:F0:6C:5D:60:9B:24:C8:F2:D1:09:D8:E0:9F:17:28:DC:22
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 0194BC3C3A073D04A860FAED747AF43D9E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 0793
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: vgK9NffzP8c6k+u2/vakmw0QBMNGpqjInp3qXeBc6R0=)
2: eL1SH2o6BFV4SrOkUUf29xtUS08.roa (hash: JmkdJoGyIMkBw++B3F+N+a79o3z14Hcd0LecLEcyOis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3a:07:3d:04:a8:60:fa:ed:74:7a:f4:3d:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=719620f06c5d609b24c8f2d109d8e09f1728dc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:52:63:ab:44:33:ef:57:98:f6:00:37:62:
04:eb:4a:9a:f2:39:57:7b:2d:08:dd:1f:73:f3:8b:
a8:34:a5:7b:b9:08:93:e6:7c:a0:d0:ac:f0:be:5d:
ae:b0:d2:95:34:0e:f2:8e:32:cc:67:b9:af:1a:cf:
e1:8d:fa:8e:9e:13:9b:6d:77:3d:f2:e4:e6:31:ca:
6b:16:09:7a:83:e8:fa:b5:b7:b1:09:32:52:0b:a4:
62:a4:c1:66:c0:d1:60:72:ae:a7:05:e0:e0:0a:18:
9a:d3:ed:9a:23:90:f2:de:8b:04:53:ec:69:dc:0d:
b3:ed:14:d7:30:a7:13:53:99:51:2c:04:53:7e:92:
9f:7a:0e:4a:63:d4:51:5c:b0:ec:71:64:8e:be:5d:
c9:21:86:f8:a9:5e:98:77:b8:e8:31:bc:68:e8:52:
e6:77:ce:85:4d:c8:3d:d1:ec:56:da:1e:ec:f7:1d:
b9:6c:5f:0d:0b:a5:02:2c:bb:72:76:da:3d:40:55:
b6:54:3b:c6:c3:8b:b1:9a:a9:de:4c:3e:f0:8c:a7:
05:a9:6f:65:d4:7c:19:19:9f:7f:74:67:e5:92:ed:
a5:06:37:a8:79:22:3b:00:8b:17:e6:94:5b:1c:9a:
ec:cf:67:4e:f4:4c:4c:8e:48:bf:18:0a:bc:e5:03:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:96:20:F0:6C:5D:60:9B:24:C8:F2:D1:09:D8:E0:9F:17:28:DC:22
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:72:9d:58:64:47:c7:46:cd:67:c7:9e:9d:45:c3:66:bf:c0:
b1:86:4e:58:e2:37:81:a3:6d:e5:57:e5:ad:15:d7:be:38:e0:
f6:24:25:c5:45:9a:c1:58:c3:9e:97:4b:dd:df:70:44:a2:d6:
42:cb:df:a3:1d:b0:4a:ca:89:46:85:48:9c:d3:56:86:43:26:
e5:7c:85:81:df:a2:fa:e6:aa:23:2a:a9:9f:e0:e0:b3:82:0e:
93:c4:0d:48:15:4d:1b:1f:89:4d:3f:d0:27:e6:91:45:5d:17:
27:05:be:ae:28:66:bc:20:9e:00:c8:a3:83:54:b5:15:69:f6:
2d:cd:d8:9d:ba:f7:19:49:87:3a:30:ef:e2:ba:fb:05:87:8e:
73:fd:59:4f:5e:b2:6b:f1:3a:5c:68:15:18:6e:af:4b:f9:41:
a5:a8:12:5d:c0:f7:4c:75:e9:53:27:87:a7:fc:07:f5:1a:29:
bb:06:ab:9a:8c:32:d5:3b:61:74:6b:12:de:0b:29:50:e5:c3:
35:4d:fb:2b:0e:bc:16:0e:75:42:bd:55:a1:3d:1f:73:35:d9:
d1:06:d2:2c:64:92:a7:8e:63:3b:55:91:62:73:a3:51:1b:08:
20:df:3e:37:a1:51:c3:6f:36:5b:57:31:1c:1a:d5:69:bc:a4:
1b:c0:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:06 2025 by rpki-client