Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: TiFP5z5WV0mqB88OtoI5cJmftq7mLtJq0SrlZhCVMes=
Subject key identifier: 30:EB:E0:1A:C1:10:7C:51:37:29:E6:76:66:57:33:75:0B:9E:E0:9E
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 0194BC72835455812C2CBD3771535316D35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 08E4
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: sIRPSsxp2V+XAO/YeFtLwJ0P+h0bxGxmoriNfTUgZOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:83:54:55:81:2c:2c:bd:37:71:53:53:16:d3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=30ebe01ac1107c513729e676665733750b9ee09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:3d:a0:cf:d1:57:98:9b:bc:33:09:44:e5:
79:e6:15:53:bd:72:00:6b:03:5e:39:af:ac:7c:17:
a8:0c:e9:11:a7:2d:99:8c:ae:ce:b0:27:22:da:63:
ad:ba:0d:33:52:78:ea:d9:6b:85:a5:bf:da:07:ae:
95:a1:8e:9a:8e:98:60:1c:99:41:2f:da:37:57:29:
a8:fe:e0:2a:7e:d6:32:fb:95:3e:57:c4:c8:5a:06:
b5:17:e5:4a:ff:19:a2:34:b1:3d:1a:5b:04:67:cd:
c0:22:1c:08:d9:c5:94:b4:f1:f2:26:43:5a:fb:cf:
ef:6f:67:b0:13:04:cb:70:e5:00:49:a6:9d:d8:9e:
0e:82:f6:ca:90:d6:d5:ca:7f:37:0c:70:37:54:b1:
ed:75:54:82:6f:83:13:a1:ef:fd:0c:85:b9:9f:81:
af:ec:e5:6d:0e:34:3f:1a:fb:2a:f3:b3:ef:ae:55:
72:1c:51:67:ce:4f:6e:d4:58:78:11:16:b2:89:13:
6c:11:52:6f:fd:0c:16:58:5c:94:7b:f0:dc:d1:5e:
23:04:9b:cc:7d:68:f6:14:67:a1:b7:9c:25:90:a6:
f6:c5:3c:03:50:0d:1c:33:79:ab:33:39:6f:5e:34:
02:c0:8b:f6:b3:6d:e6:f7:48:53:af:01:c4:51:7b:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EB:E0:1A:C1:10:7C:51:37:29:E6:76:66:57:33:75:0B:9E:E0:9E
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:08:8c:bb:ce:b8:ad:4d:1f:5c:88:94:23:a2:41:64:73:
f8:e7:67:40:b2:7a:fa:50:3d:a4:f8:61:74:87:b5:17:9e:a3:
3a:fa:db:f6:20:08:32:bc:54:d0:e8:6a:b1:44:6a:94:ed:b4:
2d:e3:15:3e:d4:a2:e2:1e:d3:f9:d1:53:f3:76:c2:5b:2f:f7:
38:c1:6b:2a:b0:e7:c6:d6:f7:97:7a:c1:74:30:f4:3f:e2:14:
de:64:ff:3a:94:55:8f:18:b0:b6:a4:97:1a:cf:d7:98:a0:c2:
e5:c3:20:34:89:fe:81:b7:aa:44:61:30:9d:17:0d:97:a5:15:
d5:ce:d0:97:85:ae:cc:73:92:d8:e3:fb:f8:3b:f5:af:a3:bb:
af:2e:0d:72:e5:91:b1:92:a5:70:3f:f2:59:93:7e:56:2d:95:
e9:d7:64:c0:0f:0c:61:ae:a6:6a:55:3b:c0:92:3d:e7:65:b7:
0d:d4:4b:5e:dc:02:e3:e5:40:38:64:00:63:ee:39:81:10:2d:
27:91:2b:f3:4d:f0:0d:9a:1d:87:22:9a:56:6a:6e:a8:94:fa:
0a:47:50:78:7c:ec:17:ca:82:17:72:2c:c7:91:bd:48:c5:9c:
e0:24:7b:78:7d:04:a8:e2:d0:83:5f:9a:3c:cc:ed:ef:a3:f9:
6c:47:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:42 2025 by rpki-client