Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: QmpJsHnQSba5SOAD1W9b9RRPZdAiu+jqwkmlbqsgL+w=
Subject key identifier: 6D:94:4C:4C:77:CF:0F:AC:88:53:B9:98:57:C7:E8:23:D8:8A:DA:48
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 0194BBCEC58864D80125FD82DD1EAD670BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 08FB
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: EBBq7/OB/Wm71h8TjrxZSVG/WhgBGJwdJrn2Xz0BPJE=)
2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c5:88:64:d8:01:25:fd:82:dd:1e:ad:67:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=6d944c4c77cf0fac8853b99857c7e823d88ada48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:f9:99:d3:43:33:bd:62:bc:b2:a1:48:25:
09:b1:b0:14:12:03:1f:19:6e:76:da:7c:49:58:27:
b1:77:39:c6:71:42:01:41:83:fe:6b:10:86:11:1d:
88:80:1f:40:e0:1a:8d:b7:9d:b0:06:96:15:50:e8:
09:34:1e:b0:90:1e:60:d3:0f:ec:67:b9:6f:6e:a0:
c1:c0:31:5d:5d:0f:71:d5:9f:bf:ac:3a:e6:22:bb:
3a:22:37:2a:ad:08:f9:de:34:93:dc:9b:19:39:8b:
b7:94:75:bf:6d:61:43:b9:69:ed:de:b4:c6:08:96:
06:44:60:75:06:fe:45:ca:84:91:30:5a:a1:d1:2a:
4e:f2:d4:0e:e0:da:f0:58:21:d6:c0:89:22:a0:8b:
91:e9:9d:ec:3b:bd:bc:fd:26:15:90:d5:36:05:48:
42:a1:d7:e3:50:2f:85:37:22:70:23:fd:cb:e8:07:
c6:ec:5d:e6:bd:c5:e9:b6:10:84:13:85:f5:c2:fc:
9f:54:ce:97:62:0d:3e:2c:5f:d4:1b:7e:bc:5a:5b:
1b:d1:16:f6:49:6b:a7:91:11:30:20:6d:02:49:89:
4f:05:9b:c6:f9:c5:f5:7f:6e:c8:e8:01:69:67:ab:
f4:76:db:6c:cb:fb:ae:e6:2b:a2:97:14:c5:9c:53:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:94:4C:4C:77:CF:0F:AC:88:53:B9:98:57:C7:E8:23:D8:8A:DA:48
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ba:31:58:e0:79:4d:08:3b:a5:cf:90:1e:7b:d3:27:17:7f:
13:35:99:7c:42:72:cf:82:ae:9e:d2:06:4d:3f:2a:b6:a9:e7:
48:d3:2a:c5:62:ee:e2:94:4b:91:f0:33:21:d2:20:42:a3:07:
6e:03:4b:c3:a5:b6:1f:f6:90:e3:e5:8a:81:cc:30:f2:3f:bc:
33:31:23:0d:46:36:ce:b2:4a:a5:ac:68:83:51:27:7d:a2:d1:
e7:e2:21:d0:c8:47:ae:c4:7d:ed:61:53:58:80:09:3e:b1:df:
e4:7a:92:05:b6:b5:75:18:28:37:96:17:22:95:a3:92:32:ca:
b9:0c:65:95:8c:20:a3:9d:87:e4:8b:25:ca:65:6f:a1:00:7e:
a3:ce:12:7c:b5:55:4a:fb:c9:0a:95:53:a2:9a:27:c0:22:e1:
dc:eb:d2:90:1a:9a:67:2d:24:dc:49:5a:de:5e:72:e4:70:10:
95:75:2f:46:e4:ca:29:9a:da:94:82:52:b2:f7:ad:4c:2e:a6:
26:06:89:c9:63:41:43:4f:7b:f1:f6:c6:2c:37:27:63:26:a1:
bb:9f:f6:f8:14:e0:b3:59:43:9c:81:fa:ec:cf:a1:b3:2f:d4:
00:30:2b:c9:84:82:11:1d:27:c6:e6:58:33:1a:7e:80:93:71:
e9:25:c4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:52 2025 by rpki-client