Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json)
Hash identifier: KuDVGoNQ6JG2w6A15P2yaQhfA/os1yXYZ+Q02bf/scg=
Subject key identifier: 64:7A:44:E1:96:B6:3D:B8:A7:72:36:A4:B8:B0:68:65:85:4D:D6:DA
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 0194BD17C933D8A10C736D0CD95301C0B08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
Manifest number: 143C
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: CLUuTLZEvhP9a92KnK-eItC1inM.roa (hash: 2Ri2AUgV0QW1CGKCE3hLOAPp2cpY+EAI4FjrPvKHqKQ=)
2: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=)
3: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=)
4: PNooGkBN5EmPm2-lPjPrjJLMm1s.roa (hash: 3b7JA++XKt4PjiqpoWlQJB1NxEU9vPNVSTxf5bN22dc=)
5: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=)
6: RqGHUWF00fhVZeF-dl8ZKiYmlxQ.roa (hash: xtXihm79MoGY4uAJpdxZbQ/glvVQjH9b99Zaga793M8=)
7: WCVcBzoXdUooCcJT2oF8NE84TQc.roa (hash: /Hy0R71vVTBvpTOMSoN9DeXk39+7lrpMZ6WV5ep6t8k=)
8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: ZqNZZmDP3IvuIw6y6wBHBCjZKleXx6A1fFg3ZIWSJk8=)
9: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=)
10: rCKHmsfaJ-N_UttX96v5NH8qDLw.roa (hash: 9WYNXEYTHRaFHJWYWZEkKi2lmqfnZqGRx1wnqQdweYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c9:33:d8:a1:0c:73:6d:0c:d9:53:01:c0:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=647a44e196b63db8a77236a4b8b06865854dd6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:29:b4:54:ed:7e:ed:4c:2a:ce:dc:49:38:
fa:9b:c3:f4:29:bb:a7:91:33:d7:d5:6f:93:c2:80:
60:74:9e:1a:4a:cc:f9:b8:41:f6:1f:9d:dd:61:8f:
a6:7d:cb:35:e8:32:ad:74:84:b6:60:9a:14:e2:97:
cb:54:08:60:bb:48:c6:af:6e:1a:81:85:d0:d6:f0:
df:33:aa:2e:36:e0:47:06:81:c7:1f:f4:01:2d:75:
e5:4d:14:e7:75:56:0c:9e:82:b2:a3:7a:e3:a7:af:
41:6d:ee:01:d9:e0:80:8b:cb:29:34:90:9f:7d:a3:
d2:a0:a4:b3:c2:41:db:73:5d:42:d6:e0:f9:5e:05:
97:22:bd:d9:6f:ec:a2:0b:65:b9:b8:5a:3c:57:9c:
48:b2:63:14:53:b9:21:ff:78:36:85:cd:a1:90:c9:
43:a2:fe:0a:2f:19:69:f1:48:73:49:88:c1:42:43:
c2:f9:c0:13:d2:43:7b:5e:ed:f5:0a:d6:bb:17:e3:
58:a3:e3:af:ca:01:ae:a3:88:52:c6:22:4c:14:8b:
2c:91:81:1b:7a:1e:d5:83:c9:39:f6:e7:a4:1a:cd:
f0:40:52:63:a1:96:99:2f:48:1a:da:95:10:a7:7e:
14:04:d9:fd:c1:ac:30:28:b0:d1:77:75:07:a6:5e:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:44:E1:96:B6:3D:B8:A7:72:36:A4:B8:B0:68:65:85:4D:D6:DA
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b1:86:b2:47:54:4c:1f:61:cb:d1:7d:ad:59:e2:11:1c:0a:
eb:08:64:e1:a5:4e:55:52:c6:e3:30:3f:e7:80:2f:9f:28:75:
53:28:07:b8:88:31:0d:1c:ed:fa:ca:b5:7e:5f:29:9b:e0:12:
51:2a:4f:7e:7c:7e:23:ba:c6:76:c0:c6:65:5f:f6:a9:0f:22:
9e:d2:9b:5f:ab:9a:cb:8c:11:cc:8c:1e:72:d1:b9:91:5a:94:
2b:fa:af:f4:e5:6a:ec:a8:1e:05:34:6a:95:71:91:eb:71:cc:
bc:80:38:c6:5f:03:62:35:14:54:5e:50:01:1c:9f:e5:9e:45:
f1:75:fc:b9:0f:c1:ed:77:4a:d0:fd:90:f9:81:2a:b2:7d:56:
74:5f:e1:c1:df:26:cc:6a:de:2b:a2:13:53:32:a6:75:60:90:
9f:84:ec:43:01:ce:f2:5b:e8:06:f1:06:dd:a6:7d:ab:7d:13:
0f:09:4d:b0:37:0f:8c:59:8c:83:3f:5b:85:40:13:be:42:f2:
29:80:0f:79:1c:38:56:22:61:a7:57:ce:f5:27:26:25:2e:06:
c3:ea:7c:15:ac:a7:82:7d:70:51:11:4d:24:73:7b:30:1f:59:
1d:e9:c8:b1:be:cf:67:dd:10:91:44:7c:e6:d9:41:dd:9f:54:
d0:de:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:00 2025 by rpki-client