Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: F2sKdTCesiTxcXW7EKaRESagidPU/96BPPLnFXGHTCs=
Subject key identifier: BF:0D:0C:42:58:A0:7B:00:44:95:26:37:16:E6:AE:60:5F:44:88:F0
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 0194BBCE05B49DD8418230E5B201BDDDF43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 105C
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: HI+jfERSYQflz31hmLLvYU/sYl/e1wHujtc1sW0OJPU=)
2: rJRxxRneTTHrBiouHAwe-Vj2hOM.roa (hash: pnxg6ZPXerYJRTKN22NAobx2yMJvSslv4M+/PffiHGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:05:b4:9d:d8:41:82:30:e5:b2:01:bd:dd:f4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=bf0d0c4258a07b004495263716e6ae605f4488f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:79:22:71:d8:23:f3:21:2f:33:86:ed:68:65:
87:ac:a2:30:8f:f0:14:82:fa:c7:07:64:e7:fb:da:
05:9e:37:9e:73:c2:fc:ff:78:e7:18:38:84:bb:08:
cd:23:cc:61:e2:cd:d4:f7:97:0c:88:03:0a:c7:5c:
ff:6e:9c:4b:73:74:c0:ea:ab:37:e2:f9:79:f7:0f:
01:77:09:dc:6e:a1:03:70:c2:66:2c:78:27:32:0d:
ea:6a:99:5c:8a:ac:1d:1b:72:87:cd:33:c1:6c:96:
71:aa:c2:56:8c:6b:1c:0a:7a:40:97:c8:a5:0d:b6:
7f:dc:25:57:ab:55:a3:87:2b:7f:55:5c:2b:e5:91:
9c:ec:f5:10:dc:a4:4e:25:78:16:40:8f:37:0b:01:
51:85:5b:6a:c5:b9:9c:3a:ed:ea:85:95:42:e9:1e:
4f:f0:ea:b8:fd:c7:82:e1:51:b1:01:80:79:57:7a:
d7:e7:76:b0:0d:38:0f:65:9c:2b:a2:7c:e3:0f:f9:
3b:cf:fb:15:39:c4:ba:da:f6:d5:ad:4f:a0:8d:e0:
69:fc:f7:38:27:51:59:ae:00:dc:1a:3e:ca:98:44:
53:a4:d4:b6:3b:06:da:f7:d2:25:b5:36:05:b6:16:
43:8a:f8:f7:e9:49:4a:91:1c:bd:08:59:70:e5:f9:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0D:0C:42:58:A0:7B:00:44:95:26:37:16:E6:AE:60:5F:44:88:F0
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:76:be:7c:d7:6d:55:38:a2:b9:5c:1d:db:61:6f:5b:dc:77:
de:08:4f:94:0e:91:ad:2b:6a:ad:1d:19:ac:bf:06:94:d8:6f:
e4:d0:14:c7:30:91:ff:9b:c4:75:a8:61:f6:92:1c:bc:01:6e:
5d:13:68:8e:e6:5b:fa:7a:f9:22:4f:58:2f:3c:bc:7d:8d:72:
f7:90:ca:19:10:3a:d5:05:05:91:f6:d2:c3:6e:df:c0:32:84:
cd:66:f6:83:5f:5f:76:5e:7f:f5:17:dc:6f:03:6a:db:8c:b2:
1b:3b:45:73:31:cd:07:0f:c4:63:ec:85:16:6e:8e:33:4b:e8:
03:77:17:8b:c4:27:85:81:20:f6:f5:f2:1a:37:0a:42:6a:2c:
fd:22:2b:fd:a3:bf:18:1c:14:39:f7:a2:98:38:ee:d4:27:4e:
8f:68:05:5b:cb:42:fc:05:81:61:0f:1b:2f:e7:08:07:2e:00:
29:b0:1b:23:84:23:ba:83:7b:5a:50:03:ce:55:21:9a:15:18:
b5:4a:31:96:5c:d9:2a:59:76:2a:77:92:7a:7b:a3:c8:bf:13:
87:c7:da:e2:d6:1f:ee:c4:5a:a2:e2:e6:cd:f4:24:57:cb:32:
75:42:db:48:ab:e2:47:f7:66:c6:ce:99:f2:dc:ca:47:d6:1d:
23:88:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:23 2025 by rpki-client