Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json)
Hash identifier: HShlNBM5Twgy7eWHzeTbXde09oMt/aAYal6mypGTCrE=
Subject key identifier: 50:8C:52:B2:D5:A5:50:CC:BB:5E:C8:20:D9:5C:7A:0E:A7:56:59:20
Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Certificate serial: 0195E04678B99F1C9AFCCF89A0BB434BEC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
Manifest number: 1453
Signing time: Sat 29 Mar 2025 05:01:09 +0000
Manifest this update: Sat 29 Mar 2025 05:01:09 +0000
Manifest next update: Sun 30 Mar 2025 05:01:09 +0000
Files and hashes: 1: U0b6gboi64n531Jc6zyEuav6vyg.roa (hash: PZafjNuKkOPJe0JHguIOtwXHpUoa+ViotM7w88t40Yc=)
2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: cnLE0fWmXY1HxG1Rf6AFbyT6TGr46TzWF04nCK2Z8rE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:78:b9:9f:1c:9a:fc:cf:89:a0:bb:43:4b:ec:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92
Validity
Not Before: Mar 29 05:01:09 2025 GMT
Not After : Mar 30 05:01:09 2025 GMT
Subject: CN=508c52b2d5a550ccbb5ec820d95c7a0ea7565920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:57:d7:c0:7a:59:3c:ee:75:6c:04:05:0f:
be:bd:4f:8e:59:77:22:61:48:a8:f4:c2:c7:fe:6c:
42:d5:bd:9e:7a:17:f3:60:ae:3c:dd:6d:a8:ba:67:
32:e8:e1:7d:17:e3:70:80:2e:60:61:7c:aa:a9:12:
6f:29:13:14:e6:8c:53:03:b4:b0:9c:3b:11:6d:e8:
58:bc:da:0c:65:7c:72:c5:29:52:c2:e7:b9:f6:6d:
34:04:a3:4e:dc:ed:7c:17:dd:e5:fa:07:23:90:eb:
2f:60:a4:cd:c7:14:62:76:e0:90:e0:57:fb:16:ac:
ff:1e:31:74:59:cd:ae:24:6a:67:cc:3e:cc:f0:24:
f1:91:69:3e:2b:23:af:0d:08:29:81:75:54:20:55:
59:96:01:96:72:ba:6a:76:e8:77:79:09:0a:4a:f2:
d7:77:66:73:ba:3f:ff:0d:e2:24:09:d2:4f:70:a2:
68:52:87:6b:69:9b:d5:d3:46:d3:67:1a:93:0f:a1:
15:84:b9:a3:bd:f3:36:4b:77:06:de:a7:2a:83:66:
ea:26:6d:8a:34:14:d8:28:c0:bb:27:7c:cc:19:cf:
35:d5:f2:03:a0:25:52:b1:b5:18:70:04:51:c6:84:
7b:02:6b:02:cb:49:64:e1:95:6a:54:80:ed:20:95:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:52:B2:D5:A5:50:CC:BB:5E:C8:20:D9:5C:7A:0E:A7:56:59:20
X509v3 Authority Key Identifier:
keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d2:b4:b9:44:30:5d:69:02:2c:a6:42:fe:f9:24:0e:a6:a5:
01:bb:94:92:71:cf:c8:cb:f8:91:f7:34:a3:1d:98:a8:de:11:
f6:4f:ad:c2:d7:bb:bd:3c:16:68:e7:b4:e3:67:01:72:df:81:
ad:77:58:27:4c:71:6d:b8:e4:c9:38:9a:ee:ef:b2:81:9b:fd:
72:7e:fb:e5:5d:3c:89:2a:b5:06:e1:ef:a4:5d:c1:2a:4f:a9:
99:83:eb:04:0f:ff:4e:6b:af:4d:85:85:f2:40:b4:b1:af:59:
de:d8:fc:10:c2:ac:0f:fa:21:25:9b:9b:4e:67:2e:72:33:c0:
03:b7:a6:35:ec:22:4b:6b:da:e3:40:e6:a9:5d:39:46:b5:b1:
64:4f:c3:63:78:4d:c1:e7:04:55:42:4d:a1:08:c7:6e:41:7a:
18:35:2e:f1:45:74:ff:57:1d:56:1e:a4:cf:1e:31:6c:2f:7a:
21:22:84:9a:45:57:44:46:c5:9c:23:2e:ce:df:9c:36:a7:d2:
fd:e3:10:ad:9e:a7:9c:13:4a:42:5b:8e:b2:b1:63:29:72:9e:
fd:c1:0a:15:e3:d9:da:17:41:df:37:0c:72:06:5c:51:00:19:
86:47:0d:44:08:3c:08:35:b2:85:6a:cf:fb:e8:62:94:5f:11:
fe:44:e5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:14 2025 by rpki-client