Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft
File: ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft (raw, json)
Hash identifier: sPZiXJLVfoyMAJm/tAqWtNwwRphnPsL5KchJ3aYB4CU=
Subject key identifier: AD:1A:04:4E:83:A9:6D:3E:F6:AE:2C:35:A7:CA:25:80:6B:CE:03:13
Authority key identifier: 65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
Certificate issuer: /CN=65865968a1d8f4f377865c913af3b9af890d7cce
Certificate serial: 019445930C32354496A51B6A96FB02F138C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft
Manifest number: 13EF
Signing time: Wed 08 Jan 2025 11:00:52 +0000
Manifest this update: Wed 08 Jan 2025 11:00:52 +0000
Manifest next update: Thu 09 Jan 2025 11:00:52 +0000
Files and hashes: 1: ZYZZaKHY9PN3hlyROvO5r4kNfM4.crl (hash: JtK8px+iMHaRGnk3XvFGcVsw3xP87oMTkkh48LM6Emw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:93:0c:32:35:44:96:a5:1b:6a:96:fb:02:f1:38:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65865968a1d8f4f377865c913af3b9af890d7cce
Validity
Not Before: Jan 8 11:00:52 2025 GMT
Not After : Jan 9 11:00:52 2025 GMT
Subject: CN=ad1a044e83a96d3ef6ae2c35a7ca25806bce0313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:32:41:a2:a3:6b:f4:25:32:3b:b0:00:05:
b3:bf:00:44:33:5f:48:46:09:6a:1e:92:65:fd:27:
20:c5:cf:7c:87:22:19:4c:c3:43:ed:f5:37:1d:40:
b8:b3:04:42:e3:de:15:78:d3:c0:95:9d:16:c5:e2:
74:dc:2d:db:26:28:e1:5d:68:ff:12:ba:76:0e:25:
b5:69:25:15:72:74:eb:2e:18:09:39:04:04:c1:fe:
86:ff:cc:40:b8:fd:58:56:a6:0f:9e:4c:19:58:10:
cc:9d:0a:50:2f:28:2c:4c:87:11:02:81:e9:2f:81:
45:7f:7a:d5:fb:63:60:3c:f9:1b:c6:56:59:ea:ba:
c3:dc:91:3a:f2:7f:d2:aa:a4:c8:3a:f5:5d:ce:63:
34:2e:89:92:4a:45:d9:f7:15:29:d3:db:6e:af:68:
31:64:59:38:8b:95:03:f5:67:d0:41:55:74:65:74:
d7:50:b8:12:bc:7c:73:b0:67:66:1d:23:e2:86:bb:
f8:1b:36:50:46:9b:1a:34:ad:75:80:d1:3f:b8:49:
41:a7:96:75:01:a9:83:33:6e:ee:ea:0f:8f:59:b8:
a1:5e:c4:0c:33:c3:73:10:99:83:ce:85:e8:b5:a3:
65:75:29:ad:59:02:5d:d2:08:f3:bb:f0:38:41:e3:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1A:04:4E:83:A9:6D:3E:F6:AE:2C:35:A7:CA:25:80:6B:CE:03:13
X509v3 Authority Key Identifier:
keyid:65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fa:ce:db:62:73:0e:c1:0c:99:d9:27:bf:85:cf:61:30:fd:
12:81:2e:d5:91:02:15:c5:11:a0:c3:78:70:fd:34:e6:f2:c0:
91:5a:03:f3:9c:34:dd:71:07:7b:94:55:b6:3a:ce:9d:3a:19:
24:3c:7f:bb:ca:59:5e:fb:70:56:51:8a:e6:e4:49:26:8d:58:
8d:f1:f0:ba:8b:73:59:f2:6e:1e:7a:27:28:67:0c:c3:c7:d9:
ec:9d:70:c4:28:c2:c9:64:f5:c0:b1:13:69:7f:89:42:58:1c:
fe:8a:8d:d0:34:39:95:c7:e6:f4:a0:b9:c4:0c:8c:ca:a1:b1:
c8:5a:1f:d1:8b:dc:43:08:c6:de:11:6a:21:db:94:8d:ca:44:
c9:45:aa:0b:7a:29:5a:5a:23:22:69:b0:09:6c:7e:0e:92:c5:
7d:8f:26:63:62:60:0c:11:83:2e:41:a2:3a:31:0f:62:a4:38:
5c:87:59:92:a6:9f:06:71:43:59:4a:73:78:ac:cc:9c:c3:7e:
37:36:bc:3f:8a:a3:f8:79:94:10:44:54:4d:a5:bf:3c:1a:3e:
b7:73:98:c6:4e:b9:66:8c:36:23:03:78:fd:7c:9b:48:6f:c3:
4f:48:24:39:5a:59:8b:6b:33:bc:37:9f:25:1b:13:b0:1e:7b:
7f:a1:89:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:45 2025 by rpki-client