Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
File: ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft (raw, json)
Hash identifier: w13b8KrE3VVq+haoo/smmiV+xkYXSE6XQc/jb4LLkNw=
Subject key identifier: B8:AF:B1:10:36:23:CD:A4:34:55:87:D0:5E:AA:89:9D:36:3A:C8:36
Authority key identifier: 64:11:5A:CD:7C:7D:A0:B7:C0:AB:98:FC:79:C1:9B:74:B5:54:4D:BB
Certificate issuer: /CN=64115acd7c7da0b7c0ab98fc79c19b74b5544dbb
Certificate serial: 019413CB4AE1F259143D45D1AC1C2CAAEF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
Manifest number: 0CA0
Signing time: Sun 29 Dec 2024 19:01:17 +0000
Manifest this update: Sun 29 Dec 2024 19:01:17 +0000
Manifest next update: Mon 30 Dec 2024 19:01:17 +0000
Files and hashes: 1: ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl (hash: gw42YGhQaU5oeqpNqB4eyyUmBhiTvoxsDlxI8tNA1ZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:13:cb:4a:e1:f2:59:14:3d:45:d1:ac:1c:2c:aa:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64115acd7c7da0b7c0ab98fc79c19b74b5544dbb
Validity
Not Before: Dec 29 19:01:17 2024 GMT
Not After : Dec 30 19:01:17 2024 GMT
Subject: CN=b8afb1103623cda4345587d05eaa899d363ac836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:be:19:55:37:43:be:70:c8:e8:a9:ca:d2:
ce:51:bb:8e:4c:29:2c:4e:32:17:b2:76:80:1a:47:
4c:f1:80:ad:52:08:c9:9d:72:60:4e:7a:e4:83:90:
97:46:75:4f:6e:64:72:6b:b9:61:db:42:6c:01:77:
85:c1:d6:a5:63:2f:eb:4d:8a:ae:83:56:76:7f:46:
35:60:64:53:03:4e:1b:3d:0b:e5:d2:47:7a:bb:03:
d2:dc:e1:82:96:fb:d9:c5:2a:da:d7:45:6f:73:d7:
b1:91:5a:8d:7b:50:90:98:ab:23:07:23:2d:64:89:
83:a9:21:69:ef:4d:2a:b9:e4:dc:7d:ee:95:8d:76:
37:6f:cf:df:e2:1a:ec:c6:34:1f:4a:b0:a7:8a:4f:
a8:df:96:0e:2e:86:c6:40:14:da:53:98:11:9b:73:
1a:20:00:b1:3a:92:c0:22:99:b9:41:b0:83:fa:86:
df:bd:d0:6c:12:09:63:9c:74:69:c2:f7:22:a4:e0:
6f:53:7f:5d:44:e6:e0:14:ab:47:fc:f9:0f:ae:e9:
04:7e:39:ec:cd:c9:4d:4f:2e:b8:f4:e7:c8:cb:dd:
2b:a3:78:d3:32:90:11:92:8d:fb:f3:90:43:1e:5e:
89:43:a1:73:57:ee:f1:13:92:88:8a:66:d6:ac:54:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AF:B1:10:36:23:CD:A4:34:55:87:D0:5E:AA:89:9D:36:3A:C8:36
X509v3 Authority Key Identifier:
keyid:64:11:5A:CD:7C:7D:A0:B7:C0:AB:98:FC:79:C1:9B:74:B5:54:4D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:32:25:52:2e:22:ef:23:04:61:7b:3b:53:49:89:4d:36:9d:
c1:85:ec:da:30:4e:59:9a:10:30:8a:fd:27:21:bc:99:dc:d3:
54:e7:2a:66:c8:8c:ee:22:f5:32:03:a0:12:27:0f:d2:fa:01:
af:c3:53:96:52:cf:ca:a3:04:03:2e:86:0d:b3:75:94:75:a1:
01:75:ba:d9:c2:17:f2:07:8e:ef:30:c1:c1:45:3b:ec:41:4f:
63:f8:f7:d8:bf:a5:b1:c7:16:70:91:ab:78:ec:dd:0e:15:2c:
be:17:ec:0e:b2:33:1e:4b:b0:08:a5:bd:53:8b:ee:4a:37:ac:
51:7a:ba:f3:7a:ab:14:f1:e4:b5:77:30:fe:01:94:0f:3d:81:
36:31:9c:4a:6b:bf:e5:63:4f:53:d4:9c:56:15:0e:32:65:ee:
25:97:1d:fb:73:9b:66:8d:79:8e:82:04:2f:ca:79:f8:d0:1a:
74:5e:cd:4f:0e:bd:e9:c8:f3:b2:44:d6:46:88:7d:cd:08:99:
97:95:bf:6b:12:42:f1:04:56:c4:20:fb:73:d7:45:06:72:fd:
4c:19:b0:26:be:fe:02:ea:f0:05:95:96:c8:6a:25:e3:5d:4c:
f2:99:31:2f:82:dc:1b:33:8a:9e:3e:cb:fe:ab:09:50:75:ca:
16:72:7b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:31:23 2025 by rpki-client