Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.mft
File: ZRaYwM2YN5eRXn15P7bRjEgehMU.mft (raw, json)
Hash identifier: 3qd82LKzyrHZVOfh3z/e+zAVFmfLOhz9RnQRzwihhkM=
Subject key identifier: 16:60:15:6A:F8:19:BA:A0:25:B2:1A:8A:DD:AB:F9:63:D0:95:AB:5F
Authority key identifier: 65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5
Certificate issuer: /CN=651698c0cd983797915e7d793fb6d18c481e84c5
Certificate serial: 018EE5B507C2788971F773E1836A46BD11A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.mft
Manifest number: 0919
Signing time: Tue 16 Apr 2024 07:00:30 +0000
Manifest this update: Tue 16 Apr 2024 07:00:30 +0000
Manifest next update: Wed 17 Apr 2024 07:00:30 +0000
Files and hashes: 1: AthXcPN3d2pXTWejaSWFar_6u9E.roa (hash: 0Jc/ucJOlcBUueOWMouhwaZJ1F+vOoQmrzxg5hVfcpE=)
2: ZRaYwM2YN5eRXn15P7bRjEgehMU.crl (hash: Tg7E1lJjuXyIYu9C+sGQlWLiEQm+wFXRWQU6DPgFVQ8=)
3: dMw58yaEhn0NGjCobsDfFLb4i9o.roa (hash: j1fv3a8QyeQcUVjiOZOGd2GmRNeHlSlxb4kIGx9Zd30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:b5:07:c2:78:89:71:f7:73:e1:83:6a:46:bd:11:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651698c0cd983797915e7d793fb6d18c481e84c5
Validity
Not Before: Apr 16 07:00:30 2024 GMT
Not After : Apr 17 07:00:30 2024 GMT
Subject: CN=1660156af819baa025b21a8addabf963d095ab5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ac:df:50:38:9f:d8:9f:5a:69:38:61:3f:ac:
a8:50:1a:3d:e1:11:ab:c7:96:3f:15:e8:6c:7b:1d:
ca:fb:89:98:09:94:5a:aa:99:f2:30:e8:34:0d:e0:
a0:e9:b1:d2:48:e8:1b:3c:2e:24:bc:ee:60:aa:2f:
f9:05:22:a4:3d:89:48:78:21:c9:0b:76:97:b7:25:
9e:35:0a:3c:80:0e:77:b2:ae:e2:95:cf:9b:6b:b3:
c5:c8:db:d1:4a:9a:dd:ac:40:11:ef:d9:7a:14:70:
f0:c7:6c:91:1e:a4:19:53:22:95:9a:cf:52:a3:d0:
1b:d4:1c:b6:24:44:87:1a:c2:f4:dd:dd:80:e1:ef:
e8:6b:21:40:ef:64:3d:95:5e:ae:c9:26:dd:fd:6e:
6d:70:ec:73:8c:4a:72:0f:c4:c3:5c:58:d4:1f:12:
53:98:82:84:8e:c1:90:f6:94:08:45:71:5f:b1:1f:
ef:1e:9f:89:9f:9d:5b:9a:6d:55:74:bb:79:30:4f:
5e:c4:b9:4c:63:ec:cd:1e:03:94:8f:79:18:70:2e:
3b:3a:cf:79:d7:41:bf:80:e4:dc:7e:fb:21:58:ee:
dd:17:7a:72:77:6f:e7:64:1b:46:05:48:4c:0b:dd:
7a:28:eb:68:95:a4:69:41:5b:89:5d:3f:69:9a:e8:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:15:6A:F8:19:BA:A0:25:B2:1A:8A:DD:AB:F9:63:D0:95:AB:5F
X509v3 Authority Key Identifier:
keyid:65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:73:96:c5:8a:c5:fc:ac:6a:ad:a1:e8:bd:05:cc:b6:98:a9:
42:45:75:76:5f:04:da:81:01:5a:dc:84:16:e4:30:fa:ee:50:
d9:3a:fd:50:27:44:0a:98:6c:00:52:d0:66:45:a4:6a:4b:15:
26:a2:d9:0d:d5:80:93:4a:57:a1:9d:db:4e:cc:9a:79:de:7d:
98:f1:3b:50:97:b0:ea:59:99:3a:c0:e0:da:87:51:04:92:4e:
c6:87:7b:1d:8b:4b:ed:da:7b:1a:70:06:9e:d2:ab:7a:80:5d:
ad:e5:9a:75:f1:55:b9:aa:db:38:95:d2:fb:8e:0e:a7:72:7c:
5d:39:c1:5e:f7:61:c8:c1:f2:e6:a2:ca:67:77:26:36:8a:f3:
fb:26:39:f4:2c:bb:e7:f1:dd:d3:58:28:41:60:67:af:c1:14:
ed:f0:5b:cd:5d:3a:9a:8a:64:77:0a:17:fc:00:e9:9c:18:f3:
34:f2:19:3b:33:a7:66:92:a9:5a:bb:aa:78:62:fc:e7:d4:b6:
ae:8e:a7:1e:0b:bf:32:6a:b6:7e:5a:3b:49:0e:df:30:f7:5e:
30:a6:aa:38:9a:95:2b:ef:05:68:29:e7:87:08:10:40:ef:71:
8b:78:55:7d:73:36:b6:96:66:50:f0:7a:46:b8:f8:d8:ca:fc:
ac:0f:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:47 2025 by rpki-client