Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json)
Hash identifier: oUCvAUO7HT9u3iTx0q7TqV5aE5r3iBrpaF6tBtm4jvY=
Subject key identifier: 2F:C6:7D:E3:2A:67:E8:34:A6:7B:76:EE:CE:AD:5E:01:4F:20:EE:65
Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f
Certificate serial: 01962ECF87AB585E84C3D3439FB68B4BD587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 11:01:14 +0000
Manifest this update: Sun 13 Apr 2025 11:01:14 +0000
Manifest next update: Mon 14 Apr 2025 11:01:14 +0000
Files and hashes: 1: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: ZFbWijM1y2xENk4eCW9u4Lv7zq8KsCdvqAadHfa7xNo=)
2: tClIzpB8AXYvJfeCisA8HxpOd74.roa (hash: sXbqNinLjTETFbK42QOaktsLVCyYHDlotZvPtCRaxBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:87:ab:58:5e:84:c3:d3:43:9f:b6:8b:4b:d5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f
Validity
Not Before: Apr 13 11:01:14 2025 GMT
Not After : Apr 14 11:01:14 2025 GMT
Subject: CN=2fc67de32a67e834a67b76eecead5e014f20ee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:09:b5:22:f9:37:6e:42:a0:d3:69:7e:4a:
b0:1f:e8:9d:db:b6:9a:0d:51:51:e5:49:f9:23:6e:
cd:10:6e:6a:21:43:78:ae:fc:81:2f:79:3b:35:4d:
8e:5d:3b:85:d3:e2:e0:85:00:b3:1d:b8:0d:89:21:
8d:9e:a4:07:90:ab:16:46:11:01:99:59:2b:e0:2b:
54:36:19:a2:51:9e:04:13:71:dd:12:c0:9c:e2:9c:
da:28:61:81:67:4c:2e:80:d3:94:91:07:24:03:d6:
fb:03:8e:41:d2:47:cd:d3:7d:79:31:59:04:75:35:
44:73:d8:c6:7e:38:eb:ce:19:ce:83:55:06:97:82:
da:b3:0f:16:14:61:ed:33:5f:00:e6:ef:ae:06:4a:
d3:c6:be:9f:2b:16:b9:28:cb:22:db:d4:8c:53:a9:
f0:ff:53:0f:53:90:a9:cd:a5:f1:a6:b7:89:9e:10:
24:41:72:56:22:81:68:2a:9c:2a:ad:c4:45:d0:da:
5b:6d:e3:40:4f:0e:3d:c3:4f:04:a3:f3:70:35:41:
9d:c9:e6:c7:2d:3d:a7:42:6f:38:05:0c:70:a7:5c:
f3:7e:36:5b:83:eb:f2:07:e1:b2:4d:4a:4a:c6:52:
e5:2a:61:a4:0c:40:e3:5e:54:86:a4:8a:5a:77:01:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:7D:E3:2A:67:E8:34:A6:7B:76:EE:CE:AD:5E:01:4F:20:EE:65
X509v3 Authority Key Identifier:
keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:66:86:98:2a:3d:53:af:ce:5a:17:24:07:ce:e9:7b:ce:2b:
80:a6:d7:a5:cf:51:89:8e:ec:8a:0d:0e:02:62:c5:25:65:ff:
c7:47:87:42:d2:90:07:d4:54:de:5b:cf:32:d3:97:52:0a:b4:
42:aa:e1:6d:d8:8e:9b:49:92:64:29:fc:23:9b:a5:84:c8:56:
11:87:ba:66:40:58:a3:23:ef:a0:60:d5:99:07:42:94:8e:a2:
88:ed:7a:66:98:c8:76:61:09:53:63:07:fa:7b:93:a2:fb:c9:
46:e4:43:ea:bc:00:83:5a:28:c6:07:f2:b0:5c:d0:be:06:fb:
a3:13:55:f3:62:66:e6:c4:5a:a9:f7:6e:47:24:51:a1:8d:71:
93:05:9d:4f:4f:3c:f8:00:14:e2:26:60:23:20:5d:26:08:e9:
dd:6d:4e:2e:63:d9:03:32:9c:bb:f3:9d:49:f1:d3:42:0e:72:
7a:75:a8:eb:30:92:58:49:81:da:a1:45:91:ed:d3:8f:cf:6b:
cf:58:5e:b5:9c:db:9e:7b:de:a8:bb:0c:30:9b:f8:78:a2:7e:
bf:ae:2a:be:80:db:ea:55:b1:47:19:5d:a9:a3:07:9a:9d:38:
0d:3b:ea:37:8c:6e:06:90:8f:98:26:61:d5:77:86:d3:10:6e:
20:02:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net