Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: sOM0lVmtTZnbe4JXlE7te3Y8Q7p0+6NebkywoVZdROE=
Subject key identifier: 5C:68:2B:56:36:32:33:2C:6F:AB:40:5A:86:05:6E:B9:91:1E:77:BE
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 01962F74DF9156F71A96788378CB53697F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 08E6
Signing time: Sun 13 Apr 2025 14:01:50 +0000
Manifest this update: Sun 13 Apr 2025 14:01:50 +0000
Manifest next update: Mon 14 Apr 2025 14:01:50 +0000
Files and hashes: 1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: xmawVs+Kgc3I03gpmYiK4QizVFwtKULfnQYEnpIbVP8=)
2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:df:91:56:f7:1a:96:78:83:78:cb:53:69:7f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Apr 13 14:01:50 2025 GMT
Not After : Apr 14 14:01:50 2025 GMT
Subject: CN=5c682b563632332c6fab405a86056eb9911e77be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:0b:ca:20:65:e5:75:86:38:05:39:68:8b:
60:32:b1:1a:a6:bf:25:dd:3f:26:32:37:3c:1a:dc:
c9:c4:e1:47:6c:14:70:85:81:78:06:14:cc:8a:87:
16:1c:30:b9:90:75:35:9d:6d:86:07:74:d3:63:ca:
c2:49:eb:c3:8b:f0:6f:9d:e3:29:66:4f:fb:c0:6d:
35:ce:0e:0f:83:6f:67:88:d8:11:62:7a:78:fd:0d:
3f:02:31:5a:d1:d6:37:63:6f:c0:d3:15:46:3b:2c:
95:27:91:e3:56:6e:27:ce:1b:c5:4f:21:75:1e:9f:
1e:6e:61:da:f4:eb:a5:d2:a1:a5:12:e1:63:7e:1b:
3a:a4:b7:ad:1c:aa:82:76:58:2d:e3:95:26:fb:d9:
04:98:84:1a:6c:fe:f1:13:c2:31:af:4a:39:f1:c0:
98:21:e0:8c:5a:d3:8d:57:71:48:5a:46:78:a2:15:
18:e0:e3:a0:13:82:c3:a2:6a:37:bc:b9:19:c5:2c:
1c:d2:76:33:da:24:ad:01:e2:9b:e6:a9:a6:a9:12:
6a:e5:32:04:a1:52:aa:f4:10:32:24:09:66:e6:25:
4c:c7:64:f0:59:de:cb:c3:f7:be:10:c4:a7:ec:47:
ec:38:22:a6:5e:a3:2b:f0:86:ac:ee:36:82:1d:ee:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:2B:56:36:32:33:2C:6F:AB:40:5A:86:05:6E:B9:91:1E:77:BE
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5d:17:3d:43:79:60:27:34:a4:18:3d:01:37:a6:33:e6:0b:
e1:c2:f3:7c:7d:40:56:35:95:1f:57:3b:f5:e4:98:3b:be:7a:
61:05:c9:9b:9e:6d:d9:25:20:2e:2e:cc:45:cb:b9:97:fc:e6:
74:da:f2:3c:af:82:e4:19:27:2d:41:72:13:d8:50:ea:1d:3b:
56:a5:ff:5e:15:4c:0b:de:57:5a:6a:91:1a:e9:9d:ef:a9:dd:
fd:8f:10:70:26:a7:96:6b:f1:ea:c0:8a:28:df:5a:18:23:23:
f0:ac:d9:49:a7:e0:51:13:26:07:de:f9:2d:50:bc:54:51:e7:
89:ad:19:76:59:22:15:d5:d1:95:34:e2:5a:99:de:78:c4:4e:
8c:14:9b:70:24:1d:cd:9e:b0:4b:c5:c8:23:48:ef:56:4b:f6:
89:5e:bd:88:f9:cd:5b:21:4a:59:f6:46:d7:d4:cf:c9:72:e8:
15:ef:07:85:2b:59:65:92:81:80:51:85:e2:51:34:4d:1e:99:
a4:2c:f5:94:aa:e1:eb:63:00:0f:cf:1c:25:0b:67:a1:b0:e9:
ba:13:73:0c:71:d6:fb:88:7e:ff:51:45:07:fd:7e:ae:db:c3:
6f:a5:67:a7:fc:e0:33:01:59:96:af:29:b9:27:cc:49:ae:fe:
59:41:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net