Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
File: zPKS2CwKIlLdMoWihzMfRFDtNZo.mft (raw, json)
Hash identifier: Z3if1eaGessW9vmkL+XNjHCqs0Qo7Fday/CAzNtKFNY=
Subject key identifier: 86:D3:F3:E2:5E:93:AA:03:4A:90:04:D8:57:86:EA:41:33:D5:76:FD
Authority key identifier: CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
Certificate issuer: /CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Certificate serial: 019547EC674CDEAE1EDC256EDCB000D4E327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
Manifest number: 084D
Signing time: Thu 27 Feb 2025 15:00:29 +0000
Manifest this update: Thu 27 Feb 2025 15:00:29 +0000
Manifest next update: Fri 28 Feb 2025 15:00:29 +0000
Files and hashes: 1: CkBOc7z4kdZJGb4-90X6hX6L7jo.roa (hash: 2s0FvcQyY/vg4fHm2yrRgYb/gxmRARkKeZ3RrkEOVnA=)
2: zPKS2CwKIlLdMoWihzMfRFDtNZo.crl (hash: KXmCW/fi7nVqiJFr6BcZBni8OcrUF4JOQxFKZxxq1eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:ec:67:4c:de:ae:1e:dc:25:6e:dc:b0:00:d4:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Validity
Not Before: Feb 27 15:00:29 2025 GMT
Not After : Feb 28 15:00:29 2025 GMT
Subject: CN=86d3f3e25e93aa034a9004d85786ea4133d576fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:20:13:48:1c:b2:85:37:2f:48:96:a9:61:
6b:92:92:27:c6:3a:6e:f8:db:67:ed:7f:73:ab:70:
a6:1a:37:d0:b0:e3:f1:68:64:df:a4:eb:c9:ae:f0:
3b:9e:30:f3:de:5a:d9:d6:b9:74:c7:18:af:a3:f8:
de:09:15:ff:a6:89:00:8c:6d:d9:4f:60:2c:4c:e4:
6a:51:57:98:94:54:ff:c5:34:08:ec:7f:e0:05:6c:
be:93:1c:95:e7:df:92:3f:06:cb:54:72:c0:59:c8:
32:6d:7c:84:86:c5:22:31:6d:4f:15:46:9b:ad:c9:
71:6f:82:d0:b0:74:b6:2c:fb:84:48:e9:e4:ca:7c:
2e:1e:f7:98:bf:26:4c:16:12:fd:b6:79:fa:7e:ab:
2e:18:85:d8:3d:16:31:0d:40:f6:c4:d0:95:10:38:
24:0d:9f:0d:ba:91:e3:bd:23:d3:e6:00:2b:16:2e:
89:f4:de:af:a9:17:5c:9d:41:b3:f5:3a:2f:c4:55:
c5:00:c2:ef:69:d5:2c:0d:e1:88:f9:30:c7:06:52:
60:82:85:c7:57:f8:31:65:c4:d2:62:e3:ea:7c:0c:
8a:bd:e6:1a:b6:18:ef:e6:a0:c1:71:c2:19:af:e2:
7c:6b:3f:93:24:6a:60:fe:55:88:f0:30:8b:6d:34:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D3:F3:E2:5E:93:AA:03:4A:90:04:D8:57:86:EA:41:33:D5:76:FD
X509v3 Authority Key Identifier:
keyid:CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2c:8d:59:13:e1:67:e9:9e:57:62:5f:2d:8e:e3:5c:60:a5:
8b:c4:8a:76:2a:d5:63:5f:09:c1:86:51:9a:91:ac:b7:33:11:
c5:9c:d1:9c:01:18:22:8e:b4:16:0f:0d:78:43:71:ce:5b:24:
f7:6d:eb:16:a6:64:3a:1e:86:41:a8:68:c7:24:78:aa:bc:b8:
3b:e2:20:c3:66:89:a7:3d:a5:31:80:a4:42:e9:d0:e9:d9:1d:
17:64:05:a5:8d:67:cf:9d:8f:4b:13:66:db:66:c6:9e:bc:31:
c0:42:c4:d5:4d:dd:f6:83:13:ad:5c:a7:68:42:1b:ae:52:d2:
03:c1:76:ce:e3:11:f7:79:54:e2:c2:b4:ba:f6:ca:01:8a:26:
7f:fa:75:a2:38:6e:4f:e3:14:50:3f:ad:cf:46:0a:00:b3:dd:
ab:57:f8:78:ec:ee:f0:f8:d4:ef:88:56:9c:5a:1f:23:6b:c4:
bb:09:29:b8:64:e7:00:84:dd:77:03:26:24:8f:f9:f0:cd:b5:
09:23:50:09:31:73:48:cd:75:2f:46:19:55:84:13:d9:d8:1d:
23:3e:92:3e:f1:8e:aa:59:8d:d0:39:62:d1:72:86:2b:9e:75:
44:6f:fe:69:36:c5:fa:5c:48:67:ed:d8:23:72:92:23:65:7a:
ac:f3:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:29 2025 by rpki-client on console.sobornost.net