Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier: HXvo/TOI50gacbLstZx3l4D3mUL0aC45hmYK7yCZ0O8=
Subject key identifier: EB:1A:27:DE:7D:37:93:13:54:EF:07:9B:CF:82:B0:01:A9:5B:F8:4D
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial: 0194BC04DAFDCE25D01891583977F6EB3E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number: 04AA
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=)
2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: tKJx4eVaz9DoC5wbbDkC8Eu5bae45pmeiwi6STAPPmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:da:fd:ce:25:d0:18:91:58:39:77:f6:eb:3e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=eb1a27de7d37931354ef079bcf82b001a95bf84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:db:4d:87:20:73:09:3c:14:2d:90:15:d2:
2c:61:87:07:d8:99:08:3c:38:88:51:e1:31:cf:5b:
7c:f4:d5:bc:58:1f:c5:29:19:3d:af:ee:ed:e6:5f:
15:a2:80:70:f4:51:e4:22:c8:f1:4a:a2:92:5f:4a:
92:99:1f:45:e7:9d:1f:ed:a2:e3:f3:47:d2:81:e6:
a7:56:2f:07:28:3f:44:24:c5:bc:f3:3d:88:e8:93:
e0:d9:7a:f0:a0:83:12:2c:f3:6d:7d:fe:b7:fb:d7:
74:6a:76:81:e3:1f:69:00:a5:a2:2e:f5:ca:65:ee:
38:76:a1:aa:39:47:81:9f:36:de:cb:b6:77:c0:dd:
24:40:2f:09:0b:12:8e:36:f3:12:b9:c5:95:83:6d:
27:47:39:0b:f6:50:4d:86:68:1d:6b:98:e0:8a:1b:
55:35:0f:d0:3d:ff:16:2e:e5:bd:2d:14:63:e5:f2:
54:e3:6a:9a:e3:e1:be:ff:16:dd:1b:f0:e4:3a:ad:
b3:55:cd:45:96:cf:f6:8c:6f:31:c1:a8:ac:ce:95:
f4:b4:63:cf:32:51:46:c4:93:aa:56:1a:f2:7c:fc:
ee:0e:bf:9f:68:99:64:07:8d:fa:61:ce:f5:1e:1b:
8b:c8:50:c2:74:cf:7a:83:b8:19:68:cd:bb:09:73:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:27:DE:7D:37:93:13:54:EF:07:9B:CF:82:B0:01:A9:5B:F8:4D
X509v3 Authority Key Identifier:
keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:8f:bf:5d:8b:51:8d:ec:23:49:5d:a7:63:ed:64:88:b4:
93:af:e2:34:68:30:43:72:c3:a1:c3:fc:6f:8c:39:09:12:10:
c5:c4:dd:c7:45:79:4b:26:a1:f2:fa:b2:10:2d:5d:81:67:84:
eb:80:55:e1:0e:aa:80:f4:64:c1:b4:ec:cf:55:87:2e:8b:2d:
86:40:03:5f:76:da:86:ff:99:6c:27:19:5c:30:da:58:2e:ef:
46:07:25:71:f2:8c:f1:db:ca:28:a0:47:9e:56:36:4b:9c:e7:
5f:02:bd:0a:80:cb:b5:88:12:15:fb:fe:11:b4:92:12:48:8d:
9d:6a:04:4e:8b:68:4b:2a:9d:11:bb:9b:fd:28:36:05:6a:4e:
f3:17:5d:43:dc:47:58:e9:94:9f:ce:86:84:11:f3:3e:58:49:
16:52:dc:73:3e:8d:d4:33:83:e7:e7:ca:30:df:00:2c:4b:08:
42:9f:a8:78:17:b7:3b:7f:5c:64:89:a6:ef:94:3f:42:01:f7:
87:cb:01:b6:4a:95:10:c1:33:cb:55:e0:91:6e:b1:e1:f7:a2:
f0:a7:33:dd:19:65:94:51:54:cf:4c:b6:0c:1c:d5:c9:35:50:
7e:12:51:00:d6:3a:26:e9:44:f9:9e:fe:26:fa:cb:e0:29:83:
61:e7:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:59 2025 by rpki-client