Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: BD2CIz9d+6UC8V19kUIhGOh/+83ZaBiQI7v0+poYNic=
Subject key identifier: 40:59:64:6B:DC:7F:81:CD:63:65:9B:3E:3D:CC:70:84:6C:E2:CC:1E
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 0194BBCDCF1A1E017C7E81D3C35EC1D8794D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: DB
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=)
2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: iMquKuVSFs84fzXdi3tqEZ/Tl9Gm/C2wNvBJRzS6Ixw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cf:1a:1e:01:7c:7e:81:d3:c3:5e:c1:d8:79:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=4059646bdc7f81cd63659b3e3dcc70846ce2cc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:f9:58:1d:b8:e3:d8:7a:f7:ec:00:39:cb:
9b:75:4f:22:26:26:c1:b5:ce:a2:d5:01:bf:d7:73:
1c:1a:d9:5f:c0:b8:08:5d:5a:80:8b:41:c8:e1:8e:
32:54:38:2f:ad:1f:ff:7c:a2:a4:7e:e2:b8:8d:6e:
23:e0:6f:98:45:1b:8d:3d:3d:53:95:ee:f3:44:7f:
26:29:b9:91:6d:b3:bb:bd:24:d0:cb:14:d6:22:c3:
63:af:c7:bb:5a:c1:3f:37:01:0e:4c:d0:15:35:2e:
30:1d:79:d5:1d:88:a7:41:5d:bc:35:a0:8d:97:87:
c4:2c:8c:08:9a:80:cc:8e:f3:06:29:83:db:41:0e:
22:42:83:79:e7:75:7d:a8:fe:b3:63:79:91:67:c2:
04:ac:f6:3b:61:1a:20:7a:88:e7:17:d3:ab:5f:24:
ae:18:07:d7:d1:b6:c6:ee:10:be:55:10:3c:3f:95:
29:18:9a:5c:5c:5b:6d:67:bb:4a:0e:d5:39:f2:7c:
23:45:3b:86:ce:e4:67:78:56:ac:ab:a0:0d:b1:b0:
ae:3f:02:a7:ee:88:b3:27:e3:2c:73:98:f8:d8:f2:
6e:61:40:6e:3c:18:2d:d3:33:00:71:3c:b5:e3:e4:
ec:5d:a9:6e:a8:e0:5e:f7:9a:99:84:34:58:85:0e:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:59:64:6B:DC:7F:81:CD:63:65:9B:3E:3D:CC:70:84:6C:E2:CC:1E
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a3:63:83:cb:b9:b1:63:a3:43:c5:6d:b9:0e:8c:a6:7e:0c:
2c:08:1f:e9:81:54:7b:6e:dd:13:61:05:ea:42:e5:f0:8f:13:
0b:33:7f:e7:4f:14:f6:85:95:5b:1c:44:fd:f1:7b:2b:dc:45:
4b:06:78:18:98:f1:17:db:22:d2:d5:08:77:77:6d:90:89:33:
62:cf:e4:a7:e6:1c:5b:4a:10:fa:3f:fe:39:8d:cb:a7:93:32:
8d:d2:9a:fe:e7:1e:74:c8:c8:81:6c:89:01:c3:45:84:ba:38:
00:2b:91:cb:89:c3:5f:0b:a3:aa:f0:f9:e9:2f:31:81:df:c6:
8f:c3:c1:9e:fa:6f:c1:32:49:c1:b9:04:92:77:29:a4:1e:9c:
3b:22:97:7a:d0:b5:d9:f6:b5:3a:be:33:8e:00:2e:f8:d4:1c:
ee:c6:9e:85:89:0e:ca:2a:9b:75:a4:f9:9c:e1:04:27:dc:a7:
ee:c1:8c:2c:94:e0:21:75:e3:3b:69:e4:f2:a4:01:c2:49:54:
e8:a1:59:20:60:87:b8:f3:41:9d:a6:42:22:a0:1d:e6:46:87:
c8:ff:ec:48:36:97:a2:a7:54:fd:5c:fe:e0:24:9e:3c:e4:fb:
e8:32:b7:bc:d2:fb:b0:88:f0:57:2b:ba:76:e0:c3:f7:86:44:
cc:78:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:06:03 2025 by rpki-client