Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: FSZsuGxkcHD1n13qBeRW11xNSvGQRBRega+7QTvRPEs=
Subject key identifier: D9:A3:2F:3D:DE:93:BE:D1:1B:19:15:07:B9:6E:69:1A:6D:A4:19:79
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 0194BC3C15EB65AC51F3181BC983A2A424AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: sa2Uze8MSgYdJotE9PYkjFs8JejharnyRt7H2Vv029I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:15:eb:65:ac:51:f3:18:1b:c9:83:a2:a4:24:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=d9a32f3dde93bed11b191507b96e691a6da41979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:f4:b2:38:83:7b:f2:e9:f8:43:56:f9:1e:
58:a7:6f:c8:b5:11:0e:14:9c:ac:8a:25:55:88:92:
ae:a0:26:54:78:38:6d:e8:bb:aa:f3:3e:c7:31:f4:
a6:b6:f6:72:cc:8a:e3:77:55:65:67:c0:2e:05:e4:
76:eb:9b:05:a7:be:b0:de:bd:0f:d0:02:fd:ae:52:
28:6d:bc:3f:bb:82:15:58:47:97:e5:8d:c0:15:b1:
22:a1:5c:d6:1b:ee:a7:2f:6f:32:43:20:ea:05:a7:
d9:d2:0c:6e:10:96:ec:8b:80:fd:f4:24:ec:da:b4:
22:9c:76:7f:fb:5a:6d:a1:01:5c:0e:66:26:ae:9d:
d5:07:3b:3a:39:cd:a9:43:1b:fa:61:2b:de:b1:00:
89:c5:a7:7e:64:90:1a:cb:29:a7:fc:f4:eb:de:14:
aa:62:d9:b0:75:09:35:bb:f3:75:be:3b:52:54:ee:
12:be:b3:0d:8e:f7:22:a9:ea:0c:2c:f2:42:e7:a0:
92:a2:b4:5d:19:1d:c5:79:64:8e:0a:47:ac:3a:76:
d9:2c:25:78:4e:d1:97:71:44:e7:42:41:80:83:25:
72:13:1d:90:d8:20:95:14:46:57:34:8e:10:98:1d:
1d:1e:a9:46:c0:3f:a8:57:54:a2:5e:0b:e2:df:41:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A3:2F:3D:DE:93:BE:D1:1B:19:15:07:B9:6E:69:1A:6D:A4:19:79
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3c:21:39:a8:1a:24:63:79:b9:34:12:2d:d2:13:6b:31:d4:
8a:f4:24:f4:b3:fc:c1:1f:79:a9:5a:6a:be:f8:cf:ca:23:f3:
74:73:a6:dc:32:81:25:c8:44:83:85:13:32:dd:7b:bf:5e:09:
99:6f:13:83:22:63:95:02:a1:f4:7d:91:93:55:9c:e9:d9:02:
65:3d:37:9d:ad:a8:2b:f3:f0:d9:b8:e0:a9:b0:7b:88:1a:b7:
47:47:49:c9:60:b2:38:5f:81:73:f2:43:a8:0b:c6:11:d4:2c:
2a:78:27:75:28:fa:15:e0:8f:20:05:fe:bc:6e:7f:78:79:e9:
68:d4:8b:c3:4d:ba:50:1f:80:ac:2c:bd:a1:71:eb:bf:41:09:
f3:7b:6f:a8:6d:d0:14:1a:dd:5e:1c:63:84:03:b5:b8:91:b2:
54:22:3a:23:9a:82:a1:07:f7:4f:bb:0c:01:0b:ed:88:ea:ab:
cc:77:b0:5e:30:71:c0:42:10:a6:73:2c:03:3a:55:b8:8b:fb:
26:5a:a5:3c:1a:08:4f:a5:b5:04:fc:70:5e:be:f1:f7:cf:bb:
bf:e1:d8:10:c3:ea:0d:f6:2d:19:d4:5a:a2:4c:da:af:d4:d9:
2b:bd:a3:4d:54:c2:b5:e9:07:35:50:ab:dc:7d:19:4b:11:ea:
9a:fa:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:54 2025 by rpki-client