Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
File: zXPyONls9npe_Aw3R2_TBgKa9VI.mft (raw, json)
Hash identifier: v5v24nbEFgeoIPVEFHhal/fBc0xFUL57q5fbMMCtv8M=
Subject key identifier: CE:C2:81:64:BC:85:00:BC:FD:F7:E7:5F:94:D2:1B:3A:95:66:E8:FE
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 0194BD1799AA5EDD8868A39FBF568206ECF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: XReUfUCxwWQCEZZLX8meeDSJnWA.roa (hash: RZiWRDg+Pjcy7sZ6mPvtsgj18CRvgPEttJrCsz0Vu30=)
2: kIyvr2dCrL1Lhq1OpmJM_tA-O9A.roa (hash: ZbzSM0uFkPduXfw6dGmuL2iFxgukpkp+E6XskFGzTX4=)
3: zXPyONls9npe_Aw3R2_TBgKa9VI.crl (hash: t3RuSq4xniBRB/rUmJnAmfszUwCAXP2uJi5NMfsLoPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:99:aa:5e:dd:88:68:a3:9f:bf:56:82:06:ec:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=cec28164bc8500bcfdf7e75f94d21b3a9566e8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:e2:f0:8f:a3:01:d0:4d:6a:9c:bc:5b:7c:
79:62:55:c6:28:ef:64:1d:4c:c0:d2:75:94:6b:1c:
8f:b2:6c:37:26:78:0e:b2:c5:7b:bf:a3:ff:f3:46:
ee:a9:bc:ef:11:18:49:3c:63:41:8a:57:2f:48:d5:
1a:74:7f:9d:36:61:75:24:c7:ed:37:53:3d:c6:e4:
56:9d:77:57:15:45:3f:5c:13:ed:70:30:92:6e:b6:
2e:22:30:81:6b:5d:05:c9:76:17:85:16:b0:e7:b4:
5a:81:6c:17:3b:a9:60:3f:ea:4a:4d:92:22:a8:6e:
46:9a:a5:75:82:9b:4b:61:57:48:cb:74:48:1c:3d:
bf:17:1c:97:76:39:04:94:46:f3:d2:9d:97:be:fa:
9e:0a:af:12:18:c4:6f:91:8c:f4:e6:05:f5:4c:c9:
63:e9:b5:7f:ac:65:52:cf:86:41:8b:22:15:e5:8c:
98:63:93:b4:13:4e:c3:af:8d:36:74:c9:95:7e:7f:
a1:b8:84:53:25:e1:9a:08:98:68:09:59:2b:6c:27:
df:c3:a0:70:16:6c:ee:0d:5a:ca:7d:ea:0a:4a:e4:
4b:9a:c8:69:11:23:93:de:5e:b4:31:ae:93:8a:6d:
e2:64:c5:57:7a:e5:8f:be:e2:19:98:e6:0d:bb:70:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:81:64:BC:85:00:BC:FD:F7:E7:5F:94:D2:1B:3A:95:66:E8:FE
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:af:ab:76:31:24:aa:03:f6:af:d8:88:d0:73:a5:68:b6:e7:
a1:f5:f2:65:43:20:16:12:c2:a3:ad:ad:e1:e6:5f:4e:a1:63:
93:fd:a4:1d:e7:cd:51:c3:ef:a6:b5:bb:8e:69:32:c9:24:36:
89:78:1c:70:d5:8b:27:f4:44:d5:55:79:dd:26:ab:23:45:d3:
56:10:6c:55:a2:1b:b7:91:70:73:d4:92:e5:a9:a2:80:15:ee:
e5:aa:f8:91:d4:8a:57:59:7a:13:2f:b7:86:3a:1a:ce:30:d5:
c6:71:e3:f8:16:58:d4:59:70:8d:5f:b1:30:0f:9c:21:f1:a0:
17:0c:00:e5:4f:f4:97:05:23:03:61:c7:51:59:1b:78:e3:33:
75:37:15:b0:c3:9d:27:e3:fc:a4:9e:3d:bb:11:04:58:04:d6:
fd:1d:c1:55:9d:58:fe:56:93:7e:5e:4c:29:37:6e:da:ac:6e:
55:00:8d:8b:4c:67:56:b5:be:a9:5d:c2:16:ac:4d:6d:a5:96:
20:82:34:61:f7:04:77:35:62:2d:95:88:08:ef:d3:52:a0:13:
69:80:51:56:0e:3e:4b:e5:da:dc:d5:69:2d:a8:80:a2:4b:fd:
b9:77:32:77:41:fd:5f:9f:a4:69:cf:c8:1a:54:a6:0d:ce:08:
2f:30:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:17 2025 by rpki-client