Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: ChytWECBpPIm+umT2lBECK2cqY4fpbR9FQC5IfZb5qI=
Subject key identifier: 93:48:B9:32:71:1E:71:7E:9E:BF:53:51:9D:73:3B:E5:DB:39:17:B6
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 0194BCA96B27BFC617CAF5916A9D144CC865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 0EA2
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: +ljwQQbxh/qvr4AQLRIekPU7udPuQBYRzfroRiLjgqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6b:27:bf:c6:17:ca:f5:91:6a:9d:14:4c:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=9348b932711e717e9ebf53519d733be5db3917b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:66:2c:88:15:4c:75:1c:08:79:b7:dc:19:
60:dd:17:a3:b7:b5:c8:57:9a:6b:26:d5:ed:4c:79:
c2:26:fd:fe:a2:ff:22:03:9d:51:fe:8f:1a:b4:65:
69:bf:1f:13:42:b9:9e:f5:08:d3:a6:1b:6d:0d:fa:
65:f6:d1:73:ae:53:e8:bf:0e:b8:dc:be:06:c6:01:
3d:b2:1e:d7:40:e9:36:c0:f3:0a:e7:ed:11:d1:9a:
33:35:b8:0f:4e:2c:2d:42:ed:a5:09:d9:36:7b:68:
f1:10:59:d7:04:5d:6b:02:f0:d5:a4:6e:8f:3e:3a:
84:f7:d6:2c:74:fb:01:04:93:1b:dc:5d:59:bf:b4:
2b:e5:8b:48:68:03:01:72:c6:04:b1:69:ae:2e:23:
4d:0b:57:ec:61:28:96:cf:d4:c7:cf:c4:c6:74:ef:
18:cb:87:e8:6a:a4:dd:43:7f:79:5a:71:64:10:88:
b1:ea:c9:d0:26:e6:79:bd:f5:32:8b:06:db:9b:9d:
58:d9:82:a2:91:61:7e:5f:22:83:45:46:12:b9:9f:
10:37:4e:e3:31:59:0b:65:00:e7:d4:36:2c:2a:dd:
1f:c9:08:ec:ed:b7:71:c8:5b:d5:bf:f7:2c:83:bb:
a7:83:dc:66:4b:0b:17:7f:78:4c:f5:ab:21:9d:52:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:48:B9:32:71:1E:71:7E:9E:BF:53:51:9D:73:3B:E5:DB:39:17:B6
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ed:06:97:98:f2:45:ec:8e:78:17:cc:d3:2a:59:0e:1d:0d:
8a:c5:ee:58:c6:19:23:b1:9f:cc:93:98:f3:d2:94:47:ab:37:
a0:2c:52:e1:e5:37:ff:df:3f:2e:40:fe:40:8b:6f:51:4b:46:
af:8a:a1:c1:31:75:2c:ae:3e:18:2e:c7:a3:fd:b1:d1:d1:89:
b5:96:dd:9d:07:03:d9:0f:d8:c7:ee:96:50:aa:55:83:d0:a2:
88:2f:18:91:2e:df:0b:52:1c:ee:d0:f6:e7:55:b3:ac:01:d7:
02:f9:2a:39:dc:8c:0a:76:2a:02:3a:fe:fc:5a:57:11:0a:ea:
61:48:33:02:ed:00:75:1e:91:43:c3:7a:28:67:ed:c5:1d:9e:
96:cb:c5:d6:33:64:3e:7c:11:6a:d4:38:a6:76:7f:a8:3b:67:
2d:7a:10:1e:d0:42:77:ac:e9:d6:31:a5:c2:fd:b1:5f:c8:7d:
3e:8e:8d:a3:d2:ba:c2:f4:6c:2a:8b:7b:b8:6a:2e:d3:44:48:
01:f5:41:24:b1:a2:3c:e1:87:3d:3f:20:56:1f:18:45:f1:92:
dd:6f:66:73:49:27:ac:dd:5f:69:f1:74:ea:b3:4b:be:c8:5e:
e7:54:2a:fb:92:12:a4:6e:56:74:32:fe:a0:08:6d:df:84:57:
e9:16:4a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:01 2025 by rpki-client