Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: b1v83y9SIgoYHnJZh7xjIt2WZbX62HwoD6Mi4M9iDf4=
Subject key identifier: 95:DD:40:A0:53:AE:13:10:CE:EC:06:04:87:02:5D:98:04:10:A8:58
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 0194BC3C8B6C79D0852F375A3C07C5B2EFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 014B
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: YAUdr7/8NWUdz6VB45IWURl6e/3S5ro7bBXKzdCwueA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8b:6c:79:d0:85:2f:37:5a:3c:07:c5:b2:ef:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=95dd40a053ae1310ceec060487025d980410a858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:fd:bd:68:90:da:9c:c2:27:c3:7e:01:fa:
f9:7b:38:82:e5:60:9c:30:cc:b3:f8:37:4e:96:10:
f8:dc:95:6b:ca:fa:f1:a8:f8:88:d0:2d:62:00:60:
ac:60:11:a2:4b:b0:92:c6:4b:d4:d2:f3:70:09:a7:
9a:cb:7e:b6:09:1a:6d:5d:a8:8f:f3:92:68:a6:5b:
7d:3a:a1:f2:9e:89:b6:72:e8:ee:7f:ec:ad:1c:16:
1f:59:34:aa:43:08:6f:2b:d1:78:28:4c:9f:38:dd:
a5:ba:59:e6:cf:5c:b4:cd:33:8d:28:af:04:f8:db:
5c:4c:dd:be:56:50:3a:31:45:13:f8:59:e4:fc:fe:
09:23:0a:55:cd:e3:bb:d7:9d:39:07:96:89:96:7f:
b5:82:76:f2:13:f2:f7:7e:ce:e1:8f:37:e5:8e:d5:
35:37:c8:7a:00:3a:b5:50:6b:7b:3b:af:c7:fe:09:
a8:e6:47:7a:f0:f2:a6:86:a3:1d:0d:8f:25:7a:8b:
70:e3:90:13:28:a6:d1:d2:4a:af:c5:b0:88:be:dc:
49:20:cb:93:e4:00:b1:14:c1:f8:9f:b0:e7:01:50:
3a:a3:4a:96:28:4f:ef:e3:4c:44:10:d7:58:4a:88:
4c:32:1f:be:5c:9a:48:43:f4:76:95:5a:fe:cb:1f:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DD:40:A0:53:AE:13:10:CE:EC:06:04:87:02:5D:98:04:10:A8:58
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0a:04:96:35:5e:89:ea:a0:86:2c:83:af:2e:33:3e:cf:85:
39:32:01:73:92:1a:06:fd:c6:4e:98:f4:ee:bd:75:c9:0f:c0:
da:3b:b7:2e:bd:dd:4c:aa:80:14:3b:45:40:3b:92:4f:a0:d6:
86:3a:d6:6e:58:a9:58:be:71:23:18:7c:ad:e5:5a:68:46:da:
e0:fe:51:67:e9:03:24:1d:7d:2b:94:3e:c1:e1:e9:8e:ce:3b:
bf:09:d6:bd:b5:19:56:b7:21:eb:1c:33:16:04:da:9b:00:cf:
5c:d8:89:f3:9e:18:61:70:78:ed:ee:7d:8a:9f:66:a3:5f:8d:
e5:79:d2:94:45:84:58:a5:8c:92:79:34:a9:dc:9c:f8:12:f8:
01:b3:29:e0:ac:96:b1:9f:87:e1:17:76:09:a4:d4:68:94:b1:
84:c6:42:89:4c:14:5d:06:4c:e3:b9:d3:05:38:0b:a8:27:ed:
02:0e:cd:9d:bf:38:6c:39:d3:4b:c3:e3:a1:ef:8f:6a:64:e8:
09:3a:e7:f3:79:83:2b:03:6e:81:be:6e:fb:b7:cf:fc:12:2c:
df:13:04:f3:e5:6f:68:c8:06:f5:57:d8:fe:d1:a1:2b:a9:9f:
76:f3:38:99:64:a9:3b:c9:bd:ca:6f:a3:ce:b0:e4:4c:af:d1:
9c:86:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:56 2025 by rpki-client