Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: VAFhMp8V//70XL013YvJkwVuD0yQKbuN7apqGRJutW4=
Subject key identifier: 6D:FB:FA:D3:F9:29:D3:8B:B2:A7:E8:ED:21:D6:FF:B6:BF:4D:94:3C
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 0194BD8578EF82DC771FC4AED9B118FEA946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 0343
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: gJNIU8NcNlrncRC7REikqdCSaePo5BdrpFkPhyfeVgk=)
2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:78:ef:82:dc:77:1f:c4:ae:d9:b1:18:fe:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=6dfbfad3f929d38bb2a7e8ed21d6ffb6bf4d943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:c4:bc:90:f3:1f:0c:23:74:db:06:e9:c0:
30:82:a4:4f:03:cb:34:d2:0a:51:31:9e:7c:d7:46:
3b:09:f4:c4:b7:d3:0c:56:65:d8:f3:df:69:07:1b:
df:aa:38:c2:19:0e:da:9b:ac:66:9a:b9:fc:c9:e5:
e6:1c:52:0d:a0:4d:1e:f0:71:1a:05:41:e5:af:2c:
f5:14:28:55:11:3b:7b:b3:0b:a0:ae:f0:f3:b8:47:
b9:4e:3e:06:a5:ac:82:ab:ad:1e:e5:2c:ad:47:8a:
ce:29:eb:61:44:8c:6b:ba:c2:f0:84:dc:89:6e:4d:
02:c4:90:f3:8d:db:4b:a7:55:a3:9c:6d:6f:ca:43:
e7:e8:7c:b0:1b:2a:ed:ae:a9:f3:d7:20:82:cb:67:
56:b5:79:41:92:bf:2c:dd:ad:8a:3a:a9:5e:fd:36:
be:a3:ca:5f:a4:70:b8:4b:e0:1b:34:c5:46:63:ef:
44:5a:78:01:b7:a3:a3:22:c8:9f:ee:f0:d6:8b:d2:
a4:45:f5:47:7d:a8:a9:81:05:0e:b6:db:ad:e7:4d:
01:fe:cf:f2:68:e6:47:ea:d0:f1:51:43:ed:d9:e3:
8a:ee:58:f0:bd:81:21:45:68:4c:e9:de:a3:23:ad:
b5:fa:06:28:e2:16:4c:10:e2:f3:6e:ae:4b:fb:ef:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:FA:D3:F9:29:D3:8B:B2:A7:E8:ED:21:D6:FF:B6:BF:4D:94:3C
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fb:1e:26:8f:81:e2:81:04:05:25:8f:7d:2a:26:ca:ab:08:
0b:72:d4:70:01:f0:ef:f2:ee:16:e4:03:49:2e:75:ce:6e:60:
ca:34:8f:fa:3d:ec:e6:96:70:d4:e6:3c:c7:ea:75:9b:91:64:
49:da:a6:1d:1c:c5:06:78:c4:16:60:d0:94:6d:3d:42:16:c7:
e6:e4:40:55:60:5f:ed:6a:f9:35:80:99:10:22:1d:3c:03:26:
5f:57:8f:25:ec:4d:73:d9:cf:04:37:24:95:57:32:55:1b:49:
12:5d:60:46:94:48:bd:d5:8f:c6:6c:dc:d6:4d:ae:e3:db:21:
ae:31:20:64:66:7a:20:f9:2f:17:8f:b0:b5:ed:5e:21:ee:bd:
c4:6d:c9:fc:ae:7d:45:91:2c:0b:cd:82:38:cd:48:05:15:00:
84:01:a8:03:68:df:17:06:8f:f5:2d:fd:71:8d:b7:ce:27:1f:
8f:75:21:55:fd:c4:9d:5e:ef:03:46:1c:5f:b2:d5:a6:6b:a1:
76:ee:a7:5f:61:b8:23:38:1e:06:9f:cc:8d:26:88:a0:35:f3:
08:33:1c:6b:ef:6c:29:2b:a6:53:e4:43:a2:d6:3e:2b:36:c2:
e5:81:98:ab:e0:8d:98:b2:1c:f5:33:01:cd:2a:b6:87:77:0d:
12:fc:cd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:31 2025 by rpki-client