Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: TiP3UAqnl1fe351VfxL3uhGgq5zxCKMDWKruvkMkcAY=
Subject key identifier: 73:A9:A9:94:23:DE:92:CD:56:9E:DA:14:D6:A3:BA:FC:94:DF:DE:C7
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 0194BC04FA38CAAA44CF90F714BD5505941B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 04B4
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: ujNcLwwWaz6YwhB9QY9dPDDCeDEFVJGL8yaw1KU5rYk=)
2: b1zoobQuYRirw6zOe3ZiWtlB_Fs.roa (hash: yoTkr3Ydr4cxPjwyqyjdE6QfCIuZ05Im31loM47LoN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fa:38:ca:aa:44:cf:90:f7:14:bd:55:05:94:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=73a9a99423de92cd569eda14d6a3bafc94dfdec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:36:6c:ed:24:ba:47:91:77:74:b9:d6:fd:
dc:99:22:73:f0:02:54:3d:c3:29:8f:8b:b2:00:c4:
4d:09:fe:ed:e9:8f:34:28:c1:57:f5:bd:f1:bc:e3:
16:e6:57:d3:e1:eb:cb:ad:8c:bc:d7:2e:3a:4c:33:
18:c0:e4:aa:26:93:58:c6:40:e4:3a:de:0e:8d:cc:
54:e0:4e:f6:18:e6:7c:09:6a:ab:de:c5:6b:19:00:
73:98:f8:31:90:b0:fa:c3:06:66:34:c0:cb:25:e2:
96:e3:54:dd:06:7c:8a:a8:88:4b:d7:14:77:49:27:
8a:8c:51:33:1f:77:1e:2e:cb:61:61:ae:00:f8:8e:
1b:35:3e:5f:6c:3b:35:00:89:38:42:6d:1c:18:0e:
30:8b:85:33:0b:c4:ae:7c:c2:6c:92:28:40:06:d4:
f4:10:c5:16:78:7b:54:96:d8:b5:10:96:2d:bc:68:
b4:ba:2d:e3:92:4e:ee:a2:99:c4:07:f9:70:9a:d2:
f9:97:87:ce:5f:75:49:c5:13:81:e0:94:29:a1:10:
37:4b:30:69:82:24:62:62:eb:f6:4d:a3:7b:cd:62:
ee:51:da:0f:70:90:df:7f:ac:92:74:39:61:a7:d5:
f4:67:6f:ce:8e:e8:5f:6b:fc:75:d2:e0:18:4f:1d:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A9:A9:94:23:DE:92:CD:56:9E:DA:14:D6:A3:BA:FC:94:DF:DE:C7
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e2:1c:a2:98:c3:56:a8:53:b5:7a:99:96:c7:3c:22:bc:0a:
50:ae:36:d8:8f:bb:83:8a:96:67:33:98:5b:03:a0:2f:4a:70:
1b:06:7d:12:02:5f:90:8f:51:26:6b:5a:a7:2d:2d:4f:b8:38:
2d:82:83:01:ed:73:6c:8f:bb:ab:2d:25:70:55:55:e7:f6:35:
16:f6:ff:39:ab:d0:8b:94:b9:e6:3d:f8:4f:d7:f7:2d:79:84:
dd:fd:d5:9c:28:28:c4:42:0d:07:20:89:6b:51:4d:20:08:d8:
6e:c8:f7:ba:d0:80:a7:65:25:e1:e4:8b:c0:42:a5:d7:9e:08:
ae:64:7b:bc:69:a1:1a:47:b7:00:82:62:50:69:81:9e:bd:00:
00:e6:d3:bf:a1:b2:4e:02:41:d5:5c:3a:90:ef:30:9b:74:9b:
71:ef:19:02:d2:b8:4a:2d:b0:3b:80:95:fa:59:3a:31:7f:ee:
ae:3b:8e:a8:89:98:ee:51:85:3c:2c:91:4f:77:cd:28:f7:1e:
06:e8:70:da:7d:f5:f2:f9:a3:53:38:44:40:ca:1b:82:5d:7b:
78:31:87:6f:9d:d5:07:1e:d2:58:91:62:78:23:f6:14:5a:c4:
49:9e:8a:66:5a:5e:e8:29:5f:e3:f4:aa:ea:b2:14:4c:40:4e:
4c:5e:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:19 2025 by rpki-client