Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: Fb06TuSZCIXlPqMiKt5lj83hyt0JjjV6SwEO/1h0XYU=
Subject key identifier: 2C:35:5B:BE:74:6A:FD:B4:4C:EA:57:42:47:A9:16:55:AB:A9:73:7E
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 0194BCE0E507808B2E4855AF321B2DD863E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 01B3
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: b0jkBZID6pHkyvNrnmIEWzq22OZzGOr7SuVZns8fOjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e5:07:80:8b:2e:48:55:af:32:1b:2d:d8:63:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=2c355bbe746afdb44cea574247a91655aba9737e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:44:93:6e:99:da:36:d9:df:3b:2e:e5:10:
fe:59:06:a7:12:88:e4:2a:0a:ab:46:05:ad:15:8a:
4c:26:36:3b:4f:60:f2:78:18:ad:b0:43:dc:c4:42:
50:a0:79:d2:8b:6e:65:38:f5:03:19:f1:6e:ba:02:
6d:93:31:d9:46:a1:d1:14:2a:63:ce:68:1a:7d:d4:
ad:7c:ce:c5:28:4f:01:c7:af:82:78:db:c0:0a:b8:
a7:c1:b2:37:5b:55:08:39:5b:fd:97:99:80:e8:ba:
97:f5:84:29:b7:42:0c:2f:ba:9c:f1:99:dc:1c:b5:
55:4b:c6:1e:e6:90:91:37:34:b0:5e:80:16:78:eb:
21:70:4e:37:7f:ff:5f:6e:c5:2d:25:57:97:7b:52:
4b:fe:74:36:f1:de:77:e7:c4:c8:c9:80:a2:95:8a:
12:17:7a:d2:e5:69:9f:c5:ba:f2:6d:1f:1a:4c:e8:
d2:3d:02:5e:fa:ca:35:80:72:19:62:89:1d:c9:4c:
c9:b3:4b:94:81:3c:34:8e:bc:96:a8:6a:87:55:8b:
de:3d:cb:bd:fd:0f:5b:47:47:83:46:80:d3:24:4f:
b6:59:84:70:2c:66:e0:ee:38:03:a6:c6:de:f4:ce:
8f:b0:8e:11:13:4c:4a:d0:fb:7f:e5:c7:a5:a9:e7:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:5B:BE:74:6A:FD:B4:4C:EA:57:42:47:A9:16:55:AB:A9:73:7E
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3a:74:52:6a:bb:54:61:c9:c4:1b:87:51:84:8b:a3:11:2d:
a4:09:cc:df:c1:1b:f2:d7:ae:14:ac:65:6a:40:9c:a8:0d:12:
5f:1b:bb:30:13:61:56:5b:21:ce:3d:f9:c5:fc:7d:91:4d:ce:
ac:de:ce:9c:aa:d2:f2:66:a6:b0:6e:92:62:43:c3:cc:e9:31:
cb:21:c4:e7:9b:b1:02:be:87:8c:00:e8:a7:e9:fb:40:99:9b:
c8:84:ae:35:20:39:40:98:0a:6f:9b:ae:03:71:27:29:f2:da:
27:6e:5e:81:26:5f:f6:ee:79:b8:40:25:6c:9b:c6:d9:45:af:
15:03:28:f5:51:14:e1:1b:2e:6d:1a:b9:c2:0f:15:23:b5:9c:
37:6e:fc:5f:6e:e6:26:75:78:41:91:65:06:06:21:7b:71:aa:
3d:36:00:1f:13:9b:27:2b:c2:76:f2:ac:c9:45:b6:87:25:4a:
69:e9:a5:ec:da:21:46:88:c3:85:45:66:d5:94:91:5d:d7:16:
89:bd:42:dc:dc:74:6e:f8:83:13:11:4c:a8:ad:69:3a:01:56:
ab:cb:f7:7d:e4:46:69:d6:80:44:90:af:b8:bc:a0:d3:57:a4:
b9:c5:d3:14:48:79:0e:17:5b:5a:22:75:68:42:14:56:f3:33:
be:d6:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:32 2025 by rpki-client