Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: UV8G4Y8gSrZiWZLy+AV03HUXNrEhdgjqAatNYqpKvj8=
Subject key identifier: C0:75:59:2E:7B:02:0A:B5:D0:DD:F0:B2:E6:EC:AD:9F:5F:2B:4C:2E
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 0194BBCDE1662FC447D13C00AAAB41597CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 074C
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: jA1XLpRus6+ImQtnRJ6SuPJyaUv4laQY8aSzA2SpQ9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e1:66:2f:c4:47:d1:3c:00:aa:ab:41:59:7c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=c075592e7b020ab5d0ddf0b2e6ecad9f5f2b4c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d2:65:6f:fb:93:5e:63:7f:74:18:2b:07:22:
0d:68:76:46:15:aa:34:fa:e8:92:6e:8f:b1:da:0a:
bb:ee:ba:94:69:ed:da:ef:52:c2:d5:4e:dc:8e:27:
fb:c7:d3:04:ed:19:6c:8b:d4:10:3d:d8:e1:a0:0f:
f3:33:c0:68:d5:45:bd:06:05:8a:c2:aa:50:28:8c:
19:d8:0b:fb:10:73:c2:b5:17:59:38:0d:15:3d:72:
d2:23:a0:e1:2f:b1:19:f7:57:8e:98:61:22:51:80:
62:99:b0:f0:2b:3c:f9:aa:8f:a3:28:aa:be:02:2b:
ee:6d:c5:c0:8d:15:4d:e4:74:f7:82:56:b4:6f:e5:
eb:d3:3b:28:f9:38:20:e3:9b:55:3e:d6:ef:f0:fc:
c0:9f:ea:43:85:e3:13:96:a9:69:80:95:36:c0:30:
26:38:1a:14:c8:fa:13:73:a9:52:b0:f1:46:6d:93:
01:49:1b:2e:40:51:32:65:b2:b0:54:6f:3c:bb:0f:
d8:65:36:2b:c7:21:24:d8:ed:69:67:73:4a:c7:8d:
64:8c:43:56:5c:ad:f4:85:2b:e7:8e:5e:53:19:b5:
b0:4f:22:54:78:b9:b6:d3:69:24:62:4d:f4:c7:07:
32:fb:4a:c4:9c:37:78:9e:5f:3a:85:77:ba:9a:df:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:59:2E:7B:02:0A:B5:D0:DD:F0:B2:E6:EC:AD:9F:5F:2B:4C:2E
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cd:ad:48:b1:cd:e1:52:6e:97:f7:9e:df:e7:38:48:fd:e6:
41:c9:36:58:55:cb:a3:53:58:e8:a4:7b:66:80:88:ec:db:a7:
96:c7:51:ff:db:2d:19:e1:ae:07:74:85:b4:5d:72:a2:91:6d:
ce:b7:d4:a6:09:d4:9d:fa:1c:5f:58:13:63:31:69:95:e6:fa:
7b:1e:00:bd:70:1f:6e:5c:9c:d0:62:e0:c1:9b:94:7e:49:54:
05:cd:39:3d:3d:de:87:50:56:b4:26:18:97:59:60:3a:18:0a:
ec:60:a7:04:2c:c8:a1:79:df:8c:c3:76:1d:13:ae:28:33:90:
88:4e:55:ae:4d:9a:d8:b2:08:46:e0:95:3f:ef:3f:62:2e:8e:
ef:40:71:7d:2c:62:d5:8e:dd:50:a1:20:9e:be:f6:64:74:b8:
b4:81:aa:25:cd:15:4b:e0:78:23:5b:fb:74:af:fa:73:a7:94:
9b:3f:7d:cd:23:6a:eb:db:e1:8f:6f:98:db:f3:72:a1:1b:3b:
0a:fe:e8:d2:c5:2e:82:86:68:eb:68:47:51:3c:5f:a1:63:20:
3b:ca:f0:4e:69:7d:3d:63:20:b0:1c:e3:d2:7e:6d:98:17:b3:
3d:5a:4c:51:c7:a5:0f:99:26:bd:2c:c8:3a:02:5b:1a:db:e6:
16:f4:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:59 2025 by rpki-client