Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: cyKyIdGahvp/dYjFaAJCJB5Uc8YBG5txQfr0aTOpI/U=
Subject key identifier: 30:E9:61:D0:75:DD:64:CF:9B:42:5F:D0:37:DF:02:B1:32:42:60:12
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 0194BD858574524A10DDDBADF01E4552B6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 127B
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: SFwTVwrP9hOEwK/L0Y9IBWPvyn4YWZMkRBkexCrYp2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:85:74:52:4a:10:dd:db:ad:f0:1e:45:52:b6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=30e961d075dd64cf9b425fd037df02b132426012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:fe:7e:49:c6:54:ec:e7:f6:31:01:d3:a7:
58:24:ba:a5:74:b0:9e:52:6c:c6:7d:10:47:d8:9d:
9b:f3:3b:be:b1:01:35:a7:f0:d0:50:4f:f8:d0:c7:
95:26:f6:d2:82:83:8d:46:0f:6b:33:a3:2c:45:38:
88:8c:2e:da:fc:77:d8:96:a1:dd:4c:79:8c:05:be:
8e:5b:fe:86:54:59:ee:4c:a7:18:c4:0b:21:69:09:
41:dd:75:86:07:13:8a:b0:d5:37:e4:35:65:92:83:
75:ee:68:71:a0:78:20:87:24:70:55:1a:9e:20:bd:
b6:f6:40:ab:e7:01:ac:aa:12:7b:ca:ab:b2:0d:ec:
4c:84:fa:99:3f:f2:47:35:bd:b0:35:45:5b:14:83:
0d:a0:87:ab:40:18:97:82:40:27:e7:8c:fa:cb:b4:
5e:7a:ad:cd:eb:cb:f0:a8:1c:a6:55:00:c6:3d:6d:
88:cc:f9:78:6f:75:2e:1d:33:16:d8:01:40:c0:1b:
cb:00:83:a4:81:cf:62:7b:4f:4f:aa:e1:eb:53:21:
11:93:99:8c:77:d7:84:14:f0:8e:fc:3e:79:84:3a:
3f:e5:9d:1c:5a:bc:0f:8f:ca:8f:d2:60:fb:32:23:
b3:09:e3:cf:8c:62:73:5b:3d:b3:ec:d7:b4:e6:c6:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E9:61:D0:75:DD:64:CF:9B:42:5F:D0:37:DF:02:B1:32:42:60:12
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:76:d8:6b:69:2d:b9:58:ec:42:3c:58:e9:f9:e0:f9:5a:f6:
c9:3c:f0:c0:98:b1:b0:d7:8b:f2:a8:18:0d:0b:d2:07:5e:d1:
28:ef:d1:76:52:53:2d:fe:fd:32:e4:b9:b9:67:62:08:d8:f1:
50:c5:29:9c:e1:8b:08:cd:d1:8b:41:85:fa:19:49:9d:03:d7:
f8:f2:25:bc:00:b8:9b:58:3f:d9:e8:c1:55:0e:c7:65:1d:9f:
27:ca:95:2b:b1:52:ea:f2:94:cb:6a:03:3d:cc:89:62:ba:99:
5b:35:03:34:31:de:e3:09:b6:a6:30:2f:e2:db:d2:ee:e6:43:
b7:49:43:d6:7d:47:b5:ca:12:e5:54:53:2f:4d:66:cb:71:e1:
c4:a2:ec:02:d0:a8:93:c4:5a:8d:71:25:c4:26:76:f0:5a:4f:
37:e9:5b:0e:53:79:cf:b7:a0:77:17:5e:cd:73:84:13:b5:92:
01:d2:78:eb:47:b7:6d:c4:ab:38:54:ef:10:85:70:5a:3f:be:
9b:bb:9e:35:d9:ca:c9:20:7c:e3:80:19:36:b4:2c:49:c3:67:
fe:a6:3e:e9:f4:92:38:b3:f7:9d:c8:98:c2:ad:8d:9a:d8:1c:
89:28:80:6f:07:15:df:aa:3c:c3:23:08:b5:cf:7c:03:64:73:
55:42:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:49 2025 by rpki-client