Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: b4wL+FDoMJRl1YnMrZOWAzjYttE9wGkEpSaJ2oSVkI4=
Subject key identifier: DF:D6:F0:60:AA:45:AF:6A:CA:44:5A:73:10:EB:6B:7A:BA:8D:54:D4
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 0194BD8599BE1B9650BFFA1D1F38648B39E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0AB6
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: xjfyfcaM6zFl9gwUEUaOQmvp0C0IxgBfKSxSSKmXFBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:99:be:1b:96:50:bf:fa:1d:1f:38:64:8b:39:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=dfd6f060aa45af6aca445a7310eb6b7aba8d54d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:b1:f8:b9:c2:ad:d3:30:38:78:12:3e:57:
79:79:da:54:a2:1e:b5:9b:af:94:80:dc:25:c7:ac:
94:cc:1d:eb:fe:71:55:5c:da:44:4d:eb:51:b1:a5:
f3:5d:78:b0:42:da:65:d0:b0:ab:51:39:77:1b:e6:
c3:b8:54:23:87:c2:c9:8c:fa:70:c1:b3:63:c9:10:
75:65:69:4f:de:da:34:1b:ce:d4:63:55:7f:27:75:
bd:7b:16:0f:f6:a1:65:0b:a0:98:d2:6d:8a:e8:c7:
fd:c8:66:07:03:02:b0:8f:0a:e5:be:7d:d3:f1:f7:
df:c9:8d:37:38:2d:61:a6:c3:68:bc:0b:03:ec:1b:
cb:5d:23:a1:aa:c8:26:61:aa:9c:97:11:2c:81:9f:
00:8b:cb:ac:1e:71:69:78:ac:32:f3:3a:0c:8e:07:
23:1e:7c:c4:c5:8c:45:fa:b7:b2:0b:a0:7b:e0:b7:
1a:aa:19:49:a1:7d:c3:6a:52:ec:36:c5:41:ba:df:
e5:ce:92:ec:b0:d8:48:52:78:b8:d1:bf:fd:28:d7:
a0:3c:35:8f:79:79:1a:e1:0e:d4:4e:df:35:e1:05:
dd:dd:9b:de:fc:39:37:94:24:fb:1d:8b:ff:f3:29:
c6:0d:0d:7d:c0:c7:74:28:29:48:b7:ee:bd:3b:b1:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D6:F0:60:AA:45:AF:6A:CA:44:5A:73:10:EB:6B:7A:BA:8D:54:D4
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6e:3a:90:17:74:cc:44:7b:38:5d:8e:82:37:2a:45:0e:4b:
63:c0:0c:ae:2c:95:c2:a5:33:70:a7:fe:cc:18:fa:54:cb:92:
fd:df:45:b6:41:03:fc:c4:0f:7f:cf:a7:03:db:1d:54:ba:2f:
25:b7:36:6b:13:9b:0b:65:45:f8:7b:4f:87:d0:b6:fb:aa:9a:
2a:b5:d1:0b:5a:0e:7d:05:06:20:7d:9b:c3:e0:b5:66:d3:77:
fe:45:56:53:6f:9d:5d:30:9e:92:28:76:81:b5:8b:ea:3a:e6:
78:44:50:f7:d0:69:6e:53:0a:09:b5:fd:18:ae:4b:85:cd:1a:
42:55:24:44:93:d1:a7:e2:c8:b6:ed:e8:43:60:af:14:23:f6:
6e:94:60:65:b1:40:ff:bd:46:99:e6:e5:0f:42:02:1f:dc:66:
ae:3f:9e:48:e8:29:99:7c:d3:70:f1:a3:90:3b:d6:5d:58:7d:
da:c7:b9:89:90:3a:ba:31:16:c9:bb:5f:8a:c8:ff:e3:c3:0b:
ea:c4:10:30:fd:6a:39:29:8b:47:b9:30:56:50:c1:91:a9:79:
6c:81:aa:59:46:3c:5d:b8:bc:66:f7:b2:55:84:95:1b:81:5a:
13:3e:f2:c0:b7:20:2b:6f:b5:29:d5:0e:2f:c9:10:51:86:fc:
97:91:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:18 2025 by rpki-client