Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
File: 2zdeFqGTZ96ZuySsEV0lmioEgaw.mft (raw, json)
Hash identifier: 32tRjWaRF54tO5DdOxpBRBhniD0whniI3fTsts42Y4c=
Subject key identifier: 3E:9B:8C:67:1C:4D:4D:70:71:54:12:9D:11:53:A7:31:4E:D7:07:08
Authority key identifier: DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
Certificate issuer: /CN=db375e16a19367de99bb24ac115d259a2a0481ac
Certificate serial: 0194BD8584FD8BF304F3086154D5C342E3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
Manifest number: 09C4
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: 2zdeFqGTZ96ZuySsEV0lmioEgaw.crl (hash: 8fPM4LjZrbahAYXw5W5MoYIwwKB2YlVNCD3SsFVCukk=)
2: x6hLDer_XW1q_iEu4GXkzkZyC4s.roa (hash: WqVvea5/LNqbNIIZsdml33Mg9/QcNbUM12u8YdmaIWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:84:fd:8b:f3:04:f3:08:61:54:d5:c3:42:e3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db375e16a19367de99bb24ac115d259a2a0481ac
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=3e9b8c671c4d4d707154129d1153a7314ed70708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:a0:20:b7:dc:2a:33:00:b7:01:8e:b3:52:
0b:fd:14:c4:d4:29:8d:84:f1:e9:cc:76:0b:b5:b9:
20:81:27:a6:7c:f8:4f:b1:f6:f1:3a:cc:a3:ce:b4:
3f:f3:cd:d6:64:50:cd:67:af:f2:3a:75:48:e3:f2:
62:cd:d4:6e:b0:fb:b7:f1:dd:7c:5d:ad:5c:91:70:
17:f0:66:fe:e5:3a:a9:9a:a6:2b:ee:70:fa:cb:df:
2a:0d:d2:1f:74:23:90:cd:a4:e7:4d:32:2c:8f:c4:
8c:3d:36:a2:18:85:48:5c:71:14:a7:94:75:2a:19:
6d:b4:54:02:c5:94:a1:78:2e:92:93:91:25:f5:d6:
fe:26:3f:eb:f2:e5:44:00:3e:15:b6:8e:8f:b9:51:
e7:36:b1:75:ba:b5:0a:10:08:53:46:b2:e2:20:b2:
ca:4a:58:9b:69:e9:27:f1:b3:e3:d0:a8:81:1b:8b:
7f:e9:3d:64:ae:65:63:b6:b0:68:27:be:39:3e:aa:
d0:cd:98:3e:f1:48:dd:72:9d:86:7a:9d:d9:3a:59:
4f:c3:8b:e1:6d:fa:93:bc:8e:36:bc:94:77:96:45:
ea:94:07:0e:01:1a:39:ef:48:7e:0a:e5:24:41:d0:
25:9d:78:4e:8d:9c:b6:e1:1f:7e:57:8c:5d:05:d8:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9B:8C:67:1C:4D:4D:70:71:54:12:9D:11:53:A7:31:4E:D7:07:08
X509v3 Authority Key Identifier:
keyid:DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0a:fc:0b:fc:fb:8e:c1:14:05:60:01:2d:1a:3c:48:7e:cd:
6e:bd:c0:65:df:6a:95:2a:9e:2d:8b:c7:cb:3e:4e:7f:f0:a6:
3a:4e:07:ff:67:93:a0:ac:23:b3:7a:8a:41:af:ec:b8:33:77:
c0:40:1d:4c:9f:e3:85:41:09:67:25:6b:3a:88:6f:16:8d:86:
87:31:e4:b4:9b:21:3a:69:d8:d2:21:dd:db:f0:26:9f:d6:e1:
55:8f:14:7e:49:13:d6:6d:7f:57:f4:39:cf:98:41:ca:ab:dd:
64:37:34:eb:dd:1c:08:27:47:17:15:a4:0b:04:eb:47:2d:5e:
0b:8a:3b:0b:4e:2f:50:09:54:d9:39:6a:0d:31:69:4d:21:f8:
a2:c3:8c:06:bf:83:5c:5f:51:3d:f6:fa:db:c6:18:a2:44:c1:
25:a8:46:68:61:07:8c:58:07:7c:13:77:ed:da:63:25:f2:3a:
8f:ff:9f:c7:d1:0f:e7:26:ac:7a:5d:fe:81:76:cc:46:97:be:
81:55:93:37:fc:4f:52:eb:5d:fa:5d:08:0f:dc:f0:00:b4:7b:
b9:cb:cf:15:7d:73:ab:c5:50:d8:de:2e:dd:31:3f:60:67:c1:
03:af:9d:59:43:82:f0:bf:72:03:de:5a:6b:bd:da:49:03:20:
35:a8:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:12:08 2025 by rpki-client