Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
File: S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft (raw, json)
Hash identifier: oWG/89ly8bHXYMmKULj3OfVYUE8jNplh05jIv8bmbis=
Subject key identifier: F5:C3:89:3F:B6:4E:96:41:08:FB:B9:71:E6:6F:CC:3B:77:5F:81:B4
Authority key identifier: 4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
Certificate issuer: /CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Certificate serial: 0194BCE0C23CE90B1B8AA82A5FE9FC1DEB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
Manifest number: 011E
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl (hash: LFE24SoJ3e6XUif9dm50wYCKci6k9VXqkUMFwxgRaTs=)
2: hrzuIDRF15oBIKXIQfgIQbF1zzc.roa (hash: JpHqRzFezYOCJs0/enWH8I+qI+ye32fJxiyuYohDsJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c2:3c:e9:0b:1b:8a:a8:2a:5f:e9:fc:1d:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6cff7467533410b9fda2f700208c1a8f0c0423
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=f5c3893fb64e964108fbb971e66fcc3b775f81b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:21:6f:ee:7f:9c:e4:06:f5:8e:eb:e4:f4:
76:44:e2:f8:82:8c:ec:ef:17:b2:af:77:c4:bd:94:
51:ed:84:18:42:3b:b6:70:1e:89:e6:10:b7:12:8e:
d1:1d:4a:a8:55:77:f3:f0:4c:8d:c7:d8:ea:39:bd:
1a:78:2c:52:5f:72:70:88:8f:64:49:f1:64:14:b4:
8d:bd:bf:c8:d0:56:9b:bc:27:17:1a:ff:0b:0c:89:
0a:8e:09:a9:56:77:5e:d7:06:91:fc:2d:a0:83:6b:
b2:b5:c8:95:7b:eb:62:2c:f7:cc:f2:fc:c7:13:01:
47:4d:f9:48:74:b9:1c:62:8a:4c:31:c0:29:04:3d:
f9:a4:5b:46:c5:81:eb:22:52:52:38:97:24:14:0f:
6b:45:17:5a:36:21:0d:4a:d4:6d:d5:ed:db:5c:f0:
13:af:6a:c4:06:2a:ae:54:bf:cf:6b:0f:a4:6d:0d:
53:06:6c:74:ce:72:98:53:76:29:98:22:96:5f:d6:
56:98:11:eb:8a:45:ea:be:a8:42:1f:30:2a:08:a9:
36:32:cf:e1:bf:3f:ed:01:09:5c:aa:36:f3:a2:0f:
3c:03:21:3e:ae:6d:85:b6:c0:84:f6:31:0b:72:4a:
6f:79:7e:ee:d9:75:88:78:86:01:ce:ae:6d:55:ab:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C3:89:3F:B6:4E:96:41:08:FB:B9:71:E6:6F:CC:3B:77:5F:81:B4
X509v3 Authority Key Identifier:
keyid:4B:6C:FF:74:67:53:34:10:B9:FD:A2:F7:00:20:8C:1A:8F:0C:04:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2z_dGdTNBC5_aL3ACCMGo8MBCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ffc623-b6f6-4ffc-9a11-a74c06c232d6/1/S2z_dGdTNBC5_aL3ACCMGo8MBCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:0d:4b:3e:c9:a3:f7:e1:ec:d3:c0:14:6e:85:11:1b:0b:
39:2c:90:b5:64:89:f3:ec:3f:ad:d5:cb:d8:c3:55:99:7a:38:
a3:ed:43:b6:a0:d1:74:ed:64:6e:ae:2a:2b:92:e0:6c:7e:79:
2d:bf:6b:cd:cc:58:a9:0a:8e:d2:f0:d3:0f:c7:ba:68:e9:73:
72:07:13:27:d5:6a:df:37:41:f6:3d:44:5b:c5:47:41:3e:d0:
1e:a9:b9:90:60:dc:e1:c0:c1:89:39:b5:67:93:74:3f:3a:bf:
75:d6:7b:a7:81:48:59:9d:35:3c:63:2b:7d:26:b7:4e:73:7d:
40:19:76:9a:6c:64:b5:6d:56:0b:4f:bc:8d:87:bb:04:ea:37:
db:d8:23:a7:7b:69:43:51:22:5a:2b:96:aa:49:06:81:3c:79:
0f:ce:3a:37:9a:f7:9e:cc:e4:e7:1e:6a:4d:43:c0:44:ca:97:
e7:68:f2:e4:c4:34:57:50:3c:e4:62:48:cc:60:1d:87:ed:e8:
4b:d9:0e:9d:2d:38:f0:99:33:2e:b1:3c:0d:dd:b6:6c:6e:2a:
19:5a:7b:64:d2:70:13:07:f5:32:72:e0:f3:06:5c:ba:ce:eb:
46:1c:c3:0f:e7:68:28:17:a9:d2:19:1e:5c:07:35:30:b4:e3:
49:11:e2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:16 2025 by rpki-client