Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: pVEBOUcupfeFWR44wpK39tqDMffDn1qqXjtXP5erBZE=
Subject key identifier: 8B:57:8F:82:63:16:79:A5:2A:98:D6:2F:0A:B7:B4:42:1D:AF:8A:EB
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 0194BD855D927C4BC6D3978E4D4EE768F8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: EN6I19myyFq1E5+sli0/SpeYqslNr7Xx6gN6UYG0G2Q=)
2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5d:92:7c:4b:c6:d3:97:8e:4d:4e:e7:68:f8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=8b578f82631679a52a98d62f0ab7b4421daf8aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:15:8f:a2:03:69:ae:a1:46:39:fa:69:65:
f3:ae:f1:8d:79:36:1b:f0:17:dd:eb:ba:8a:4d:c7:
a1:c8:8d:69:4d:fe:aa:8f:22:87:7b:4a:6e:fd:89:
9c:0a:57:c1:47:cd:7e:78:4a:6e:03:0d:65:67:0d:
fa:b5:dd:fa:8c:fb:3a:78:a3:b5:4e:6b:49:39:66:
8a:97:97:cb:50:4f:02:f9:b9:cb:e6:ec:8b:b8:3b:
c4:95:c2:bc:4e:a8:94:09:ad:7f:35:57:b0:b7:6e:
ef:ec:78:d7:99:0a:8e:74:b9:4d:64:99:7b:df:94:
e1:d6:32:42:a9:29:9e:b9:93:79:65:44:a2:c2:9a:
aa:ae:39:0a:40:8d:c8:10:45:dd:4e:61:f8:b4:dc:
b7:25:d8:04:39:d5:8e:f0:cc:75:b2:d1:76:60:dc:
87:ab:e9:ee:b7:f9:10:c2:73:0f:c4:9a:3e:58:62:
0d:6b:43:6a:fe:10:d2:00:87:35:59:2c:80:9f:cd:
d5:6b:67:d4:c5:e4:29:94:68:82:90:82:4f:91:d2:
a5:00:b7:cc:e8:37:16:3d:60:a9:ad:6c:9f:1c:50:
e1:b2:6d:b6:65:bc:c5:78:1a:b8:5f:25:00:a7:0b:
26:4e:92:66:d2:7f:73:3a:e2:49:17:f2:e8:80:6e:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:57:8F:82:63:16:79:A5:2A:98:D6:2F:0A:B7:B4:42:1D:AF:8A:EB
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:39:5b:e6:67:c7:d9:a8:5f:68:7a:3e:85:d4:5d:3f:64:
0b:76:b6:c2:fc:4b:ef:84:61:e8:ce:88:b6:41:bf:25:91:0a:
4e:98:1f:1c:6c:87:9c:de:12:34:2c:71:84:b5:b7:1a:f7:11:
f8:d8:11:c6:a9:12:a8:f2:19:b8:fc:95:db:d6:ea:f0:8b:af:
b1:e4:88:87:00:95:b9:3d:65:fb:82:8f:20:b0:79:55:64:d0:
32:4f:93:aa:d7:06:ec:e5:5c:3d:0c:9f:b9:74:2c:01:ca:f0:
dd:71:71:a2:9d:cc:72:36:17:9e:18:40:bc:36:74:0c:86:6d:
6a:d2:7f:73:6b:e0:83:8a:93:03:fc:45:5e:3d:7b:83:79:46:
d9:5b:c2:0f:04:d5:60:13:e9:4d:5d:52:a9:b7:8b:d1:87:29:
49:87:92:8c:46:6d:e7:27:18:68:81:88:28:a9:dd:49:4e:e8:
9d:28:6f:b9:d6:cc:db:c9:b5:47:cb:9f:cd:d6:95:ef:ba:4d:
3b:09:1d:c4:eb:b6:f3:7d:2b:e5:a9:d2:27:ed:e2:93:68:b4:
c7:98:bc:fa:2d:18:99:69:4b:0b:da:c9:6f:b1:ca:75:84:6d:
96:4a:45:d4:6a:8e:5d:60:eb:f8:c2:3a:40:d8:0b:cf:bb:00:
01:68:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:17 2025 by rpki-client