Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: /wm5W8naBJ3RalTLwbiFhPZZLbRY5WX1+EPnffuOKLw=
Subject key identifier: 02:AF:61:7E:51:FD:3C:38:FA:DC:DE:BF:21:3F:23:15:2D:AB:F9:DF
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 0194BCE0964333401819E29502F22C84A115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: 2nC7e2uQc+ik94c735Ujnb1gNx1zfAW/70sVHRW2NyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:96:43:33:40:18:19:e2:95:02:f2:2c:84:a1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=02af617e51fd3c38fadcdebf213f23152dabf9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:62:71:ff:49:22:3a:59:cb:88:07:68:c8:
59:01:50:07:c0:10:52:c1:41:02:0d:20:c3:d7:dd:
8a:92:47:6a:bb:0d:f3:ae:c5:d9:e9:98:cb:18:86:
36:c9:eb:cb:9b:13:b3:fb:56:42:11:24:eb:f1:66:
f1:ce:04:9d:d1:e0:cc:7e:de:92:14:28:33:7b:cf:
28:23:0e:09:2c:c0:e8:93:4c:5c:03:b3:51:12:2e:
2c:b0:ed:18:a7:df:7e:40:9e:84:f5:44:90:d0:c7:
44:83:f0:bf:d9:37:df:d2:08:e2:58:f7:eb:00:e8:
b2:13:cb:9b:b2:a9:23:27:55:70:5c:92:fa:d5:5b:
ba:66:80:bc:59:7e:4f:f2:19:8a:10:f8:e9:1a:35:
dd:88:02:57:b3:41:70:9f:38:ea:1d:83:5a:60:a7:
af:24:1a:4b:e7:ab:25:13:2d:14:30:56:bf:3d:e1:
5f:8e:2a:68:08:7b:c4:89:4f:bc:13:b0:51:d6:da:
4c:29:3f:d0:0a:56:f0:60:06:fc:06:da:6f:35:65:
9c:e6:2c:ea:74:9d:15:ce:a1:5d:89:5c:6b:76:0e:
8f:55:05:34:ac:8a:94:10:be:42:e4:c3:bd:53:02:
0b:35:75:bd:05:33:a9:62:39:ab:1b:dc:32:17:8a:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AF:61:7E:51:FD:3C:38:FA:DC:DE:BF:21:3F:23:15:2D:AB:F9:DF
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:2b:65:59:95:f8:f3:4d:4e:c4:cb:e5:54:b4:3c:eb:ce:
3b:46:53:2d:95:dd:d5:53:1a:76:4a:cd:43:96:69:3d:1b:57:
e0:90:d7:77:fb:e1:d6:09:4f:15:94:e5:a9:09:c4:e5:87:1a:
b2:e5:5f:f0:b0:fe:bc:ac:b3:70:ea:98:40:51:33:47:7e:d6:
88:10:53:a2:b8:c4:10:72:2e:5e:3c:b6:16:01:0c:27:38:88:
14:3d:17:a7:f2:be:5b:4b:dd:3a:dc:c2:41:a8:72:58:eb:67:
60:bb:1d:20:8b:87:94:4a:bf:1e:58:cc:d6:ea:f1:9b:17:32:
05:ea:a5:25:94:2c:20:84:62:bb:bd:62:47:4f:18:ed:b1:a1:
ff:cb:f1:ff:04:7f:05:30:57:90:cd:b9:2c:16:53:06:6c:a3:
92:a7:21:fa:8b:e9:90:c0:7f:d2:18:5e:20:f5:be:1a:ce:d7:
75:5c:8a:15:0f:63:01:b4:e8:44:dc:05:4b:08:58:d5:55:6b:
83:00:81:34:26:a0:6c:5f:be:e4:2d:ba:e6:e5:4a:ba:ba:09:
eb:30:71:18:f3:a3:32:ce:09:e3:30:10:07:4f:4e:93:67:f0:
87:0f:0c:62:2f:02:b3:4c:4d:f0:53:60:d9:17:4b:e8:55:7a:
1f:92:0b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:19 2025 by rpki-client