Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: 1myrCqVwWUanH7LipV6wqe6CcNpPh8R0l6eh1lsYKKQ=
Subject key identifier: 02:EB:A2:DF:6C:D5:00:63:BA:4B:F0:36:4A:8E:1D:FE:D0:F3:E8:2E
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 0194BD17DFEB12D99E5D8313E3D2B3992D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 039C
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: DcukgyYEPGEDCE2jhqDenbpgwQ0.roa (hash: UxePdxhnaJhTHnsptC11Be8Ml9ZCMOUofgmVBklPgMc=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: Cf6pTQLchxU9dFPEAt+9qWkC8FpCqTFbJm9KlEgY668=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:df:eb:12:d9:9e:5d:83:13:e3:d2:b3:99:2d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=02eba2df6cd50063ba4bf0364a8e1dfed0f3e82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:8f:ed:b1:bb:a5:74:f8:4b:4c:57:25:31:
47:ee:d2:ff:39:c8:e1:3f:c2:e4:86:87:cb:0c:2f:
4d:b3:fc:ca:1c:26:a2:7e:df:b3:58:ff:64:98:aa:
30:c1:d8:02:99:7e:2f:a5:de:7e:61:88:df:5d:e5:
e8:6f:aa:01:10:f4:50:2f:eb:de:68:c4:3b:a8:f3:
55:ed:bd:28:d3:e9:77:7b:e0:3a:04:22:76:d2:ab:
bd:5f:1f:af:24:6f:48:8e:f4:9f:11:54:23:66:ff:
da:26:01:90:9d:23:9b:81:08:7a:b6:af:51:97:d9:
2f:4f:a1:37:d5:28:9d:43:f7:7f:86:b2:67:d7:a4:
3e:9a:45:25:51:5a:96:92:72:6a:39:74:bb:17:22:
96:17:5f:e3:06:36:03:49:af:b4:4d:70:d6:05:01:
b4:ea:7b:7d:ba:96:df:91:d3:11:f9:ca:71:a3:0b:
61:3b:c9:95:68:bc:58:1e:b2:0e:ab:bb:d5:61:d7:
ca:b0:1d:a0:a1:d0:5b:57:05:e7:78:05:cd:a8:c0:
6c:9c:d4:ab:21:4b:25:e6:5d:5c:04:ca:49:ab:aa:
64:b3:b5:77:28:82:6b:7e:9b:18:d3:b8:35:06:73:
de:cd:09:14:0b:fc:78:b6:b2:2a:02:f5:3b:46:e2:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EB:A2:DF:6C:D5:00:63:BA:4B:F0:36:4A:8E:1D:FE:D0:F3:E8:2E
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:84:69:dc:28:40:b4:81:d4:21:14:18:89:56:cd:b3:cc:92:
97:af:b9:ec:fb:02:e2:d5:15:d9:9f:93:6c:62:fc:1f:25:01:
d3:9f:86:35:9f:26:81:13:75:a6:4a:92:20:d4:66:ef:79:0a:
49:3e:78:5c:6b:b0:c1:2c:07:9c:45:44:a7:29:60:47:b4:31:
99:9f:91:f1:68:fc:4b:92:e4:07:bc:67:ed:cc:2e:d7:89:26:
e0:e0:e8:b4:34:18:19:f1:0f:da:38:56:eb:c9:6d:9d:f3:05:
94:00:83:3b:d1:82:05:97:26:31:15:58:00:03:04:67:5c:00:
78:e8:21:35:8e:13:70:ff:ae:2d:b9:8d:9c:d9:7a:20:ac:aa:
5e:eb:a9:c1:17:e9:dd:15:ec:a9:57:18:6a:a6:f1:c8:10:f9:
f0:bf:ee:f7:2e:0e:6f:ac:7a:6e:d8:ac:0b:e3:be:5c:97:0f:
87:25:63:5d:2c:21:70:c9:88:d6:7f:f1:6e:db:63:e3:c5:4f:
4f:1f:a8:ee:09:0e:80:41:a4:d5:60:24:35:2a:c5:e8:af:ea:
70:4f:4f:ea:32:69:9d:9e:90:f8:c9:db:41:e1:e6:c0:9a:b5:
aa:0d:b1:47:fe:69:d7:0a:46:0a:64:cd:01:0a:cb:aa:0f:47:
8f:71:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:38:03 2025 by rpki-client