Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
File: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft (raw, json)
Hash identifier: suQ577kzQBRXc8Q9mohtNBVKlJDx+v/iY5oewRTxB5Y=
Subject key identifier: B8:DC:8D:FF:71:35:9F:16:5E:A6:AF:73:43:0F:6D:86:FB:67:BB:C0
Authority key identifier: CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
Certificate issuer: /CN=cddd902a1271270027e4577778ea35883b4515f6
Certificate serial: 0194BD1768432A7906BE452B159C89E7CABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 7hm_KHqhJuMofuZish7Y5P9MWPY.roa (hash: c/wjMtOnBM+CzMEbufMPCuRYdfvoi8O1cMabJ+ZyFGg=)
2: ZllHOFY_PgpOxzOT4Q2RudzM6t4.roa (hash: TN32M7RxY+57PDosFpZdyPaIy1h6+U9oN98Epgj3jE4=)
3: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl (hash: rFItNyjE8ZziDClDDUkeskBTudRyWEhFNtE5/NMEUZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:68:43:2a:79:06:be:45:2b:15:9c:89:e7:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddd902a1271270027e4577778ea35883b4515f6
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=b8dc8dff71359f165ea6af73430f6d86fb67bbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:82:5f:f1:68:e4:1d:0f:4e:ce:87:25:93:
da:ab:1a:0d:34:30:e7:4a:a9:52:02:11:c6:27:ef:
59:0b:87:bb:95:0b:c3:8d:68:d0:ec:ab:04:10:47:
00:46:48:d0:b0:dc:0e:a8:a2:91:f0:1b:52:9c:e4:
e8:fe:02:bf:b0:c8:a4:44:4e:4e:f1:dc:52:ad:1f:
58:c7:54:1e:ee:dd:c8:f0:c7:96:ac:19:47:3c:45:
b6:36:f4:13:e7:5b:22:3f:cf:85:87:ba:f8:35:ec:
a8:30:e2:9b:8d:ed:d2:cc:d1:a4:fd:b7:92:e3:47:
80:ec:81:2c:bd:57:ea:1f:66:4b:56:e1:6e:39:44:
01:76:a0:fe:26:52:83:ad:25:3a:e0:18:ac:08:36:
a9:27:fd:0a:67:80:2f:61:f0:d4:f2:8a:ab:ba:08:
b9:93:a2:0d:53:69:9a:d1:64:8a:87:b5:b9:7a:f3:
a8:bb:c9:62:92:f6:c9:f1:b6:12:4f:b1:10:48:19:
75:3b:1e:eb:bd:cb:1f:bf:b8:f2:48:6f:93:18:7e:
74:3c:d0:1d:4a:ac:a0:01:a0:cc:50:96:d3:db:51:
88:14:7e:91:f2:73:28:72:0d:b2:8c:71:b2:01:ee:
ce:56:3f:ee:67:29:10:b1:66:84:c5:e7:2f:df:d2:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:8D:FF:71:35:9F:16:5E:A6:AF:73:43:0F:6D:86:FB:67:BB:C0
X509v3 Authority Key Identifier:
keyid:CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:98:11:93:ee:03:47:75:7b:5f:a9:b8:ef:c2:f6:e8:e1:5f:
6e:0c:d2:a8:c2:bd:4b:8b:53:ed:ca:7d:00:92:17:1e:2e:f8:
b7:63:a4:9b:9a:b5:79:00:15:69:0d:83:1c:bb:5b:87:fa:38:
40:ca:e2:7d:27:07:bf:6d:24:b4:e3:5f:7b:07:2b:97:75:74:
d2:f5:d5:5c:bd:e7:69:ab:8f:03:84:8d:8b:cb:7b:10:8d:6d:
d3:6f:d4:84:96:3e:06:59:61:e4:77:ef:4f:f0:19:25:c0:3c:
e2:e7:53:f9:e7:ac:16:2d:6e:8f:83:a3:33:1c:1f:69:8a:46:
4c:b7:a8:d1:db:58:f2:2d:f3:97:5f:38:e6:16:01:07:46:44:
4d:0c:5a:e2:cd:bb:d3:08:ba:f1:e4:40:a5:fa:25:06:fe:1e:
1f:77:d1:1f:45:4c:3d:13:45:84:d8:4e:9b:b9:21:df:18:82:
37:cb:47:2f:c0:0f:95:c4:6a:37:89:ac:5a:c0:c5:01:0b:eb:
f9:e7:76:0a:f5:49:7f:5f:7d:e2:5b:0d:55:60:34:78:6b:51:
99:d1:b8:bf:ff:2b:5e:f6:a3:e1:57:b6:ba:bd:3d:67:5c:20:
ef:a9:d9:9b:eb:39:f6:12:31:3a:ef:ca:4b:7a:dd:1c:76:17:
e1:83:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:33 2025 by rpki-client