Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
File: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft (raw, json)
Hash identifier: B0zmps+JLPGZPCVL5rlS1OvbigN1fcub4ismMlh6nyY=
Subject key identifier: C7:80:B5:64:C1:02:F7:73:FF:00:1B:89:00:C7:CF:55:DC:DD:2D:3E
Authority key identifier: 4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
Certificate issuer: /CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Certificate serial: 0194BCA99FF3FC70BA261508D5F201760989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
Manifest number: 0453
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: 69EZo_UvSYLCIwLzPyqCblCyZzI.roa (hash: 2naW8CuEgpZKAi+BoeweFMMKRLa2fsvkiMt8udbwEtM=)
2: Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl (hash: VNbeba8dgrUBAIKP4oWsFqg5/uph5kNoNvHDHphiEkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9f:f3:fc:70:ba:26:15:08:d5:f2:01:76:09:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3e596a24d43650cb60e8fcc9e44d6f8c929d35
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=c780b564c102f773ff001b8900c7cf55dcdd2d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:6e:cb:f7:0a:72:00:66:d1:50:82:86:6f:
cd:f5:49:b6:ae:91:33:c4:9a:85:20:3c:99:a0:45:
75:c2:ab:3a:33:c9:13:63:5f:3b:3f:a0:10:20:37:
4c:03:a9:d3:55:94:4d:0b:57:9b:51:39:bf:ad:3a:
f4:44:34:db:70:16:e2:4a:60:c4:de:27:ef:f5:17:
18:50:78:16:35:48:22:9d:d2:db:62:4d:d4:62:d1:
fa:8e:97:e7:11:7a:4b:ea:0d:1b:8a:5c:e3:22:39:
73:d6:f8:55:2a:e3:da:ad:87:a7:eb:ed:ea:40:88:
d9:86:a8:ed:12:2a:2c:d9:60:c3:b7:fc:fa:70:72:
2f:07:3c:4f:fc:72:36:65:b9:c0:fa:67:6d:6a:2b:
93:dc:60:6c:6f:61:83:b2:4d:8b:be:0b:a2:71:10:
cc:b1:4b:45:de:2e:e1:15:14:d6:f0:90:ec:35:db:
2a:0b:c4:f6:9f:28:a1:e7:ad:48:ea:96:72:a0:41:
0e:d9:ca:22:a5:17:23:9b:24:48:93:98:2c:e1:a2:
e1:3f:f1:37:48:c1:30:96:8d:c6:07:e7:11:77:a2:
4b:73:20:6e:23:37:2b:0b:c1:4e:57:67:77:62:75:
7a:c3:d3:df:92:03:11:51:ff:ab:8a:e9:dc:b5:6d:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:B5:64:C1:02:F7:73:FF:00:1B:89:00:C7:CF:55:DC:DD:2D:3E
X509v3 Authority Key Identifier:
keyid:4B:3E:59:6A:24:D4:36:50:CB:60:E8:FC:C9:E4:4D:6F:8C:92:9D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4b2fb2-c0ab-4eec-8d01-33d18bf6df55/1/Sz5ZaiTUNlDLYOj8yeRNb4ySnTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:e9:66:70:f0:ea:10:49:5c:b8:de:ca:e2:c4:ff:10:4a:
be:03:de:0d:b4:af:ae:0e:08:65:64:6f:4e:93:78:b4:3f:5b:
09:ba:4b:1b:b1:66:58:8b:e5:57:97:74:dc:6c:84:f9:d2:b8:
a6:4f:93:46:bf:8a:46:ba:bc:8b:8b:9d:25:17:26:77:0b:65:
2a:ce:3d:40:7d:25:76:21:31:00:3a:61:93:5c:14:3c:a2:ae:
66:9e:17:a6:cf:a5:bb:70:65:d5:c6:17:72:e1:bb:68:38:11:
1d:1b:0b:7c:72:e4:60:41:bd:8c:23:c4:18:3f:1f:c8:2a:10:
5d:3f:05:6e:f5:4d:2f:ff:2c:f1:74:4a:05:81:e0:ff:36:1a:
13:92:16:db:6f:e2:3f:eb:95:73:e3:dd:9f:57:e9:1e:8e:fc:
cb:cf:fb:5d:b8:0b:85:35:e7:db:b5:e8:ed:27:6e:d9:fc:84:
2c:de:6c:8c:85:0a:26:cd:7e:53:d2:2f:aa:4e:36:99:09:f9:
5d:99:d8:02:a6:ca:27:d5:92:f3:50:58:75:d7:79:44:c0:e1:
8f:c7:b0:75:38:eb:ab:69:d6:14:f5:8e:bf:42:b6:60:c9:79:
89:23:bc:b1:0a:47:8a:6e:21:c9:df:49:77:27:c5:9d:38:be:
12:ad:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:22 2025 by rpki-client