Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
File: zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft (raw, json)
Hash identifier: bSlsT2PDqzHmmw2xJino7lBMzBeKjqCkJ/T8tvyBMiY=
Subject key identifier: DD:B1:65:F3:15:D3:B0:EF:71:1E:DD:D7:AA:F4:AB:1D:7C:F3:FD:62
Authority key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Certificate issuer: /CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Certificate serial: 0194BC04E642936FAF65F626F013CEDFDA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: ZAf_TODdz2GvAFp8P1cZfLoHZ80.roa (hash: 9Jk74qPLddxgXTpIwOhtoLR2sBPTBQ9n+Rt24Gzi21Q=)
2: zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl (hash: 2kktGs3mg6uTbT1cxGKDDOC4Kly5PheYaIj1YkjNN+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e6:42:93:6f:af:65:f6:26:f0:13:ce:df:da:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=ddb165f315d3b0ef711eddd7aaf4ab1d7cf3fd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9b:06:f7:07:a9:46:20:90:4a:19:64:1b:b8:
33:11:a8:a9:79:4e:1e:d3:0d:ef:f0:d5:58:02:cd:
13:c0:f6:97:7f:3a:f6:c9:0c:44:62:06:4c:c5:8e:
57:13:38:ed:ae:76:29:68:5d:b8:12:4e:84:f2:71:
c6:f4:81:7d:d2:b1:9e:f5:8d:a1:36:9f:af:d2:ed:
95:df:18:d7:7e:d1:7e:b0:7d:45:fb:8a:cf:5c:e8:
64:2d:35:43:c0:af:f3:ff:8a:b1:f8:f9:7a:cd:ce:
45:ad:4c:20:ef:05:cd:2c:ff:ad:3f:d1:10:96:63:
d9:6d:ad:ff:00:34:a0:85:ba:4b:e9:09:0e:19:16:
2f:a6:32:5a:6f:85:50:f7:ac:bf:c7:0c:80:90:4f:
69:6c:e1:5d:49:15:02:6b:84:cb:0b:6b:e4:be:cc:
aa:5d:01:6b:79:1f:f8:e3:1a:7e:ee:17:59:0d:ea:
1e:56:85:ea:15:0b:2e:cf:a7:65:33:bc:26:97:ef:
79:6e:82:a1:81:a3:d5:58:5f:6b:08:bb:20:63:3e:
48:ae:a3:2d:95:62:99:9f:27:76:38:79:9f:37:6d:
d4:5f:dd:10:f2:48:fb:42:0c:67:61:eb:51:2f:cc:
d1:5f:74:0d:29:d1:c9:9b:47:76:05:1c:44:15:4d:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B1:65:F3:15:D3:B0:EF:71:1E:DD:D7:AA:F4:AB:1D:7C:F3:FD:62
X509v3 Authority Key Identifier:
keyid:CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:76:11:82:e6:52:12:d3:24:31:5c:d9:18:fd:ff:17:ac:85:
f9:e7:21:cf:15:0c:36:18:02:30:0a:ea:f3:ec:17:7f:ec:cb:
00:8d:13:e1:dd:c4:b0:4a:7d:02:3d:82:bb:33:d7:d5:1c:15:
90:a8:d0:7b:5b:f9:59:b0:14:97:72:92:0c:44:7c:55:13:f6:
25:33:00:75:bb:9d:b7:59:51:42:b5:47:57:18:bd:15:8c:f7:
03:8b:ba:4a:74:bd:16:8c:7b:04:84:4e:bd:70:be:fa:25:f6:
0a:a3:cf:f4:4c:66:54:d7:93:5a:a9:27:09:0d:de:f9:0f:38:
49:ef:c3:33:d6:69:5a:8a:78:0e:cc:03:0d:92:2d:ef:41:c7:
45:75:71:d5:6a:4e:0c:a4:ca:c5:4c:d1:1c:8c:f9:2e:57:5c:
e9:53:3e:e2:5b:01:d6:f0:a2:5f:5f:04:c1:78:7a:c0:fe:32:
97:9d:6d:30:27:20:6c:71:3a:c0:0c:0a:be:ad:d4:56:f5:42:
ee:b7:49:c9:37:f2:5a:93:9d:6c:1c:d0:3c:d3:f8:9d:5b:c4:
a2:7e:0c:23:e2:b0:44:65:52:1f:28:b0:ad:b7:12:d9:5f:69:
3c:41:f8:69:c5:4d:1c:a8:dd:9a:6a:84:dd:08:54:6d:c3:68:
a1:09:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:18 2025 by rpki-client