Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: +NfEN1Obk/tmUiyLBk6dyv4yTnrZw3CFG0ebhO8oy8o=
Subject key identifier: 68:24:C1:45:07:E1:CF:39:22:52:25:2C:86:B6:5B:8E:A4:E5:84:55
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 0194BD8574AEF36E4473C071462D32CD6B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 1147
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: luIEE3g1XYyhJq/K5IOox1S1dQI8Vir2L3z5jFrLdfY=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:74:ae:f3:6e:44:73:c0:71:46:2d:32:cd:6b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=6824c14507e1cf392252252c86b65b8ea4e58455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:2a:ec:bc:0d:d2:05:12:69:f4:35:78:aa:
fc:61:8b:29:3b:34:11:29:19:19:55:14:80:68:2e:
c6:9a:b5:b1:98:23:27:08:b9:96:5f:cc:c4:d4:83:
2e:b3:e8:24:71:3d:04:6e:a7:67:73:9a:4d:96:66:
33:95:e7:92:12:89:a0:20:93:6b:bf:11:25:ce:29:
1b:2c:8d:5b:2b:9c:f2:f7:75:81:84:9d:7e:13:69:
aa:f0:f1:2e:ca:6c:9d:4d:54:d8:d4:97:cb:3b:0f:
f0:23:86:59:b6:03:ee:ea:5e:63:47:f3:41:82:08:
68:d3:df:7c:ba:90:b1:eb:6f:d5:0b:4a:bd:50:e8:
67:be:3e:b6:41:5e:17:ea:ed:4b:41:62:d9:e8:0e:
c0:6d:e9:21:34:f7:a4:fd:c8:c7:b6:61:18:ca:ec:
12:43:fa:fe:ef:32:01:82:24:e3:34:d9:f2:ee:46:
b3:31:9f:cb:af:c0:4a:e5:75:f7:e0:f9:32:ee:ba:
d1:13:59:39:a0:39:1d:94:79:06:d6:f1:e1:8d:42:
95:2a:9e:1e:84:22:d2:41:a9:d2:67:62:53:a9:24:
b6:2f:dc:8b:76:0a:e2:31:5e:3f:20:4b:64:48:f1:
61:49:2b:ff:5a:6e:61:55:46:f8:92:17:86:4d:93:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:24:C1:45:07:E1:CF:39:22:52:25:2C:86:B6:5B:8E:A4:E5:84:55
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ff:bd:b0:8d:47:f5:e2:13:ff:41:29:9b:41:70:14:b0:71:
f0:fd:46:47:37:0b:46:a6:3e:fd:3b:91:a6:15:7d:39:fd:bf:
8a:67:08:63:c5:62:2a:13:3c:79:d3:b9:fe:e2:07:35:a3:34:
f3:d5:13:f1:7c:c5:44:f2:9e:32:0c:f3:91:98:aa:a7:32:b1:
b7:05:05:06:39:5d:91:3c:c4:24:41:8f:07:9b:49:d0:bd:4b:
01:49:a5:58:72:df:ef:5f:d9:47:27:8e:9f:72:27:dc:9d:69:
1f:85:be:70:07:cd:f8:e0:6a:29:80:b1:37:3f:ed:7c:54:25:
ca:41:e8:cb:0f:8a:65:1d:6b:b6:c7:e7:7a:91:97:b8:4d:d7:
39:19:a3:e5:a4:13:3c:93:bb:ca:01:21:08:e1:cb:93:14:b4:
9a:d0:17:5b:9b:28:c4:6a:20:6c:9e:3f:65:72:53:3c:01:e5:
aa:5f:df:8a:99:20:7f:5b:bf:3f:19:49:cf:7f:a6:24:9f:14:
3e:1b:92:4d:82:91:56:b2:7f:2f:a1:12:d3:44:1b:65:f7:4e:
47:fa:97:47:10:70:37:fe:68:c9:09:68:a8:fc:e0:39:fb:f9:
2c:14:50:90:4f:9b:f3:95:4d:71:47:d5:63:e4:3b:80:65:22:
fc:48:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:27:27 2025 by rpki-client