Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: VzNbATWgQ8u6QUIcT/h2cJb+HBWwd9FpFLs9UBpI+AQ=
Subject key identifier: 17:2C:3D:23:F8:99:81:E5:70:71:E4:7C:BD:D9:ED:7C:FB:A6:ED:DC
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 0194BCA9E870AFE393278BB8B2E2298DEF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: hPBXvKQdaqlVU4nQ-2Te7vaa8Bo.roa (hash: c9xr2QPdOJHBS76dYaN+BTyMMmlA60SbcteFKaCmJMA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: VHuu30DjJs8LzEGlzi6d2ZnTpaxfKXHtpAfjYw8KiMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e8:70:af:e3:93:27:8b:b8:b2:e2:29:8d:ef:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=172c3d23f89981e57071e47cbdd9ed7cfba6eddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:99:cd:db:b7:a4:1a:ff:62:83:b3:43:47:
17:bc:f6:36:36:e8:a6:b6:98:df:85:b6:62:ed:bf:
9e:69:4c:ac:34:e8:7d:19:b6:7c:75:b6:ab:6f:07:
5e:5a:27:34:92:66:a8:6b:a7:38:8e:41:9b:1a:95:
ac:ba:3c:09:95:4c:c8:a1:99:5b:d2:cc:90:11:91:
70:3c:26:9c:52:0c:26:ab:37:e1:03:96:a7:82:b8:
74:a7:0e:d8:1b:32:bd:13:b1:7e:42:85:83:9e:d5:
4b:7a:1d:a5:e0:c8:ee:09:2e:69:32:1f:70:cf:3e:
c2:2a:55:f1:7d:b5:7c:7f:dc:92:1a:ac:34:5a:06:
ac:91:24:25:c6:b8:80:31:35:45:a5:62:f6:2b:4c:
2d:b7:6e:91:b0:a0:1e:3a:b6:6f:7d:44:6f:ea:24:
ec:2f:03:63:b1:2f:5a:34:42:42:92:bc:b1:86:0c:
2f:75:5c:d2:aa:32:ae:03:2b:e4:59:30:de:76:e6:
38:2e:04:a4:ba:69:d2:a1:45:34:f5:0a:2c:12:59:
3c:af:af:6d:a6:6b:f8:7c:1f:b0:b3:f9:8a:1c:b3:
a3:ac:27:45:e9:ec:46:78:06:71:2d:41:6f:01:6d:
71:3e:36:7d:3a:b6:7a:81:02:53:9b:1b:a0:42:bb:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2C:3D:23:F8:99:81:E5:70:71:E4:7C:BD:D9:ED:7C:FB:A6:ED:DC
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d5:b4:7d:17:98:15:5d:fd:7a:32:16:2e:96:65:c4:1e:9b:
16:a8:18:e6:da:2f:f8:fc:59:4f:de:fd:26:44:bb:03:31:eb:
d0:65:d6:87:a4:d5:d5:74:1e:3f:74:71:98:23:cc:4c:91:80:
cf:41:3a:66:ac:a5:4d:1b:8c:31:88:99:e7:7f:ba:4e:96:41:
5f:8a:5e:a9:65:8d:e2:6a:15:b6:10:18:0c:90:a9:42:09:7d:
5c:08:6e:e9:f9:2c:32:a2:96:d0:ee:7d:fb:e9:20:d6:a8:9c:
65:30:6b:fb:5e:0d:43:7a:59:5c:a7:dd:27:a3:f7:7a:0f:0f:
be:a5:4e:a5:7a:47:6c:c6:5a:1b:90:43:c0:5e:ed:1f:ea:3a:
ff:b2:12:7b:79:76:94:7e:3e:45:68:69:5b:98:95:57:1f:d7:
92:51:ae:ca:91:1f:c3:0d:30:c6:28:26:4a:fc:e5:33:11:fd:
1e:0a:a4:1f:d3:07:a7:0c:e4:62:2b:f7:5e:75:72:c9:c1:5e:
93:b2:d2:cc:e0:9c:82:e1:5b:65:55:7b:3e:1f:a9:12:4c:ba:
0c:88:16:de:dd:5e:c4:65:c6:00:c2:c8:fc:7d:03:1c:a1:fd:
4f:d7:4a:1c:a7:9a:d6:1a:24:55:26:6e:23:58:48:fd:c7:27:
f2:50:59:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:48 2025 by rpki-client