Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: zv+n9dC3VVHVCh67RUc+NM7vcEuibQCp8Ox3txx0nVY=
Subject key identifier: 07:4F:26:15:F1:FE:86:8B:8D:47:7E:62:58:FF:C7:2D:9C:D5:A9:8A
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 0194BC730ED647B019566999B2EE38B3AB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (hash: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=)
2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: 9+94yY54TWRF97wVE1WTRwFpWZUV9bO9v3iFYNA4AGE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0e:d6:47:b0:19:56:69:99:b2:ee:38:b3:ab:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=074f2615f1fe868b8d477e6258ffc72d9cd5a98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:26:4b:5a:b1:d7:7c:86:f4:56:1d:71:78:
6b:16:99:5d:c9:40:48:ba:73:cc:3a:e6:76:81:da:
af:cf:5f:23:3a:70:37:e6:5a:b0:aa:69:0b:7f:b5:
e7:d9:f7:0d:09:96:61:14:0f:f9:29:a7:80:3f:46:
39:b7:fd:43:fb:27:23:f5:c4:ee:29:a6:33:29:fd:
94:cc:7f:76:fa:2e:48:11:43:8c:53:b3:60:a7:16:
d8:98:68:38:d5:db:c3:d1:39:1e:70:5e:da:ed:7b:
5c:42:9c:1c:65:05:96:ed:01:98:96:1f:70:b9:2c:
b0:72:9f:7d:f2:78:b2:9c:3f:12:49:b0:ab:51:b0:
9a:8e:d4:c9:14:20:16:f9:ee:dd:cf:b0:05:8f:b0:
22:5d:03:f6:d6:34:43:f6:a6:b2:f3:d0:90:43:d0:
70:d5:9b:54:c1:0c:f6:9c:1b:d7:a7:7f:c6:7f:c1:
d9:58:3d:2b:a9:18:a5:37:16:43:0c:6d:d1:bc:a1:
ba:6e:51:c5:c7:c0:13:70:52:da:5d:71:7d:88:15:
d2:11:a4:d9:36:65:ff:4d:25:e2:e1:86:5c:9d:6c:
4c:4c:a1:4c:4d:62:6e:7b:8d:f4:d0:a0:5e:c4:fe:
be:8e:ae:aa:03:f8:05:70:e3:ed:96:35:d3:85:7d:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4F:26:15:F1:FE:86:8B:8D:47:7E:62:58:FF:C7:2D:9C:D5:A9:8A
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:12:d7:42:76:b4:1b:12:79:80:8b:1d:ca:cf:84:f8:33:ff:
2d:bb:8e:95:d2:3c:da:58:40:b6:24:0b:7e:10:17:53:be:57:
84:54:53:0c:99:7b:ec:91:ba:f3:7a:37:ca:55:ce:74:3c:a0:
ce:5c:81:18:ae:f4:b1:38:ef:94:59:50:46:3f:74:71:33:71:
dc:bc:08:14:db:76:eb:b0:af:78:32:79:29:c2:8c:05:f3:56:
46:b2:f1:d0:ae:1e:46:65:fc:71:b4:7f:e3:1a:b2:87:88:2c:
a0:bc:8f:b5:e2:0b:82:5a:92:c2:91:ab:2b:9b:3f:1c:f7:3b:
69:7c:c3:c2:be:96:ad:5b:b1:c2:eb:2d:3c:64:32:c2:82:0b:
30:1f:b1:6a:bc:90:38:7e:97:f2:5e:76:76:c8:e2:a1:6e:5d:
63:9b:53:ab:eb:ff:0f:36:d7:21:af:36:b2:5b:bc:5e:cb:7d:
b2:3d:f4:8a:46:2b:2a:24:0e:3a:88:af:d1:8f:95:22:af:c2:
cc:dd:2b:c2:16:76:52:3d:c4:ae:ee:d7:20:db:94:ae:6d:39:
f9:0c:d5:87:fc:9c:5d:c5:9e:8a:e9:54:b1:b1:6b:c8:3f:cf:
30:e7:6d:57:b9:41:5d:b0:ea:64:4d:0e:50:b1:54:7c:78:0f:
d3:a1:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:17 2025 by rpki-client