Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: v+dl/o02ipGhxxeOMDD2IO7maMLAZAkRzsiz+uArpPI=
Subject key identifier: C4:9D:9E:40:2D:33:DC:22:26:51:B9:A5:67:D7:3E:53:6E:97:B4:38
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 0194BD178231F1F923EDB878CBE27740C26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 087D
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=)
2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: MJ7aZtojNTA7d4Bv3kz5la/F3aZ+uOLWbOFbXfZZdQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:82:31:f1:f9:23:ed:b8:78:cb:e2:77:40:c2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=c49d9e402d33dc222651b9a567d73e536e97b438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:ba:2d:2f:a8:b7:f8:07:43:05:e8:07:60:
ef:39:4f:22:47:86:28:81:45:a5:41:a6:73:9f:4f:
df:01:2c:d9:e6:a3:ed:b7:80:3d:c6:7a:c8:74:d7:
66:ad:5f:11:1f:dc:92:7a:2d:d5:e4:56:e3:4d:c3:
8e:d0:32:12:ae:6e:39:f5:7d:d2:6f:ac:3d:78:59:
10:4d:26:40:fd:4f:5c:06:bf:83:f9:ec:63:19:d0:
44:0a:32:22:d2:1b:b1:ef:11:22:09:05:88:68:d5:
f8:0c:49:54:9a:24:d0:e9:b4:41:97:90:c3:68:a4:
c8:20:e8:07:3e:0e:76:68:0f:e0:46:43:19:48:4c:
53:e2:52:99:09:49:c4:df:cd:68:0a:eb:5c:bf:c5:
b7:76:a8:a3:e7:b5:21:5e:db:b3:25:e9:b7:5e:aa:
81:44:18:26:3b:e1:bb:85:12:11:3b:40:b1:f5:ba:
81:d8:07:57:a3:0b:f2:13:26:d1:e3:d1:33:aa:10:
47:03:13:79:65:d4:50:c2:31:00:6d:08:8b:01:53:
57:e7:0b:09:0a:3a:48:a3:f6:59:12:0f:92:4c:f1:
8f:e1:f6:b1:e9:af:de:4a:16:e7:b8:7a:a0:31:c0:
ec:8c:bb:31:e0:90:f5:0f:1b:f5:ab:6f:8a:e0:4e:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9D:9E:40:2D:33:DC:22:26:51:B9:A5:67:D7:3E:53:6E:97:B4:38
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:48:28:01:1c:7a:ff:e8:4e:f5:c3:e4:98:22:18:65:ed:
1b:76:5b:e5:a0:aa:58:bc:e1:a3:cf:2f:71:4e:47:96:2e:7f:
e7:ea:0f:e8:48:39:a2:8e:34:d7:ea:a4:fa:0b:34:54:a7:3a:
69:84:20:cd:31:4a:79:ad:3a:bf:34:80:b0:07:d6:57:39:68:
39:6c:32:e9:15:26:be:9a:c5:78:21:2d:0e:bb:40:99:dc:49:
01:30:b4:30:d3:cd:40:1f:51:8e:e1:08:e8:fc:7b:df:7e:ac:
5c:47:9f:52:a2:41:c0:e6:35:b2:7a:42:b5:7f:75:f4:51:37:
97:b2:e0:0e:60:74:62:31:45:50:b2:60:c4:08:c2:6b:7b:da:
04:26:49:98:91:4e:fa:8c:34:91:ff:be:7c:91:0e:f5:02:7f:
05:5e:b9:fa:40:0c:e2:8f:0b:55:f7:a1:2a:6f:93:89:fe:d7:
45:69:8b:04:a0:48:46:48:9c:6a:61:18:b3:0e:e5:25:05:f2:
d4:72:4d:49:ff:cb:86:00:de:e0:06:af:f1:b1:8f:be:c3:e0:
c4:da:d0:0b:0a:02:d6:f1:89:eb:95:a0:55:d4:f7:d8:44:b5:
cb:77:87:fb:40:4a:d3:38:7b:09:fa:aa:47:95:01:97:b6:dc:
c6:b0:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:23 2025 by rpki-client