Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier: E5i2roh86oeRezyFZyz6UfWluegrkWU/cU38pLccVrc=
Subject key identifier: 3C:0C:DF:99:8A:70:FF:71:DB:36:4A:BA:5E:3B:CD:EF:52:E0:3F:12
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 0194BC3BE9E5C4F6F85E57A509C98D59E5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number: 0B1E
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (hash: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=)
2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: 6F1o1xL3LWhK+iu70YDgtKPbGxmT4T+7KteQ7Ky86hI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e9:e5:c4:f6:f8:5e:57:a5:09:c9:8d:59:e5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=3c0cdf998a70ff71db364aba5e3bcdef52e03f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:0d:0a:5a:67:6e:f7:20:55:ff:2d:0e:0d:
b5:e2:20:04:c3:de:da:21:32:ab:6f:07:5d:9e:e6:
48:48:a9:d5:32:5a:ab:55:01:b6:b9:f4:82:fb:52:
18:3d:f5:b4:48:e2:d3:de:b7:b1:02:f6:6b:d9:1e:
1e:8a:99:fa:d3:66:a7:5d:54:59:31:40:3c:2f:c8:
90:a9:05:30:dd:79:86:20:ff:23:18:d4:be:5c:f1:
70:a1:22:7a:b3:f4:e6:c0:b1:83:73:e6:51:9e:88:
fe:68:93:3a:0f:dd:85:a5:94:0b:a4:69:bb:8e:e6:
ae:6c:c0:3b:5d:d2:83:54:4d:ae:67:a2:bc:97:a2:
74:65:cb:45:7d:86:42:e7:3f:e8:3b:54:6c:9e:0f:
4c:a8:24:79:1d:44:84:72:d6:19:b5:1d:cf:c6:35:
8f:6b:7f:6c:6f:27:6b:10:25:2e:11:a6:9d:01:dc:
4f:8c:93:e4:5f:49:f8:fa:59:23:b7:e6:c7:36:35:
14:8e:44:57:5c:f0:30:6d:b6:da:17:de:2d:c9:32:
94:48:c2:98:e5:63:85:93:8b:12:a8:f9:c7:2b:5c:
31:c3:30:29:85:bf:d2:95:1a:91:d7:8a:94:3c:79:
92:c3:8a:28:aa:07:7f:17:6a:8d:0e:8e:18:c3:ef:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0C:DF:99:8A:70:FF:71:DB:36:4A:BA:5E:3B:CD:EF:52:E0:3F:12
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:55:5d:f6:79:2f:23:84:b9:49:01:3b:c0:61:e5:47:57:f5:
32:23:52:a8:4f:8e:30:e6:c3:1c:77:75:74:9a:3e:32:81:6a:
81:4a:2c:81:f5:5a:3f:b0:5c:b3:1c:d0:3a:eb:f1:7c:14:e5:
2a:8c:c2:60:58:d2:d1:ec:2e:18:c8:37:57:8b:86:90:e2:ec:
ca:04:c1:2f:62:a3:36:94:03:d1:26:e8:c2:ca:26:34:70:50:
ef:b0:a4:fb:94:e1:b4:b0:57:38:d6:99:ae:1d:39:eb:7f:de:
87:c9:65:58:49:35:44:af:29:6c:95:3a:ae:e5:b9:4a:58:93:
0d:0c:42:9f:23:cd:64:58:f4:1d:6b:1e:b0:7b:b3:35:86:93:
2d:31:23:3a:b0:00:87:70:3f:93:6d:7a:57:3f:6c:c8:b8:88:
ee:00:1e:be:5b:06:81:39:bb:6e:17:1a:da:de:72:8d:14:15:
f0:21:6f:60:0e:a9:5e:e7:78:58:f3:2b:7d:d8:99:09:ca:dd:
75:95:25:d6:48:83:19:01:a8:ea:c4:55:20:df:74:52:c4:b3:
d4:ac:88:a3:5d:73:c3:af:8b:b6:2a:49:c0:51:65:91:93:ec:
9d:14:54:7b:df:e6:83:50:c9:41:04:50:18:6c:4c:7a:8b:01:
fd:36:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:08:33 2025 by rpki-client