Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: Z+h0/SV41ZW1VaNR98eNtuiBpiwEqUH43muzBDfUYGY=
Subject key identifier: F9:37:7E:FF:0E:F5:29:E0:29:87:D2:42:CD:88:3B:DF:73:E5:D0:32
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 0194BD85B042C53A39B9B668250C71078164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: fom2n2+rLZukCGeL00T0VTp8bdCnRF/7ICTHpfblhPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b0:42:c5:3a:39:b9:b6:68:25:0c:71:07:81:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=f9377eff0ef529e02987d242cd883bdf73e5d032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:23:a0:65:72:8c:ff:1f:18:61:a6:4a:90:
16:7b:9d:38:ec:91:e2:f2:ea:1d:bc:98:2b:d3:42:
1a:d8:35:47:d9:0c:05:bb:f9:70:34:50:16:e5:a5:
41:e6:3e:90:c5:af:8b:d5:11:9d:4d:4f:8a:74:a2:
57:b0:2b:e4:76:ee:dc:9a:e9:32:95:08:91:6c:b1:
16:6f:ff:c1:72:98:a5:85:77:42:86:fe:5e:d4:96:
86:1a:bc:f8:fb:b7:a6:b8:2f:4e:8d:66:87:7f:be:
32:e9:ae:05:dd:2c:5a:08:b8:2a:5f:e5:07:4b:0a:
08:b5:8e:a6:7a:28:39:20:eb:41:51:d2:cd:a8:30:
da:47:3c:4e:5f:bb:17:d1:f2:0f:e5:b2:6b:6d:13:
ff:9a:9c:09:9f:91:00:62:e8:99:95:52:49:f0:e8:
76:d9:c2:fb:2c:4e:32:83:77:96:eb:ad:09:8a:af:
58:e2:59:e6:7f:41:6f:cf:45:06:a5:5a:d2:d6:95:
ea:c4:2b:58:61:49:63:58:75:91:6d:c6:a6:85:96:
1c:38:fd:5d:a1:6f:4d:a3:89:73:6b:e4:63:b7:a9:
8c:33:16:26:af:87:8b:8a:ac:a8:bd:c8:73:19:97:
a1:4e:02:99:cc:3c:9a:9d:2c:2c:1b:38:24:c0:d4:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:37:7E:FF:0E:F5:29:E0:29:87:D2:42:CD:88:3B:DF:73:E5:D0:32
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cd:d5:a4:df:f4:26:62:26:52:80:50:b1:b8:10:ac:d6:6a:
0d:c0:c4:50:d4:29:55:20:5e:51:14:b6:2a:6f:64:f7:1a:dd:
96:96:f3:9d:50:6e:d9:e7:47:3c:33:e4:7d:3a:85:9b:5f:9e:
05:06:e2:79:1e:f8:88:28:ad:ce:17:a0:34:8b:4e:b3:91:e0:
a7:90:aa:3c:64:9a:3f:ac:d4:da:a3:29:47:e0:c1:5f:22:7a:
20:0c:81:2c:cd:2c:b3:b7:a3:4e:57:31:1f:59:e8:b6:a2:95:
de:ec:24:dd:a8:8a:10:dd:06:a3:49:93:55:7f:34:3a:dd:77:
cf:68:cb:71:43:9b:52:0f:35:4a:58:19:69:36:1e:99:9c:c6:
45:42:f9:5b:80:50:f4:5f:98:f7:05:92:54:f8:7e:75:81:4e:
6b:5e:d7:c9:de:21:e6:ec:ec:4a:9e:d0:b6:39:f1:58:17:a9:
7d:29:80:e1:93:76:08:80:6e:4d:e0:1d:32:dc:46:20:7d:49:
a6:c7:dc:0e:3d:9a:66:bb:e6:8a:ed:a8:7a:f7:a1:9e:cc:cb:
2d:24:07:d0:c5:eb:b9:9f:d5:f3:ea:53:70:19:7e:40:2d:82:
47:81:7e:bc:db:01:f9:7c:d4:70:ba:15:13:5c:ee:a7:69:25:
2a:80:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:57 2025 by rpki-client