Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: 88rhQe134Us7Tu2879dP3PcDvU184w7u4ut9rrw4QyA=
Subject key identifier: FF:05:74:AF:01:AC:90:07:5B:CF:CC:CE:72:47:1B:13:25:58:FB:AF
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 0194BCA97B268E1B29928B56CD33894B86FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 143E
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: QFUSwjutaEZztAdh/ueErUue/MDq5VLZ+rmcxbFdKJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7b:26:8e:1b:29:92:8b:56:cd:33:89:4b:86:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=ff0574af01ac90075bcfccce72471b132558fbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:a4:34:fd:14:f6:d3:54:07:47:61:65:0e:
11:ef:55:11:5b:c1:a0:16:d7:32:3a:a5:00:f1:e3:
5b:c5:c2:e1:71:d9:d4:6f:86:6c:74:77:2c:10:58:
1c:c1:8b:f2:e8:4e:67:29:77:de:5c:68:4c:b9:a4:
92:74:68:46:5c:f1:e6:c3:28:c1:b4:80:5e:78:b1:
ef:3b:13:30:fc:59:6f:e9:3c:ce:69:9b:a9:5c:66:
2d:98:04:1e:99:a8:c3:e2:86:0d:55:a1:b5:c0:4a:
a5:c9:c5:05:23:29:43:0e:db:e3:08:57:b5:c0:c7:
f8:f1:36:c8:b8:9d:e7:b6:81:c4:9e:e1:14:35:a4:
88:bd:99:59:99:ed:e7:3f:fe:03:cc:fd:63:f1:a8:
5b:86:96:a7:0a:0e:b9:59:3a:95:03:a7:04:8f:fb:
19:59:f6:76:87:10:f6:5e:af:a2:a2:65:92:4b:6b:
18:f1:e0:a4:7d:35:d0:77:d9:06:58:c0:ae:18:53:
21:00:c0:d7:cf:2e:e3:e2:46:00:c4:e4:d1:c1:6b:
33:a5:e9:d7:34:11:93:ce:79:08:84:57:c7:b5:0c:
5f:7d:80:4d:7f:7a:c4:73:ed:9a:f5:2d:73:9e:08:
bf:ab:bb:da:9d:a1:ff:b1:5a:ac:55:c1:9a:42:78:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:05:74:AF:01:AC:90:07:5B:CF:CC:CE:72:47:1B:13:25:58:FB:AF
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:35:b2:93:f0:8b:b8:a9:46:e5:9d:0d:4e:40:fe:83:d7:d6:
54:2d:18:ee:2c:4b:54:04:b6:48:39:e3:c9:ff:bc:e7:cd:21:
97:d5:ae:86:22:34:bf:0f:33:fb:55:ce:0f:8f:82:c2:ce:b5:
a7:bb:59:ce:1a:b1:96:03:2a:27:14:99:96:83:2a:30:3c:a2:
ce:d2:3e:d7:88:3e:56:86:3f:91:71:f0:85:19:0d:57:8d:8c:
d9:d5:8e:92:b2:ad:1f:8c:f6:5a:40:37:67:fb:44:3e:33:b8:
2b:19:20:03:ac:b8:e3:ff:32:ed:17:18:ad:e9:aa:8c:25:ef:
4b:49:f5:e5:bd:44:d3:35:b0:d0:91:3f:a5:b4:e7:16:69:cf:
3b:06:21:ff:4a:7f:af:48:0b:1f:5a:6b:ed:b7:77:c7:a5:14:
23:58:f7:5c:01:be:e1:62:8d:63:46:a1:81:85:16:f3:28:41:
18:65:cb:ee:5c:71:96:3b:4f:80:bc:c0:4a:c7:3e:dc:99:22:
8d:2c:50:67:90:8d:14:53:76:c6:82:cf:61:b9:29:b8:4c:21:
f0:a1:7a:06:9e:54:f2:ff:20:96:56:c8:f2:24:ff:74:56:64:
6c:63:04:12:39:62:25:db:ea:84:93:a0:8c:05:c8:51:5f:ad:
91:78:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:47 2025 by rpki-client