Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: GUNpGVNdYOuSCz2dgHnwPaSVj5ZFMEAnbCdFeisq39s=
Subject key identifier: E7:10:5E:C0:F4:23:AB:FE:99:14:D4:71:1C:26:FE:A6:02:87:36:E8
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 0194BBCDCECD21C4BDC6091870FB945F8022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: XA0CQqMcOPYYccV3sepNDTS0yhw.roa (hash: 4pMf0cRKCztacYsNRlFf/QDf3VqwFTPcvQ/RQcBBA+8=)
2: ZZQHimemT1Yqan2xZ5-h03SN2fg.roa (hash: 6foyLQXTh/VHEAP/zlvNZfav60Qqh/Jwfeou7E9KXFE=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: CY6zePruTUeSu2Z8JS0Dky/8uTgIK2lihcLi6Xl1xew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ce:cd:21:c4:bd:c6:09:18:70:fb:94:5f:80:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=e7105ec0f423abfe9914d4711c26fea6028736e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:47:5f:32:58:6a:b6:b3:ae:9c:cf:a4:67:
c3:d9:1e:6e:66:12:46:a8:57:9e:fd:90:b2:9c:b1:
51:cd:96:6a:5f:9e:96:b1:4d:f5:55:87:2a:ae:1e:
fc:b2:47:ed:f7:13:a3:b6:81:6d:fa:c1:ef:6e:1e:
6b:21:cf:27:57:a9:44:a8:36:ed:b1:cd:fa:c0:d7:
5a:33:df:a7:b6:e0:23:64:f6:03:8d:cb:70:35:7c:
50:1a:8f:bd:a1:3b:1f:a1:03:90:a6:89:f9:dc:35:
b1:cb:c9:eb:74:84:34:0d:62:5e:24:bf:1f:93:84:
c3:f5:b6:85:fe:54:df:6b:9b:05:6f:1e:9f:06:cc:
72:45:7e:31:f9:f2:98:e1:dd:68:99:17:82:e5:10:
44:90:12:e1:e4:aa:4e:64:ca:96:68:c6:91:c2:71:
2b:08:a8:a6:53:0b:4c:21:9e:ff:19:b3:44:b1:6f:
63:64:60:37:6e:96:da:45:ac:f9:b7:68:f4:ef:73:
2d:95:d8:1e:89:31:12:19:c7:64:36:b5:df:c0:de:
fa:9b:8b:cd:b9:c7:02:59:6c:27:9c:7d:85:fa:43:
90:64:5e:be:18:cf:a4:55:1a:85:82:9b:9e:d1:95:
8b:21:4c:2e:c1:23:69:dd:03:ef:5a:73:b6:46:4a:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:5E:C0:F4:23:AB:FE:99:14:D4:71:1C:26:FE:A6:02:87:36:E8
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:87:d9:5b:72:e3:de:29:eb:b4:4a:d2:8f:8c:1a:7a:47:59:
04:32:8d:3d:73:e0:c5:bf:f5:c5:83:96:85:72:55:f8:1a:b3:
39:c4:8e:19:81:4e:51:1e:17:38:2a:e9:60:33:e2:24:30:d0:
66:15:4c:8b:30:fb:fc:89:19:f8:68:88:80:7a:3c:ce:38:24:
dc:fd:9e:ed:ae:e5:a6:fa:d4:ec:d3:33:40:07:1a:5a:4f:76:
4a:3d:13:dd:66:ba:10:d7:ba:a5:1e:8f:ce:6b:52:cd:c4:e4:
e9:91:c6:55:2a:9b:a0:6a:42:57:91:39:91:0d:09:93:b4:a9:
b4:3e:5a:f4:b5:13:1a:d2:c2:1a:0f:58:df:8e:22:d4:a4:27:
7e:1e:b0:b6:d8:6e:42:5a:56:15:e6:d6:53:92:90:fd:cc:55:
7e:f5:6a:4f:6f:c8:5d:5d:12:1c:21:78:ff:14:dd:4b:f8:81:
f7:38:02:90:45:01:d8:04:33:b3:29:e9:b8:5e:ef:74:52:1a:
c6:9e:fb:7c:13:2f:be:ca:41:d6:f6:c8:ee:f7:af:4d:00:f6:
a7:26:8d:cc:0b:f3:3c:df:b3:31:4b:00:33:18:93:ec:04:4d:
6b:39:ad:6e:14:08:19:21:87:de:92:ff:f3:8d:0a:99:3b:6c:
11:c6:aa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:24 2025 by rpki-client