Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: OdbHY2/PrWUr7ZrO66slICv9L8KvKwZ+yz85J5hPy9Q=
Subject key identifier: 96:AF:BB:F3:7B:C3:8C:DD:B0:87:CE:05:92:36:C0:DD:CF:B2:82:B7
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 0194BC3C8722CAC99695DDAC1A56E1760EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0331
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: w9ywF+DMX+MmR/CrBuV3Vq+/llDTeGmG6yNGCFuQ+4c=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:22:ca:c9:96:95:dd:ac:1a:56:e1:76:0e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=96afbbf37bc38cddb087ce059236c0ddcfb282b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:61:d0:aa:ee:81:28:d6:9a:ca:b3:3c:f5:
1a:52:ff:85:8f:9e:8d:0c:ce:80:6d:da:72:6a:38:
a5:91:aa:4c:7e:7c:ba:62:7c:29:4d:cb:ce:2d:90:
1d:39:52:44:4a:81:92:2f:33:e3:73:c2:4b:2d:bc:
d9:65:c8:56:e7:05:ff:91:17:90:fb:23:6d:2c:f6:
08:54:93:43:97:ed:f0:64:51:bb:71:68:e1:21:2b:
37:00:38:1c:f8:97:e4:6a:78:25:00:16:de:11:23:
99:7e:87:09:67:74:0f:9f:2e:68:ee:4e:63:9c:a6:
3c:57:3a:c1:76:fc:11:ab:b5:94:bd:c9:d0:00:a3:
67:0f:7b:96:49:fa:49:b6:db:56:c9:11:4a:c7:72:
e2:f0:e6:d3:af:d4:ac:b4:7b:ac:aa:c5:0e:4f:f9:
a3:1a:0a:9d:e6:d1:bb:40:22:5f:ac:18:41:ec:91:
23:de:3a:02:fe:8e:47:55:2b:2c:d1:51:d1:e1:da:
1c:23:f2:b1:97:79:2f:30:e8:73:c3:14:47:14:81:
8a:a5:50:e0:8d:93:e4:07:b8:f4:ab:49:ec:e7:a5:
f2:eb:a3:16:3f:f6:16:a6:b4:78:dd:ff:e1:ce:12:
dd:1a:b2:79:0c:2b:b3:79:b3:79:68:2d:f8:f2:31:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AF:BB:F3:7B:C3:8C:DD:B0:87:CE:05:92:36:C0:DD:CF:B2:82:B7
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:13:45:74:d7:6c:e1:02:63:db:fb:59:0c:87:b1:8f:a7:cc:
e5:99:e2:13:32:87:06:55:ab:0a:11:66:93:c6:d5:4e:08:00:
0b:56:cc:75:09:c8:25:b7:13:a6:dd:22:71:39:7a:4a:15:81:
15:a0:11:2b:89:72:99:5d:e6:5e:69:f1:65:15:85:3a:a5:7a:
1c:35:4b:af:1f:94:d0:aa:2a:39:57:b1:dd:b3:09:c9:17:2b:
f4:f1:23:ca:04:41:0e:c0:70:0b:21:d6:f4:33:4a:4c:44:e9:
e2:fb:2d:1c:39:87:46:a7:d7:ec:f7:df:e7:43:a3:c9:21:ce:
fe:3b:00:f8:eb:22:32:b8:89:1f:de:d1:cb:14:65:18:ba:7d:
21:2d:73:4a:00:4a:f3:3d:71:9b:7c:9c:8a:56:76:f1:18:17:
93:44:4a:de:16:00:3d:26:d8:97:0d:46:e1:3b:71:52:0c:26:
13:a4:ba:7c:11:38:53:fc:b5:2b:af:af:2b:b6:e5:eb:52:f9:
7d:26:d8:1e:20:23:67:2e:7c:fe:ed:61:7b:b4:04:9d:a4:0f:
59:21:22:4d:4e:6b:50:14:60:1d:bc:f2:74:6e:a7:19:f9:77:
b8:31:af:a5:85:98:b4:52:e1:d2:69:d2:6c:cf:ed:64:a4:e3:
2a:6e:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:38 2025 by rpki-client