Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
File: _RHEZUr3AuWW61DRP6SG202bzgo.mft (raw, json)
Hash identifier: zuWFn4z67Fpyn1VWE643wZgzLko2BBrYodLvfTasjr4=
Subject key identifier: 42:DA:A3:01:64:B7:F5:F3:44:3B:28:DE:52:AD:2B:9B:BD:A6:C1:7A
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Certificate issuer: /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial: 0194BC04A80EDF0BA42EA87C4508581AA0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: W3jKuxB_RcgliKc6SOrb-E9lQW4.roa (hash: flRFJj0cuA1GRJx+AJmEhdqQRbsG/XKga+ETKIMZCEI=)
2: _RHEZUr3AuWW61DRP6SG202bzgo.crl (hash: IxK8efmcBLZiVFu/4DgY5Ki+dmMVTJz9HBtiC6EO1QU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a8:0e:df:0b:a4:2e:a8:7c:45:08:58:1a:a0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=42daa30164b7f5f3443b28de52ad2b9bbda6c17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:df:ca:87:3c:c6:49:3e:67:3a:ac:bb:b7:
fb:bc:54:97:6b:a2:e6:b3:ef:88:84:c1:49:d8:9a:
b1:d7:c3:9c:f0:ca:92:8c:d1:a5:60:13:bb:5c:d2:
c8:a3:be:b4:9f:40:c2:f5:09:84:7f:23:76:f4:be:
11:75:bf:cb:47:0c:65:83:59:02:eb:96:1d:c6:be:
05:b9:d0:d2:e6:9c:48:b3:2b:61:86:cc:e3:39:e6:
78:68:b1:70:61:d1:16:c6:bd:62:74:28:7e:06:16:
27:d6:b7:7b:11:4e:04:9c:b0:d2:0a:02:4f:e0:5c:
98:b5:73:c9:2d:39:bb:d1:c6:d8:05:58:80:cd:29:
94:9b:cb:a6:dd:cf:41:ac:bf:04:2c:78:c4:15:58:
df:d9:10:25:7f:2d:17:e9:a4:27:ef:7d:ab:4e:3f:
84:b5:2d:ea:21:34:36:36:48:b9:e2:fe:d2:fc:c5:
53:bc:e7:1b:33:b0:43:e6:d4:15:c5:0e:07:46:da:
1c:68:13:92:04:3a:4e:44:38:37:5f:d5:a3:e4:1c:
0c:a7:9b:d0:79:eb:fe:2e:26:46:fc:a8:6d:f5:f9:
5f:35:3a:6f:dc:b9:3b:8d:70:11:ac:c7:04:4b:2c:
e3:29:cf:9a:8e:57:a7:15:92:6e:71:58:cc:89:e5:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:A3:01:64:B7:F5:F3:44:3B:28:DE:52:AD:2B:9B:BD:A6:C1:7A
X509v3 Authority Key Identifier:
keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fe:d7:28:0f:cc:5d:b1:ff:35:0d:fd:08:87:85:c8:be:60:
c0:7f:66:d4:cb:82:5d:d7:d2:de:85:c6:70:4e:dd:aa:0e:fb:
b3:fe:6a:d6:ae:c2:d3:81:38:c5:81:39:a0:e2:45:4c:95:be:
08:76:46:d2:ea:a9:ca:76:75:a2:bc:68:6a:19:b7:d3:c5:32:
b1:3b:89:04:bc:ec:76:bd:ba:25:af:fc:75:27:95:9b:ec:53:
a8:db:5b:98:c1:1f:13:1d:d2:b2:42:25:58:c2:d7:4c:a5:28:
d5:d4:5b:90:42:e1:9d:5b:ac:0c:1c:0b:b7:48:62:6e:cc:3e:
7f:43:94:db:51:91:d1:54:3a:30:21:13:cd:98:84:b7:00:7a:
cb:05:60:d0:dd:db:28:16:1d:bd:dc:1c:90:f8:eb:6d:87:e8:
28:a9:c5:36:fa:71:c5:7e:6b:44:d5:ca:06:8e:b3:87:bb:51:
a7:f0:c7:fb:b8:ce:21:92:f3:1c:d9:b7:a3:bb:02:07:25:e5:
49:bb:58:ff:29:6e:b0:91:b1:f1:0c:e6:5a:0b:66:05:d5:3c:
af:b0:df:69:bf:fe:b2:30:9f:76:f3:b5:16:a2:99:a6:d7:f1:
f4:0a:71:4b:e5:66:f5:97:dd:ab:55:5e:b5:ee:f0:b5:e8:7b:
92:3e:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:30 2025 by rpki-client