Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: RxCsj3+XQD6WY5Obaqa2ougbPm7Wuzd4cT/ZLECCfek=
Subject key identifier: 82:5B:68:4B:F4:6E:BB:80:B4:56:D3:97:A7:E9:FA:5A:30:C8:23:85
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 0194BBCE3C4E96BD16904B28DA32B8303913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 06EC
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=)
2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: xDYZfBr+TDldpv1nbmOx6Gq5P2+6pbPqaA9jXrXkiLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3c:4e:96:bd:16:90:4b:28:da:32:b8:30:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=825b684bf46ebb80b456d397a7e9fa5a30c82385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:c8:f8:0e:56:8e:71:17:fb:e8:e3:9b:c9:
f8:77:65:dc:bc:85:a7:b1:86:54:7b:4f:fa:02:01:
a1:37:0a:28:4f:71:9e:b4:94:df:00:74:9a:f3:61:
a3:1f:99:40:b8:9f:25:fc:69:72:ac:95:47:79:d1:
13:fd:bc:c8:da:4b:2c:d2:f4:b9:eb:76:7b:3e:61:
07:5b:f5:60:3e:4f:c5:ab:34:89:7d:69:15:01:46:
c9:d1:23:e6:57:fd:b8:7e:bc:50:45:73:04:e1:69:
0c:4d:e4:9f:c6:5d:7e:c8:90:9c:f7:17:94:86:22:
9b:36:d7:ca:82:c0:22:31:90:a3:64:39:a3:a9:2c:
77:7b:4f:83:e3:73:c0:b0:28:75:99:fa:f7:06:6c:
39:2e:76:19:b3:e5:35:d0:b3:dd:7b:72:a0:d0:46:
78:29:38:76:71:70:4e:86:f3:c7:83:ff:57:59:12:
fc:8d:07:2a:11:60:d3:0b:fc:46:2d:a9:db:b7:b7:
83:83:9d:84:74:85:96:aa:1e:21:84:be:8b:17:96:
1b:81:07:7d:f0:02:5f:97:ba:0a:6d:ce:7c:19:66:
e9:be:54:48:97:89:a7:81:54:62:a5:98:50:d9:f4:
a4:e0:c7:40:03:e3:5d:ac:09:bb:7c:ae:3b:d9:fd:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5B:68:4B:F4:6E:BB:80:B4:56:D3:97:A7:E9:FA:5A:30:C8:23:85
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:da:99:70:3c:81:20:e8:1e:b4:dd:2d:cc:85:01:54:04:be:
9d:2f:99:a9:5f:5e:23:df:dd:96:60:59:4d:4a:e8:98:34:d1:
93:89:75:f8:a8:b1:1f:1e:f5:f1:b7:f7:40:10:50:ff:68:d4:
54:f0:83:b9:8f:8f:65:02:0e:3d:fe:1f:dc:d0:fd:0a:c5:5e:
a6:28:2b:7c:3e:2c:1d:7a:45:dc:05:5d:2a:f8:b0:66:06:b9:
3a:63:a3:cb:2e:38:56:9c:b9:8a:e6:b0:fe:49:b4:66:9d:07:
15:09:bd:b5:38:2d:9d:46:70:bc:a2:f9:15:f8:67:c4:af:00:
9e:35:ab:7a:cf:62:0f:18:9a:52:cd:ac:70:b0:1a:4c:82:75:
72:fa:cb:7f:68:ca:c8:73:b7:6d:aa:11:58:23:c7:d1:5a:26:
81:46:ac:6b:b3:ba:5e:bc:36:21:bf:16:73:0c:ba:86:08:2e:
5b:56:bc:b0:52:d2:40:6d:e2:78:1c:d0:60:f8:99:97:af:0e:
12:a0:be:e0:f8:28:4f:fc:80:4a:80:91:21:7c:10:79:84:e3:
25:35:35:42:93:ed:16:9e:56:56:29:b4:c1:86:db:ac:cf:bd:
8f:3e:ec:29:4d:83:db:77:fb:bf:2f:4d:f0:69:70:81:1e:d5:
9d:f4:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:37 2025 by rpki-client