Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier: 6wfx0mbJ6MIVnWc3Jdi2uVDr3WSOc2ivNIzGp6sogC0=
Subject key identifier: 13:95:63:FD:2D:B0:35:D6:93:9F:4A:E4:BA:C8:E2:B4:AF:DF:B5:77
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 0194BBCE23C85A2543A4ECCC421C56FFC1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number: 0BC5
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: HcDM3RpVP89AqRJjOfBR+N6HWIBmiQxX5y0gpEE1rOU=)
2: bmxfR1YI28e9AvruScrILUTRG3I.roa (hash: cqN9qg0IAUOQT2Uuvb3v+aRnSBYZJQOZClfPWFzUISg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:23:c8:5a:25:43:a4:ec:cc:42:1c:56:ff:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=139563fd2db035d6939f4ae4bac8e2b4afdfb577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:03:6f:fe:41:9b:a3:9c:75:45:5c:ee:fa:
dd:f9:c2:56:3c:9e:a1:1b:cc:83:50:73:0d:53:9b:
13:66:f9:b6:fa:a1:fb:42:d8:6e:cf:1b:06:a6:30:
e2:58:99:57:9c:dd:5d:36:fb:94:be:6c:2c:39:59:
b8:b5:7f:39:d4:2f:b6:18:f7:08:82:21:df:21:a6:
53:e3:30:af:d7:52:66:bf:74:5f:ee:67:2d:54:0f:
53:a3:be:dd:3c:94:f0:f8:62:d3:b0:28:80:4d:a2:
1f:fd:65:8d:62:b2:bf:4a:ce:ae:a0:8e:27:0a:d6:
d5:24:00:9a:a3:e8:59:26:47:79:71:15:39:47:71:
c9:4e:2b:c1:01:d2:85:d9:fd:fd:fe:f5:a8:22:aa:
ec:9c:a4:b2:cf:70:5e:c6:c2:5f:f7:a3:0f:a5:f8:
2c:06:51:89:97:2f:48:6d:7c:bb:f8:35:0b:ee:39:
5d:cb:85:c0:b9:97:d6:b0:ff:36:f5:43:8a:41:62:
54:2e:05:f4:36:9e:2a:9c:49:e2:81:3d:61:d9:4f:
87:bd:9f:a8:d4:e3:de:82:d3:44:d4:cd:09:19:48:
5a:bc:bc:96:bf:a7:91:7c:e3:d9:2c:55:16:dc:86:
bf:d9:a0:2f:45:aa:99:64:52:9f:46:67:d5:2a:fa:
a9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:95:63:FD:2D:B0:35:D6:93:9F:4A:E4:BA:C8:E2:B4:AF:DF:B5:77
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b5:44:96:bb:33:d3:52:c7:cc:b0:d5:d0:26:a9:a3:b2:c7:
8a:87:f1:00:d5:4c:ef:ba:15:42:8f:51:20:4c:a7:ff:cd:19:
d0:80:40:3d:cc:ed:c3:fd:96:7d:16:c2:b1:72:7b:cd:eb:19:
fc:cc:fa:91:76:1e:84:33:8a:1e:12:23:15:9a:48:a0:82:2a:
b6:4e:c0:ff:e8:7a:fd:36:4c:41:69:1e:e8:6c:15:a2:be:39:
23:f7:ac:13:e3:29:f3:15:a4:2e:dd:cb:a5:15:da:36:12:16:
9d:f9:47:58:0d:51:dd:b1:0e:2b:2c:ce:02:ab:fc:5a:62:ac:
f3:dc:9e:e4:f0:8d:e2:89:a7:49:bd:4e:36:63:fa:df:41:fb:
e9:3c:40:79:70:21:9a:04:74:8d:35:eb:a8:24:5b:1f:89:e8:
f7:1f:66:cc:bd:01:11:5f:73:32:9d:41:05:48:c9:52:5b:09:
79:00:11:8f:df:a4:cb:bb:4c:03:fc:82:e7:10:29:82:38:62:
18:3c:3e:2e:7d:8a:2c:d4:a0:20:09:3c:fd:66:0f:30:ec:cf:
3e:12:de:69:0f:83:82:27:7f:2e:81:0f:8c:f1:b9:79:ef:aa:
ec:62:79:61:57:57:4b:f2:b9:43:11:75:aa:92:62:7b:ff:21:
93:de:df:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:41 2025 by rpki-client