Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier: voU3c2+OVLhu8ErHnuXj+yo6J5pE1HJjem5uqjaCJhc=
Subject key identifier: 14:DB:72:17:9B:32:A0:DB:70:29:4A:87:A8:1E:56:8F:E3:99:F8:3D
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 0194BC3C6B407A6322FFC77CF1807E9E4219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number: 0E9A
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=)
2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: sEGYjZiKCDLp36AlAKjF83x/tF4nIkZ+o53FYfS3HVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6b:40:7a:63:22:ff:c7:7c:f1:80:7e:9e:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=14db72179b32a0db70294a87a81e568fe399f83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b2:68:97:9c:34:6d:12:5c:49:04:9d:bb:48:
82:1e:a0:9a:1a:e2:38:92:fd:0e:25:aa:a6:bc:41:
2d:3f:a5:ad:07:04:d1:84:b1:94:4f:70:ea:94:15:
32:21:cc:3b:0d:e7:8e:7f:90:dd:28:b4:99:64:8f:
c2:3f:a7:fd:ca:d6:bd:45:72:20:d0:7b:ad:7e:e6:
81:19:a3:d5:82:35:1a:c8:fd:05:33:40:c2:37:48:
13:01:23:cb:b6:78:b2:3f:2e:be:44:8b:6c:b3:61:
9b:75:97:6c:75:83:9d:ba:c6:f9:a7:53:25:82:e8:
be:e8:54:cb:10:97:0c:29:a2:52:6f:43:f4:94:a4:
25:1c:fa:3b:d6:85:36:a4:86:1d:16:2e:03:a4:39:
35:fa:84:88:d4:c6:7a:22:6a:f3:c2:c9:d7:cc:84:
c3:02:d9:c1:9a:ea:69:c7:c0:5d:9f:15:c3:a9:8e:
ec:d4:65:35:51:02:14:22:e0:d3:cb:93:c2:de:a8:
b7:10:e2:14:2c:24:41:2e:ed:0c:f3:05:d1:cf:1f:
fe:4b:c8:de:0c:08:64:c2:59:c7:cf:5b:e1:21:66:
a9:a5:08:e7:17:3f:18:11:28:60:c1:bc:7c:4e:76:
96:16:4b:5e:b3:cc:45:de:1d:95:f2:3e:80:62:90:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:72:17:9B:32:A0:DB:70:29:4A:87:A8:1E:56:8F:E3:99:F8:3D
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:61:29:58:ef:36:a9:f0:c3:4a:9a:62:be:8e:ad:2c:25:91:
ab:f8:3d:1e:77:d3:5c:84:10:78:55:f6:94:fb:b4:8f:9c:1e:
07:e6:53:46:5f:fb:3a:4b:bf:ad:af:cc:ea:3b:d3:a1:7c:1e:
8c:32:b3:48:4c:a5:cb:cd:72:ef:41:85:85:89:67:69:46:7c:
2e:0c:25:44:e0:99:ff:62:fb:24:fb:4a:49:1c:44:fd:4b:d9:
5d:0e:50:63:2a:5a:63:57:6a:09:72:8e:47:da:34:98:48:ee:
eb:1b:47:b4:ee:8c:3c:3a:ad:ab:53:67:e9:3e:fc:9e:4c:b7:
8a:99:17:22:b7:e8:3a:81:b6:e3:f9:e4:b4:a1:ba:43:6e:83:
f0:cd:e1:df:be:97:da:9c:49:0c:81:fd:c9:53:03:a7:94:e1:
63:dc:3b:95:b2:62:b4:f1:43:e3:a8:9e:56:a4:32:30:8d:e2:
f3:fd:97:b1:83:32:88:cd:0d:53:90:76:54:c3:ad:c9:b1:1f:
a9:55:1a:c3:7f:7f:71:96:13:02:d1:c3:83:9c:68:94:aa:9a:
88:ea:9e:59:66:78:0a:44:20:cf:64:7c:7e:82:09:7d:30:42:
bf:95:b9:28:8a:54:4e:20:fb:e1:7e:b8:30:bf:59:6c:19:1a:
d0:9a:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:24 2025 by rpki-client