Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: aAQsxu6LT3R1FYncs7Fn+FUuAuBmDAs1mQ1BkXjdz6g=
Subject key identifier: 46:67:44:A6:8C:9F:3B:56:32:46:08:03:09:02:0F:00:3C:55:CE:BE
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 0194BBCE88E9F2F25BFE6ED0B0257C10A5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: cfnUmQWBmOnQqdASm5WAt1WRTh84qOjK0wTR8gy+7hA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:88:e9:f2:f2:5b:fe:6e:d0:b0:25:7c:10:a5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=466744a68c9f3b563246080309020f003c55cebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:32:45:d4:d2:e5:f9:18:b4:45:9e:40:d3:
96:df:0b:2c:5b:97:66:ea:cb:14:26:87:5f:0b:b5:
a4:31:1c:50:af:63:27:3f:46:02:be:8e:04:a9:c4:
f3:ee:76:71:01:af:f6:ca:44:4f:17:45:41:cc:27:
44:97:a4:ec:13:e3:95:e9:27:c4:75:60:05:b8:4d:
f8:3c:a2:5f:40:35:46:97:da:73:98:e3:40:15:fa:
d0:48:df:ca:e0:81:e8:ba:b6:62:77:4f:cd:50:cb:
6d:77:68:90:1e:46:ec:69:ab:28:de:f7:32:83:74:
66:fc:26:c7:31:21:56:47:c6:0c:2c:f0:24:71:c7:
3e:ec:52:a0:75:bf:60:da:51:c5:5c:10:5c:a9:8a:
76:41:c5:98:ab:6d:d6:d1:ed:15:7b:40:3f:00:f0:
b8:9b:ab:77:71:3a:cf:69:39:71:b9:f8:c6:99:42:
04:63:48:60:c6:bd:76:f7:07:61:8e:cf:58:95:44:
ae:2a:21:3d:45:18:e5:e8:bf:c8:59:a1:18:7c:f1:
40:10:de:81:fe:75:94:08:13:80:ba:80:94:b7:3d:
a3:d9:91:52:e4:69:1a:33:40:8d:fa:e2:eb:ef:6e:
28:62:64:06:07:e2:c4:88:a6:d2:f4:ba:11:57:41:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:44:A6:8C:9F:3B:56:32:46:08:03:09:02:0F:00:3C:55:CE:BE
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:db:14:ea:e6:51:99:26:65:4a:2c:55:05:62:4c:e2:7c:53:
08:7e:e4:c0:ea:f3:41:14:c0:ce:e8:f5:6c:d2:a7:1f:36:35:
70:97:ee:43:14:1d:43:0f:07:d9:c3:e6:40:5c:d2:dc:3d:29:
a7:bb:01:48:a6:10:28:72:f2:40:0b:22:91:ac:d9:7a:f9:00:
98:aa:49:a6:3a:45:61:d4:86:c5:e8:17:29:99:2f:67:86:80:
dc:03:29:7f:fe:72:32:2e:46:9a:88:ec:53:3d:b5:c1:9b:a7:
77:44:4d:aa:5e:17:1e:8a:55:38:6f:f5:49:e8:e0:02:e2:da:
84:4a:5a:f4:71:53:dc:d2:da:fd:74:89:6b:3f:54:18:cb:00:
87:30:2d:f8:1e:60:ba:f3:3e:f8:59:71:6a:cf:d5:1d:8f:0a:
d2:0e:51:99:b8:ae:31:7e:87:28:1a:1a:22:d2:fc:5f:da:1a:
7a:ce:b8:98:38:0c:45:dc:b6:b7:4f:7c:c9:87:f7:ab:ba:eb:
58:76:8c:63:d5:05:a1:fd:ad:24:4e:fc:a5:40:f1:51:ca:17:
a4:6e:2f:ee:82:81:31:00:b3:14:73:d9:39:50:c4:3b:4f:75:
2b:e9:81:10:30:c5:ff:39:c8:53:a4:9b:38:2e:cb:68:45:95:
fa:70:14:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:12 2025 by rpki-client