Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: rQBg3F91zj0S8vMlNpUJdaLdQV/gA9czjpWvFABsDNM=
Subject key identifier: 86:60:EA:6F:E2:88:A1:70:59:6A:B0:9D:63:1A:FC:AB:CB:C1:EF:63
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 0194BD1796FD795279C6B908033DA1BF433A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 0C47
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: 05LVNwIp8Ayi/3pNtOZ07/0EY1dzqjWU2F3aih/5toI=)
3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:fd:79:52:79:c6:b9:08:03:3d:a1:bf:43:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=8660ea6fe288a170596ab09d631afcabcbc1ef63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cb:82:a6:4e:55:03:c3:70:55:f3:8c:81:34:
98:2f:74:ae:bc:22:97:25:6f:28:6d:7b:e1:07:6c:
9c:85:fb:1a:ce:c5:68:e0:0f:55:23:c7:ac:af:b8:
9d:23:02:be:20:94:30:42:6d:8c:89:0e:24:94:ac:
de:5a:e5:45:ce:53:c9:9f:c5:dd:08:a3:ff:1d:5e:
33:8f:c1:72:8c:ee:c1:cf:79:df:35:98:7f:e7:e9:
51:eb:28:e9:d1:b7:2b:20:8e:91:dc:b8:82:c8:ae:
53:cd:f0:0f:f6:0c:42:3e:25:80:01:e3:aa:b8:f3:
d2:0f:81:7b:ea:2f:0c:8a:f5:29:16:16:11:7c:7c:
08:87:80:74:01:0a:95:10:a1:90:ef:2c:df:ce:87:
f2:f5:db:c9:33:de:33:2b:8b:79:28:d4:a2:a3:96:
34:e6:ed:f9:f0:ad:c6:32:b4:f0:28:a1:62:91:2c:
d4:d1:3a:92:58:a8:fd:1c:1d:55:ce:06:9b:bd:fd:
25:10:73:91:ae:3b:6b:8a:f3:cb:28:4a:1c:8f:46:
c3:a2:4d:65:dd:de:4e:2e:80:c6:b2:db:6d:bc:2e:
1f:ab:86:6d:3c:de:b9:9e:bb:fd:99:09:65:0e:88:
1a:eb:6c:f9:af:40:f1:e0:30:8e:3d:b0:ea:91:98:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:60:EA:6F:E2:88:A1:70:59:6A:B0:9D:63:1A:FC:AB:CB:C1:EF:63
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3f:50:66:bd:b3:f3:09:bb:ac:2e:40:44:f5:c9:5c:6a:17:
44:88:a4:a6:e7:39:a4:99:2d:f6:9b:c1:f2:32:9b:31:e0:7c:
d4:bc:da:96:fe:59:f1:83:d6:9e:9b:5f:22:68:c1:e0:da:ad:
bc:cf:78:1b:3c:bf:66:e8:bf:67:04:e8:8f:c6:06:47:83:aa:
5a:8f:0c:d1:b8:ad:f1:98:46:aa:35:79:a0:05:f4:be:58:6a:
e5:33:40:59:78:f0:5e:6c:9b:57:94:90:c0:dc:90:6f:17:8f:
54:d7:9f:1a:48:4c:01:9a:88:c6:86:29:9a:73:71:bf:ac:fd:
fa:2f:ec:a4:ba:da:f2:33:12:c9:5b:8c:d0:77:5c:c3:8a:ef:
b8:81:87:e8:97:8b:dc:c4:91:58:a3:a1:6a:13:e9:4d:fb:07:
eb:9a:fb:13:59:2d:f6:c4:34:8e:11:24:21:ba:32:b1:42:fc:
de:1b:cb:28:a1:eb:21:e9:bf:4d:c9:45:54:e8:4f:89:ab:ef:
d5:44:a4:b1:a3:69:14:8d:64:7a:95:3b:44:3d:0d:e2:9e:51:
f0:60:65:e0:90:1c:8a:80:f6:3e:e2:20:ec:1a:37:e3:dc:ab:
00:40:e4:30:8a:f8:95:4c:8f:14:c7:ad:6a:2f:96:ab:d9:46:
53:24:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client