Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
File: mZKB6H1em4dY8kDnju9xAsQBIYk.mft (raw, json)
Hash identifier: sVw20/VK0qKfCK4uooeieVOaCdR1tFFytettzYbB2MA=
Subject key identifier: 39:1E:16:A8:46:04:E3:E9:38:C3:A6:C4:2F:BB:67:94:88:43:E0:0E
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 0194BD85A8FDA5D85AECE2D875022E757321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: PF8Dfwpieuc3szZWNlM6zxbOCaw.roa (hash: eEI5JJg+vshmiZesKoh8QcSvz/GrsPF5AtTzxYWQZk4=)
2: mZKB6H1em4dY8kDnju9xAsQBIYk.crl (hash: D3w0vmhSGnxe865R1p0q2hhWADf7uXR2k+SEunwxaXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a8:fd:a5:d8:5a:ec:e2:d8:75:02:2e:75:73:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=391e16a84604e3e938c3a6c42fbb67948843e00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:a9:f8:f3:0d:ca:2e:73:40:58:10:61:3a:
f1:9c:7f:a3:ae:bd:eb:b1:b5:18:20:a0:c2:b1:f8:
31:2f:d0:8c:f5:51:fb:81:82:5e:05:bb:62:03:c3:
2c:0d:e6:bd:0f:c7:50:3e:41:1c:e3:cf:91:4d:d5:
9f:60:39:b2:2d:b0:dc:e7:43:fe:5c:3f:e1:e9:7f:
da:4c:c2:f0:61:f6:2c:a4:f7:5c:c9:7a:df:ca:5e:
3d:b2:a0:8f:30:7a:7f:ec:f7:53:9e:02:09:5b:8d:
8d:70:4c:88:b6:71:44:61:d3:47:d9:0f:6f:7b:d6:
8a:15:91:2e:f8:14:14:57:03:34:c8:95:45:1f:7e:
09:40:76:08:b6:86:9f:6f:ec:d0:25:89:83:d9:48:
74:aa:ab:c0:6c:05:b4:57:42:72:68:67:84:64:8f:
35:a9:4b:7b:2d:17:e2:6c:f3:c4:30:3c:8f:a9:de:
6d:31:08:58:6a:60:fb:af:a2:b6:a4:9b:88:68:65:
f6:33:60:93:c9:d3:d3:45:27:83:3a:ce:00:67:6a:
51:d2:9f:e2:00:87:85:f7:91:72:37:40:f8:5d:ab:
64:09:5b:44:35:6f:dc:80:f9:c8:90:f7:f5:45:91:
6c:8b:45:83:04:fc:cd:bc:77:44:12:b8:15:89:c5:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1E:16:A8:46:04:E3:E9:38:C3:A6:C4:2F:BB:67:94:88:43:E0:0E
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:12:38:95:82:2f:d0:44:d7:c8:6a:04:2a:15:70:ae:8d:08:
b8:30:45:a8:89:3e:82:0a:7d:c4:5e:40:7b:63:8f:c1:39:78:
66:f3:50:ce:69:f3:1a:22:bb:bb:53:8b:48:6d:3a:1e:f3:df:
a3:a8:0f:5c:3d:58:9c:bf:bf:32:57:41:99:ce:11:0a:65:cc:
ea:71:72:6e:c0:7c:8f:cd:58:f0:1d:fa:73:00:51:5d:31:06:
a5:cc:a0:1d:29:3c:3c:df:0f:c1:f0:7e:6e:75:5b:09:06:80:
f6:b2:35:27:11:15:9c:67:9e:d8:4e:09:26:c1:31:9e:a5:17:
d1:fc:c5:c0:56:04:ec:da:38:a8:64:37:01:d0:57:9f:65:8d:
35:28:c0:3d:c9:a0:d2:41:b2:92:4e:8f:7f:0b:9e:7d:de:fc:
c5:ce:3b:04:e2:25:94:05:48:a6:b1:a0:49:59:28:ec:85:1a:
e7:41:6e:fc:9f:b3:30:0e:de:ed:27:f3:d6:4c:dd:dc:08:03:
bb:34:db:a5:93:c2:69:56:d5:71:ab:1b:d0:b4:ad:9c:28:29:
f5:6d:94:45:3a:fb:da:91:0f:22:91:66:80:a0:8c:3c:e2:15:
06:5c:6b:60:8c:98:d2:4f:6b:63:94:95:41:cc:4d:b5:28:bb:
35:65:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:09 2025 by rpki-client