Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: sWxrui+m3ufbOz3uwrKt4mZL/UlCBu4FaRCYoDnSnug=
Subject key identifier: 81:69:A7:C6:6F:8E:E2:A6:9F:B0:24:6F:B5:AA:84:46:82:F5:B0:44
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 0194BD4E4BA0BAE3F2183389C045629BC5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: z/44OcuAyHj5xPHc0J9KMnL3fVmyXAcDi9i4c4tz0Nw=)
2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4b:a0:ba:e3:f2:18:33:89:c0:45:62:9b:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=8169a7c66f8ee2a69fb0246fb5aa844682f5b044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:5e:a0:de:c3:18:59:46:a5:f6:94:8e:3f:
96:38:c3:46:c0:74:2a:5c:b2:41:d6:8c:ef:8d:32:
d6:b2:1b:7a:e2:d4:38:8e:6b:e9:bd:49:8f:c2:7f:
28:49:35:7c:1e:25:ee:63:78:cb:8f:c0:41:42:aa:
0b:d7:33:44:18:4c:30:5e:08:eb:9c:37:e1:cd:40:
d2:a9:e5:09:f1:d6:0f:87:a1:1f:a7:b3:27:7f:47:
35:39:ed:37:f7:d5:92:e4:1d:a7:54:d3:6a:ef:2e:
d3:ae:9c:35:d1:f6:fb:c0:4e:2b:ab:88:2d:75:d8:
1b:4b:5c:da:a3:16:64:3b:46:ec:a1:92:b7:0c:59:
82:01:9f:a1:63:6f:21:95:64:02:6a:b6:3e:46:66:
b3:6d:92:60:61:f9:b2:8d:cb:08:89:cb:8f:5b:81:
04:df:f6:bd:fc:e0:5c:c6:bc:96:9c:2b:49:32:4c:
08:9f:22:5b:c1:4d:c7:49:34:00:b4:92:0c:63:bd:
30:a4:25:41:80:5c:a4:83:74:b6:df:38:68:ee:93:
00:92:3f:f2:31:18:1e:9d:26:71:8f:53:b2:52:a4:
8f:c3:2b:e6:dc:6e:42:22:bb:13:06:b1:69:6d:1f:
f9:23:9c:e4:14:03:65:af:97:5f:96:0f:e2:4b:e7:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:A7:C6:6F:8E:E2:A6:9F:B0:24:6F:B5:AA:84:46:82:F5:B0:44
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b1:d8:2b:61:7d:de:7b:63:48:7c:dc:a8:ef:ec:a9:fd:3e:
f9:b5:53:1a:1a:2c:3b:47:13:b7:01:3e:99:5e:84:ce:5b:44:
a6:b9:c9:9f:86:96:ff:37:3c:86:41:2d:81:9f:5c:7c:95:aa:
ba:3b:a0:ff:1f:29:37:b8:8f:59:c9:45:12:99:11:1d:80:3c:
f3:ed:b4:a3:76:de:20:dc:a6:f8:23:7b:18:17:d1:f4:01:93:
aa:75:b0:e1:6d:59:5b:c2:8c:2d:3f:22:15:a7:41:a2:2d:e3:
5f:2f:54:89:11:c8:e3:6c:55:77:a8:6a:d4:23:08:f7:de:63:
18:c4:77:28:a0:b2:78:af:1e:34:72:f8:9b:1e:d2:30:01:f4:
53:b1:e0:6c:f5:2c:73:67:a0:13:85:46:15:a2:fd:6d:f6:18:
bf:df:85:d0:25:2b:ea:27:e8:91:20:ff:2f:a7:ff:f0:8b:5d:
d6:55:5b:f2:26:c6:fd:00:98:37:53:ab:f0:b9:02:8f:38:28:
1b:82:3b:b2:37:ee:83:65:ed:b7:f4:20:98:e5:cb:33:52:1a:
a1:0e:00:27:86:8d:b7:be:0d:02:4a:08:82:48:2d:96:0f:00:
62:75:2d:25:cc:73:f5:68:cf:1a:f7:e8:29:65:5a:41:19:79:
20:52:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:54:19 2025 by rpki-client