Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
File: c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft (raw, json)
Hash identifier: rQflQ8ZQICDYpvQBSdEL2RvV9kMYFYZcDOv7VB48Zew=
Subject key identifier: 79:8F:52:A7:7D:51:2B:41:83:82:69:80:72:0E:E0:74:49:FC:30:EF
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Certificate issuer: /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial: 0194BD4E7B665DED3BD5881E2DE660502FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl (hash: 4VNiptgNiO2uqCMm1pwql9BbgyjCpKrXbx9W9VCeQd8=)
2: clN4rn78ALDRkU6Gc0tlA0L76yY.roa (hash: HSAiRzNpFiSSFt3gFQJ5gPuQzchbTNDXBSkeKqZgK9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:66:5d:ed:3b:d5:88:1e:2d:e6:60:50:2f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=798f52a77d512b4183826980720ee07449fc30ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:d1:c1:70:d2:83:1a:2d:4c:7d:78:f7:ee:
e0:0c:bf:51:e6:c8:96:7f:2f:eb:b8:5e:1a:f4:7f:
7c:5a:36:1e:e8:a1:e6:0b:3e:c0:31:c7:89:a8:c6:
e5:0e:c1:c0:3b:11:a4:84:be:f1:96:41:03:68:57:
67:fc:89:22:20:a5:86:d1:dd:69:12:24:1b:43:0a:
45:67:37:dc:ea:c4:81:77:38:15:98:08:b9:a6:08:
e2:ee:2e:6e:91:2b:4d:b5:fa:e3:70:d7:d4:e9:99:
b4:9a:ad:7d:e6:b9:74:da:67:4d:a6:85:00:f9:59:
9b:ae:26:3a:2a:2c:99:3d:6d:b6:c0:5d:39:c0:2f:
1c:0a:c3:10:21:3a:43:69:75:5a:b6:30:5c:ee:df:
d5:34:55:52:63:89:d3:0c:ae:ae:62:b0:f3:b4:0e:
63:05:3d:24:a9:38:38:54:76:df:10:c3:73:b3:e7:
6b:b8:f2:57:5d:3b:75:2b:b1:fc:bb:51:8b:92:a6:
75:8c:12:7d:f4:b6:74:b0:b1:4c:e2:4f:af:8b:0d:
cd:9e:dd:d3:62:73:1e:72:1e:09:85:f3:da:e7:89:
01:56:26:88:2a:02:a7:50:06:4d:75:b9:69:1d:ac:
cf:a0:0d:55:7b:30:69:a7:98:c2:f4:0e:23:86:c4:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:52:A7:7D:51:2B:41:83:82:69:80:72:0E:E0:74:49:FC:30:EF
X509v3 Authority Key Identifier:
keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1e:14:48:f1:c7:ea:b6:0b:b6:4d:18:76:d9:c4:0f:ed:bf:
51:28:a4:7b:07:20:d0:01:8e:ee:90:de:2c:f3:df:91:d7:01:
0f:59:aa:59:de:76:e2:31:09:9d:82:10:d8:8d:2f:0c:73:3e:
09:da:14:93:76:23:52:39:a1:a3:21:af:eb:42:31:50:5d:13:
70:88:e2:59:cc:61:0f:c6:c0:fd:23:b4:25:59:09:28:37:5e:
ae:ab:6f:33:bc:1d:59:ba:54:cc:4c:ea:98:16:7d:13:a1:61:
27:d6:92:65:79:3f:31:e7:46:e5:f3:e5:e1:ec:36:40:94:3e:
05:27:9f:69:f8:9d:3a:4b:d9:9f:5e:4b:f8:41:5c:74:b3:cd:
1c:55:8c:d3:fe:fc:6a:40:57:d8:1b:d2:a6:92:27:8d:98:bf:
e7:2d:84:56:8d:ef:94:e5:c1:7c:de:fa:14:a7:39:1c:4a:44:
f9:4e:36:f7:84:44:05:43:11:13:2f:67:c2:81:45:03:59:7d:
0c:e4:c5:ce:3d:dd:b0:94:2d:60:93:d8:87:c8:7f:1d:ae:58:
4c:72:d9:8d:e1:ad:b4:35:62:32:d5:5e:21:a4:83:10:27:08:
cd:95:06:28:89:28:be:bd:55:17:78:58:3a:5c:0d:37:8e:37:
2b:df:8d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:36 2025 by rpki-client