Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: HF0itGcuFDecjDwVkw/+sESdOBvhLZAePsWis1U1V1Q=
Subject key identifier: F1:9F:F7:97:A5:92:85:FB:B1:48:D7:30:61:F1:08:79:C7:45:9A:E8
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 0194BD853AB366A86262893A974104CA81E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 08F0
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: jdAFrpyLLBSPHK1YYzzBNh343fBiPyQ045b2Cl61aAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3a:b3:66:a8:62:62:89:3a:97:41:04:ca:81:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=f19ff797a59285fbb148d73061f10879c7459ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:dc:61:43:69:a4:3b:a5:5c:37:cb:ce:27:
a2:e3:f0:4d:e2:a5:6d:ca:c4:17:77:f9:69:da:b6:
48:c1:7c:46:8c:6e:f8:a7:e2:aa:bb:a9:cc:2a:9c:
76:32:f5:38:fd:a9:8a:55:5c:1e:7f:49:69:a1:45:
64:cd:d9:78:b9:40:9f:23:7f:ac:b2:68:9c:6e:40:
f5:e1:91:3c:6f:88:e7:17:ae:72:4e:1a:db:0d:21:
08:e7:d5:55:12:be:38:4f:90:fe:33:e5:a5:f9:09:
e3:27:e0:49:b8:d9:63:a0:79:2e:1a:dc:91:27:74:
77:6b:ff:f6:d0:b1:36:7e:ee:20:83:74:8d:a4:32:
3c:44:e7:a8:51:0b:27:05:a8:6a:95:82:bc:7e:26:
cb:b5:95:23:6e:99:e0:17:78:84:9c:72:13:67:31:
bc:9b:fd:5f:3d:3a:a4:88:b0:56:64:3d:36:dc:ff:
c8:1d:9a:ca:01:21:cb:cc:fd:ba:d8:03:b6:cf:9f:
31:b3:c4:46:f9:61:10:e9:6e:6a:d1:bb:a0:a6:fc:
b2:2f:88:7d:79:da:eb:1b:73:6d:52:26:87:52:39:
6f:04:23:a8:81:ae:4d:b6:ab:ec:4a:4f:56:bc:bc:
1e:06:16:01:53:82:ab:07:fb:5a:a6:70:4b:34:e4:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9F:F7:97:A5:92:85:FB:B1:48:D7:30:61:F1:08:79:C7:45:9A:E8
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fc:26:59:ec:14:dd:90:c0:ff:cb:e5:53:5f:6e:b8:a8:52:
0a:5d:07:85:7a:7b:fa:f4:f4:dc:a1:1d:81:43:3a:43:64:f8:
57:3b:a8:0e:8f:44:20:e6:9c:29:27:2a:c9:3c:0c:30:68:00:
48:f1:10:26:ce:71:cb:d9:1e:d7:1d:71:73:5a:ad:9f:49:b1:
af:11:2b:7a:5e:d7:1d:1f:e2:c2:b4:3d:00:61:e4:6f:cd:6b:
34:20:cc:03:51:06:2e:61:78:88:14:15:7a:57:3a:78:44:17:
18:5c:07:1f:ac:49:80:2d:29:a6:dd:e4:b8:ee:c6:2b:59:80:
a0:2b:58:0a:32:1e:b2:d2:2c:f1:cf:fd:55:67:27:ea:29:bc:
94:1c:c0:9c:ae:3b:ec:ae:1a:f7:f7:af:16:ff:be:9a:b6:c6:
25:83:f4:d5:fc:86:45:34:55:d7:d7:46:f9:3b:e6:0d:95:98:
87:c5:45:38:ed:50:eb:50:55:be:72:08:bd:35:d2:a7:53:06:
23:33:63:3a:81:73:be:4a:0f:e5:f6:0a:ea:c5:ad:37:56:a1:
20:08:f5:cd:64:72:ad:38:25:d9:72:39:ad:b3:a4:2b:73:af:
62:1d:67:f6:18:5b:c7:6f:f0:7b:bd:9b:bc:53:00:dc:0c:cb:
fe:94:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:20 2025 by rpki-client