Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier: kIZ74/NA05wrp4OY04D/0SvhlyJxIM75+og4G1MZee0=
Subject key identifier: B3:39:0D:B7:FD:A6:6B:24:32:DD:A7:E9:9F:95:EA:E6:A5:E2:A8:B2
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 0194BC7295C7ED7DC6C8123D2C6AD033D826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number: 0216
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: AdBJgRJ4jssHPV7nsAqdNww1Sh8.roa (hash: pMU0onRwaIxtMKvp5F6AdYME/vJo84IaTZ0vashYGIQ=)
2: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: 4v/r1BbB1cEMxVEV5DNno4FTsbP6dfqHkflCt027JhM=)
3: eq5Eim9KBsmi3XU8htjV8anK_NE.roa (hash: EyydfpDXeHT6D2quI197b3wlG8U+XsJ23kRkj7BvaNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:95:c7:ed:7d:c6:c8:12:3d:2c:6a:d0:33:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=b3390db7fda66b2432dda7e99f95eae6a5e2a8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:74:da:d0:46:3a:b3:a0:ab:6b:96:ed:7c:
0b:ab:ae:cc:af:b7:89:30:d5:7e:92:66:5e:8e:8b:
c2:36:92:5a:2d:c9:cd:d6:7f:1a:a8:3d:1e:f9:89:
d0:bc:d6:09:8e:ed:8c:68:6e:f6:ce:ca:63:6a:72:
07:c0:b7:fa:46:65:de:a8:9c:2b:9f:9d:41:4e:80:
ec:49:58:dd:91:7c:c3:23:2c:ec:c7:3e:4a:16:d3:
e8:c4:5e:9f:46:e3:af:81:fe:ab:66:61:dc:e1:9a:
ec:bf:4a:32:2f:53:93:af:e5:8a:6c:f5:06:23:e3:
49:3c:b7:85:88:be:5f:63:d4:98:0b:a6:bc:78:5c:
78:17:09:02:6d:8a:2b:b1:8c:d9:00:7e:45:8b:0d:
a7:fb:27:5a:e2:5e:da:cc:83:8a:f1:b1:d9:7b:64:
1e:79:0a:69:85:2d:ea:f7:83:5c:71:4c:1f:9b:a5:
17:d1:df:f8:7d:ad:fa:46:a7:b4:26:b8:bd:e2:3e:
9c:6e:93:ee:cf:47:f8:79:ba:e5:4b:a7:76:f5:db:
c9:88:dd:f1:35:c6:7c:73:ea:0a:f5:81:86:06:93:
58:4b:fe:06:dc:d6:de:ef:3f:80:18:cc:ae:68:23:
ee:4a:1d:53:d1:30:ad:00:fe:4a:53:70:1e:14:4e:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:0D:B7:FD:A6:6B:24:32:DD:A7:E9:9F:95:EA:E6:A5:E2:A8:B2
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a4:9f:61:16:27:03:c4:17:13:44:a0:6d:05:e1:fa:a1:e1:
ef:13:dd:c5:56:3a:92:82:26:97:9f:c1:35:d5:f2:fb:4c:cf:
da:1e:92:ef:bc:8f:34:c3:09:e5:4f:4c:65:c7:ed:30:98:e1:
cf:b4:0d:ed:dc:60:2a:b3:be:29:09:be:71:52:a5:7a:85:78:
79:fc:9e:de:0e:fa:7a:42:44:9c:77:f8:34:ce:d3:6e:74:68:
7f:18:c1:b6:ce:c6:ec:21:73:5d:65:b3:6e:3c:2e:d4:11:8a:
4e:34:1e:38:96:cd:17:4c:a9:ef:8b:78:ea:a8:9f:e9:ab:12:
ff:3c:e9:0b:88:4b:0f:d1:c5:cc:4d:01:7d:55:58:a5:bd:cf:
e0:2b:0e:2e:b3:53:44:ce:89:9a:53:33:a3:e9:f9:04:86:71:
7b:8b:06:5c:f0:38:da:eb:e3:41:ab:a3:e4:78:f5:96:a2:34:
e9:16:05:ad:e7:58:29:06:fa:a9:6e:ce:16:47:1e:96:5b:6c:
33:ec:1b:92:55:57:7a:30:b6:7f:7a:a9:32:12:cd:8d:eb:71:
bb:7d:d7:28:5d:fe:6e:89:64:2d:53:bb:65:33:df:8d:0c:44:
c3:e7:18:61:a9:96:8b:48:1d:fb:6d:25:db:52:52:1b:f9:ff:
5e:76:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:00 2025 by rpki-client