Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: O7NBelSLb8FrhfsrNhUw7rDeGTLtuZPbwQl0lKGTbmk=
Subject key identifier: D8:6C:B7:B6:58:42:36:6E:AE:97:00:95:7B:81:5B:3F:E9:A6:9F:D4
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 0194BBCE253BA4B761F2867A14ED35E1E9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: WidVCHlteMX/4jq83TVPsjToy3O11Lhg6kaSvxnq39k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:25:3b:a4:b7:61:f2:86:7a:14:ed:35:e1:e9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=d86cb7b65842366eae9700957b815b3fe9a69fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:f4:36:f5:26:ac:4b:bc:db:f9:2f:8f:c2:
99:9a:59:a2:0c:a1:95:4f:d8:e7:5b:0b:93:0c:d8:
9a:8c:7e:41:95:ab:75:c5:28:e6:01:3b:81:5b:c4:
81:3c:ee:ce:bd:e8:3d:c5:7b:33:f2:b1:31:49:fc:
2b:8e:5e:82:57:6b:45:77:06:f3:d0:ea:be:5d:9f:
3c:d7:20:5f:cc:bf:49:7f:bc:6f:ca:0f:4b:8c:32:
33:39:3c:df:72:74:da:de:0f:76:f1:10:9a:41:5c:
55:3e:af:db:2c:fd:fe:6b:aa:78:92:7f:0c:69:ca:
b3:68:98:e6:ef:a7:d1:95:6d:d9:df:ee:8a:53:2c:
50:c5:a3:fe:c7:a0:b5:ee:57:90:d3:45:a2:9f:6b:
70:80:4b:e0:20:07:c9:64:d9:89:d0:0f:98:e9:08:
cd:f0:cb:5c:8a:44:b8:ea:a4:58:76:d6:af:24:90:
9c:c7:2d:b6:16:70:03:17:0c:e8:c8:76:f3:62:bf:
d4:be:ae:35:6d:71:36:5d:45:5a:ba:cf:98:c1:1b:
c6:84:2f:31:a9:5c:d0:b4:97:46:77:92:10:b5:32:
20:be:2f:12:6f:95:2c:bb:57:88:1f:27:e8:af:45:
3f:01:c8:46:d8:75:04:9e:49:e9:54:3b:df:7e:68:
5b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6C:B7:B6:58:42:36:6E:AE:97:00:95:7B:81:5B:3F:E9:A6:9F:D4
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e1:e8:93:e0:8e:25:a0:92:a0:7a:ce:6b:28:d6:12:55:ad:
be:d9:e8:84:6c:38:5c:76:6a:d4:8f:86:c4:52:b2:3f:03:37:
48:d5:f3:48:fa:42:70:fb:b0:c2:f1:56:27:c6:d4:5b:0d:93:
07:8e:a5:6a:05:db:f2:ec:74:35:fe:46:96:ef:53:d1:3d:8f:
a6:33:53:17:f8:e7:7f:97:6d:71:48:5e:69:57:7f:c1:03:72:
3e:31:6b:08:0b:50:c8:ea:c2:02:a4:29:03:56:a5:fa:73:26:
d8:a2:43:97:92:dc:33:60:9d:cf:8c:6d:8a:5f:66:8b:68:53:
4c:4d:19:04:d8:4a:d2:cf:75:98:e0:0c:cd:20:01:57:23:c8:
5c:5a:ed:da:19:45:9d:90:55:57:72:cb:04:d7:ec:42:fe:0c:
c3:77:91:b4:d6:c8:f5:58:a2:54:a7:cb:35:58:cb:43:26:4e:
8b:50:35:05:44:4b:79:5c:3a:b5:fa:2b:c4:14:05:71:f0:5e:
23:d1:08:98:de:d0:11:98:fa:ac:33:e7:7b:33:71:77:50:26:
b6:75:5e:a6:e8:3e:b0:48:b5:7c:80:38:98:35:83:4d:42:9c:
ff:b1:a9:c3:a4:e4:24:7f:43:3a:89:7d:11:e2:4a:7a:34:60:
82:95:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:21 2025 by rpki-client