Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: j+bugaYeCZ9bFuzLrxGgoWutPiyena5IagFPk0B9QNQ=
Subject key identifier: 5C:18:DC:78:61:18:9F:BF:D7:B3:CB:C9:61:8B:9E:9D:6A:8A:07:B9
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 0194BD4E982A2593BB80540B6B8B06B6ACF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 1381
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: lUKZFEQR5YFLyzQjNbMEJSbndmc.roa (hash: Ev1zfRFSrBx+hG5oLqV3IujShWJmSxI4j5cxDJLVNpw=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: nQU/ebQgUl+ADLwJVdNk3RctFQ18syhk6eeQf6d/cBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:98:2a:25:93:bb:80:54:0b:6b:8b:06:b6:ac:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=5c18dc7861189fbfd7b3cbc9618b9e9d6a8a07b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:e2:76:fd:64:83:2c:ef:e5:ed:71:e5:ae:
bc:37:85:bd:b0:7d:2d:0c:cc:ae:1e:21:2f:b5:f3:
32:30:ed:6f:02:17:33:65:5d:9a:a4:f5:7b:9d:47:
2c:5f:0c:77:f0:89:bd:a9:a6:b6:ba:b7:96:27:81:
fe:a5:66:67:14:b6:89:f1:65:dd:71:e4:71:73:fb:
20:f5:1c:ec:01:4f:62:c0:e8:e5:a6:4b:10:c1:78:
56:cf:a7:2b:6f:57:e1:65:1d:13:aa:f2:06:8c:33:
9f:7b:f6:ca:31:f4:0e:7e:2e:89:34:42:51:df:db:
11:cc:df:6e:8f:42:45:48:74:80:3f:be:62:e1:ad:
55:e4:1d:d0:14:19:c0:5b:61:8f:4a:14:b8:dc:b2:
e0:da:28:ce:dd:c9:5f:1a:a5:6f:0c:7f:10:79:a4:
4c:e7:01:c5:77:91:b6:83:2e:6b:f1:66:95:41:f0:
69:ba:aa:33:22:c3:a3:3e:bc:ac:0f:2d:9f:37:f7:
2b:70:d1:a8:1b:e7:9b:45:c7:79:82:67:24:1a:8e:
4d:cf:68:bd:f9:63:e0:4c:07:a0:03:2c:a7:35:4f:
0d:2a:a7:66:26:ec:a6:03:bb:55:a1:67:a3:c3:b6:
96:e0:94:28:ec:0b:84:b2:6b:80:32:b9:7f:fc:52:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:DC:78:61:18:9F:BF:D7:B3:CB:C9:61:8B:9E:9D:6A:8A:07:B9
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:85:c5:c9:f3:ff:6b:f4:1f:3a:f3:8b:ef:17:49:8d:6b:20:
92:c8:b4:6b:7a:7e:35:45:6a:43:cf:fb:2d:3a:e1:5f:00:a3:
53:03:6f:23:a5:ab:71:fb:44:fc:4c:97:79:d3:4b:dc:af:12:
72:bb:35:5f:dc:d4:bb:4e:37:1c:0c:08:03:aa:ba:4c:21:58:
e8:c0:df:e9:b4:38:6f:4f:bd:4f:49:91:1f:bc:8f:9e:55:39:
64:9f:f2:ea:ec:63:21:ef:f4:96:26:82:d2:d3:ee:44:4d:d0:
28:80:21:e7:46:a1:8a:e9:f9:0c:2d:64:14:75:4e:e7:9f:12:
57:cf:62:e3:ee:db:95:0a:c6:b8:1f:49:3b:78:f0:b8:2c:cd:
07:73:02:d2:a4:26:fc:8d:af:f3:26:17:96:4f:05:b4:40:58:
79:56:4f:58:af:f2:eb:ed:83:09:40:43:8b:2c:09:42:f8:82:
c2:de:e8:1a:c2:b0:ed:05:8f:b5:b4:b7:7b:33:3b:d5:73:20:
8c:88:9d:a5:9f:79:7c:45:fd:74:88:c1:e5:93:40:82:e8:b8:
ca:90:61:55:e8:eb:2d:95:9d:1e:f8:95:0b:70:fa:24:75:60:
7a:22:32:57:02:bc:b9:62:e0:23:1c:80:2d:21:85:12:09:cf:
2e:65:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:47 2025 by rpki-client