Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier: WfDaOW2/wJscyHkquT4Jdf8yWdyxmvLxqKf15AVMmbk=
Subject key identifier: 2F:A3:FB:0D:58:54:3B:13:D3:9A:F7:39:77:F8:8A:A4:5E:14:D3:CD
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 0194BD4E5C4189B484DFE5B0E11C44045E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number: 13C4
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: Kyq8dvDQCWTM4SDI01T-WEma_xs.roa (hash: csmuD1qBTRKUBvLNGvxDwNNOARNFB8rqYka6vl5ZQvQ=)
2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: R50oLJqDRrF1gJiGIzQ3+MKbFRMAd7pdQNCugALUSB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5c:41:89:b4:84:df:e5:b0:e1:1c:44:04:5e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=2fa3fb0d58543b13d39af73977f88aa45e14d3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:a2:0b:58:59:29:ba:15:00:64:03:2d:ee:
6e:81:97:27:d5:4a:86:d9:9a:ea:14:66:03:e9:88:
1a:9d:ee:b3:a7:80:23:19:8a:c3:59:27:26:e9:5b:
dd:d6:4b:fe:82:04:dc:f6:56:1a:cc:0d:e2:7f:d1:
0c:3a:07:b2:9d:d9:2d:12:7d:4d:a8:76:4b:27:78:
5c:f5:6b:9d:4d:1c:d6:5f:bd:8d:3d:c8:a9:a9:27:
42:45:20:1c:b9:dc:e2:a2:41:92:8e:e4:c5:25:d0:
cd:30:f1:b1:3a:74:1b:e5:0a:59:20:c2:13:e5:89:
01:52:ca:7d:bd:a8:c7:32:74:e2:70:14:fb:37:fc:
f5:8f:9c:f5:a3:1b:b4:8c:ce:cd:49:56:3a:6c:cf:
ff:3f:b8:8a:e6:a5:df:7e:ed:1c:40:93:ec:bd:f7:
fd:4b:6e:00:2a:55:45:86:0b:a7:91:be:78:84:37:
6c:7f:d1:d8:5c:ee:8d:28:c5:23:de:cc:8f:8e:25:
97:4f:a7:27:80:f4:b8:31:56:55:19:da:80:01:02:
0a:2e:9f:16:89:af:8c:61:46:e2:14:2b:da:bd:77:
ce:5e:d5:3f:b4:6c:98:b5:11:4f:47:71:f6:29:7c:
64:8f:49:d1:69:4d:f8:e4:04:ca:23:bc:4c:ab:1b:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A3:FB:0D:58:54:3B:13:D3:9A:F7:39:77:F8:8A:A4:5E:14:D3:CD
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:eb:0d:89:37:fe:cc:d9:48:2c:5c:d8:41:76:1b:d7:41:39:
bc:16:b8:99:24:88:3c:a2:06:7b:01:6f:95:4a:0c:b3:c3:09:
92:13:4e:2e:3b:b2:65:63:79:5e:cf:64:bc:09:83:c8:2b:e3:
d6:3d:bd:69:ee:2f:61:50:2a:04:99:f0:c6:31:bc:fd:0d:4d:
41:ff:e9:2f:54:66:8c:35:e8:85:f1:64:93:51:d3:26:8f:b4:
c7:e4:30:38:23:fb:3c:5c:a0:b2:18:51:3b:35:88:a4:a3:22:
f4:a8:8b:81:eb:b3:bd:9c:5a:d2:07:e5:22:8c:13:ad:62:e2:
43:f7:03:f1:13:ea:90:62:33:81:98:4a:44:95:1f:ce:e9:5a:
e3:07:fb:24:fb:3d:0d:ad:4a:81:4b:66:fa:44:51:1d:28:26:
80:56:69:18:83:12:83:11:7f:e6:03:5f:4a:f8:16:bf:c9:f0:
71:b7:c7:fe:d4:5b:25:0b:17:99:d9:55:30:0a:b9:fb:d9:cb:
6a:52:16:ab:ce:17:55:ee:81:c7:ad:88:c8:e8:da:21:99:92:
e3:4a:3d:f4:2e:4e:b7:79:aa:12:cb:b6:7b:7f:d4:43:74:87:
c2:39:ea:51:e6:55:89:61:52:75:d3:7f:37:31:85:8f:ce:21:
95:25:47:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:25 2025 by rpki-client