Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: 5sOxIqGagY6ObvJNdQ9BXqyqzREgyoaag73/rCWXVMg=
Subject key identifier: 91:24:8D:D4:E5:20:42:27:D4:48:F3:33:D8:FF:BF:BD:99:99:F4:8C
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 0194BD176915125968015BFF649B20BFD80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: apVhYj18Bs_r1Q931zVqcqi5yvI.roa (hash: /gXE2P6qUcVxgRclWTrINQ6lVlcjG0089HciFUVuRsI=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: g6cekeVcmg0i50VMK1q7eCbe1VzUkYshtkzSDdFI5Is=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:69:15:12:59:68:01:5b:ff:64:9b:20:bf:d8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=91248dd4e5204227d448f333d8ffbfbd9999f48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:1b:04:16:12:0e:a0:cd:ca:3a:d7:71:64:
72:29:b5:27:ec:c4:de:dc:19:b2:e0:4a:7a:b4:39:
1d:4e:06:bc:79:96:27:5a:ca:03:f8:4e:97:c4:ef:
a3:a6:eb:b4:d9:0f:3e:2e:1b:36:07:fd:4c:95:2c:
a9:21:a2:1d:40:4b:7f:cc:f0:08:b3:20:74:02:2e:
aa:a7:e7:a9:66:2c:86:fe:67:05:3e:dd:e5:00:f4:
e5:0c:85:ea:03:dc:0c:bc:b7:15:13:c9:9f:7f:15:
94:81:d1:d6:ec:2a:bd:2a:d5:07:31:94:5a:5c:31:
8c:b6:cd:be:bf:ef:9a:a6:eb:b4:55:22:c8:39:65:
ea:ac:32:06:82:01:4f:ab:41:e2:f7:c0:28:63:c3:
76:f4:0c:1c:9f:7b:7f:78:0d:d8:3d:b4:34:cb:6b:
f7:f6:01:c7:f8:28:4a:e9:00:9a:7b:44:70:31:70:
bd:c6:42:af:61:53:59:05:85:20:6e:39:f0:df:a4:
1d:8c:a2:c7:f5:6d:5e:62:5e:bf:61:d6:3c:71:c3:
22:87:11:c7:3e:8e:c4:df:74:e6:7b:6d:d4:83:53:
e8:5c:c7:56:fe:37:85:01:75:6f:2b:8e:87:72:34:
e3:2a:88:d6:6e:62:f6:1a:69:d9:e1:b1:91:f6:59:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:24:8D:D4:E5:20:42:27:D4:48:F3:33:D8:FF:BF:BD:99:99:F4:8C
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3e:68:a3:bc:24:9b:a4:0a:60:c9:a1:ab:89:95:a3:f6:2d:
3c:bc:9b:31:79:bd:28:c0:47:a9:f1:7a:ec:d0:3c:02:02:68:
ac:1e:3a:71:e3:c1:f3:8e:7c:8b:06:f7:76:5e:4d:d9:b6:a2:
83:3d:76:1e:88:30:6b:8e:6b:4f:39:57:df:ac:61:1c:16:93:
1e:23:18:a9:85:7f:40:ef:3e:2c:4f:c4:fb:67:09:8b:50:18:
32:9e:df:98:a2:d2:63:6b:66:57:5f:03:7c:38:0a:d4:6c:08:
0f:6e:b5:bd:30:22:7b:1f:e2:47:56:95:33:98:7e:46:4b:a2:
88:63:3c:b8:8e:47:60:fa:bd:0e:c1:52:62:40:65:f2:dc:a3:
46:97:55:35:39:94:e9:9c:7c:71:99:04:52:32:4e:f2:52:15:
48:8c:d5:0d:96:73:86:b6:3e:99:cf:2a:ef:23:6c:21:fd:3f:
a6:fa:db:3f:33:c8:3a:db:37:b8:0a:cf:fc:e0:55:d9:a4:e9:
b7:6b:e9:e7:02:47:b8:c6:53:8b:8c:10:1d:7c:29:cd:a0:a7:
a8:eb:14:5a:45:44:b4:de:f2:54:9e:76:57:fa:63:ea:32:65:
6d:09:77:8c:c5:71:2e:fb:f6:8c:6d:93:13:3d:c6:38:d9:af:
2c:d8:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:00 2025 by rpki-client