Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: X3uBNSi8HnQ6Vb4qHUaUZCCmK+glsnJ4oFgIxN85q8A=
Subject key identifier: A3:29:97:24:F6:9C:CD:52:38:57:14:9F:93:86:EC:96:12:0C:87:BF
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0194BC72E68062CACD8D6B55A04C1226F83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: UEoxJE15lJg7lEQzlhU9dNi4CZoVKIG/JwcTkyFRKYo=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e6:80:62:ca:cd:8d:6b:55:a0:4c:12:26:f8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=a3299724f69ccd523857149f9386ec96120c87bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:c1:a0:e8:98:4f:1b:67:33:b0:58:ee:95:
c7:ea:25:3a:93:bf:51:63:25:b1:27:d0:8b:23:99:
47:ef:85:18:98:78:48:4a:73:53:23:2c:ee:b7:c7:
c7:24:b7:5a:4a:95:58:0a:45:d3:bb:f6:b2:a3:37:
d6:05:5d:73:09:66:6f:93:ae:db:e8:ef:a9:94:95:
3f:ef:1c:7f:34:29:06:19:2c:04:94:61:10:43:58:
4c:f4:89:c9:fd:25:cf:54:0a:c3:34:37:8d:38:53:
8c:da:23:1d:12:64:23:ef:e8:f8:45:aa:32:26:02:
ab:b2:af:4a:e3:c8:6a:85:e8:12:13:c1:12:b8:5b:
da:1f:b3:16:b0:55:ae:db:cb:0c:a1:b4:89:3a:fd:
16:70:bc:f7:9a:4f:d3:23:3d:0a:3e:57:8d:64:ee:
33:2c:e5:ac:83:f9:a5:55:68:b4:4c:f8:c2:f5:5e:
43:65:df:8d:7a:9c:b8:2a:81:02:98:fb:4a:62:0f:
19:d3:b8:99:ea:ca:17:f6:86:1c:18:e8:a3:06:fe:
65:4e:16:67:64:ca:a0:6d:a0:66:70:69:a8:22:69:
f8:0b:cc:47:15:b7:45:01:1d:9c:3b:af:ee:a3:34:
03:11:b6:2b:fb:84:f6:a3:54:25:18:ad:26:dd:9a:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:29:97:24:F6:9C:CD:52:38:57:14:9F:93:86:EC:96:12:0C:87:BF
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6b:c6:60:d7:e7:9f:96:bd:95:a3:15:0b:32:a1:73:8b:e5:
ee:8a:82:d8:2b:08:a8:90:2d:a8:30:69:33:f7:81:2f:b4:0a:
f3:ad:5d:23:43:c9:ef:9a:8c:06:ae:72:56:5e:b5:75:2c:4f:
20:b3:9f:8d:9b:a8:6d:3a:0a:89:b7:e9:24:c6:51:42:31:c9:
8e:89:56:92:b8:b5:49:11:47:3a:af:78:70:00:d8:e8:c4:38:
8b:d8:f4:01:fa:40:7d:87:a7:e7:08:84:a7:bb:bd:83:a5:e8:
38:dc:01:b6:85:89:e2:71:b5:1f:93:43:0f:04:c3:88:7f:a2:
96:4d:26:d9:89:09:48:4c:10:5f:1d:3f:d4:55:98:dc:5c:c3:
47:2b:97:06:15:5c:b9:1b:5b:d6:47:80:40:3d:96:29:8f:8f:
56:b3:77:d9:2c:6f:b1:5f:56:b9:b3:4f:b3:20:fe:d5:8d:0c:
fd:a6:b9:e5:be:a2:1a:72:62:fd:45:0d:55:97:cc:97:f6:88:
12:ae:15:46:b4:6f:c5:31:6a:4f:15:8d:b9:28:81:81:e2:30:
7e:a6:77:21:66:0b:e5:e9:df:4b:e9:5a:5e:3e:f3:13:66:3c:
3c:8b:57:c6:ae:f6:32:04:d1:81:6c:a0:c4:6e:1a:ee:be:7b:
98:0a:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:58 2025 by rpki-client