Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File: zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier: epZXqJuk/6dRoFfS1mJpR3kCH+eKdVH3qOTCuEkkXRE=
Subject key identifier: BD:5D:1B:8B:B7:89:1B:A2:7E:CD:FE:67:04:C7:C4:DD:20:B8:12:2D
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 0194BCE0988AD0B2DCB15464C8D7B1A3B3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: 40_j8EnMOslOGeaUGeLQNCGHg64.roa (hash: BOU6u1kQjKsVBkJf+h9lI/7YbpbYLn1ZXJQhHit/Gyg=)
2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: 2hoyAaF3r4QqQ4dTL9PKHrs57fxPXpoy+uOvNNDuITA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:8a:d0:b2:dc:b1:54:64:c8:d7:b1:a3:b3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=bd5d1b8bb7891ba27ecdfe6704c7c4dd20b8122d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:9c:26:d4:03:c0:27:89:59:9c:e0:c9:13:
d5:91:d9:13:31:f1:31:87:69:73:fb:6e:e0:fe:5b:
41:84:9f:7f:d7:36:8d:a2:3f:b0:f4:7d:3b:43:0a:
a3:63:20:20:26:b6:f6:fb:1f:70:a2:93:dd:29:72:
13:6a:76:ae:ad:bc:eb:53:ea:ab:74:14:05:ce:10:
77:bb:62:56:04:7c:06:cc:b4:a3:34:6f:9d:43:b6:
05:77:99:4e:67:7e:a5:6e:16:53:92:a7:f8:2e:b8:
e6:a6:3d:ff:ab:94:9a:aa:4d:31:08:53:02:a5:d1:
1a:7b:f2:56:6f:fe:31:58:e5:7a:8b:f7:2a:c9:6f:
62:cf:5c:78:07:7b:a3:13:20:23:3e:69:16:d8:87:
b8:6a:b8:0a:16:51:74:57:98:d9:26:94:d1:de:c2:
3a:85:82:a1:48:bb:13:23:e7:13:f7:91:dd:35:fe:
c1:53:f6:b5:f0:27:2d:5a:89:47:47:7c:6f:e6:8d:
de:d8:46:3d:a4:f1:e4:78:54:ce:8e:eb:11:d5:11:
d0:b7:0e:10:53:0d:d9:61:ee:a4:f4:39:43:54:d6:
b5:11:22:61:ec:d0:26:45:39:86:69:41:fb:58:07:
18:b1:c5:06:e6:0a:79:88:22:50:04:aa:7b:7c:c8:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5D:1B:8B:B7:89:1B:A2:7E:CD:FE:67:04:C7:C4:DD:20:B8:12:2D
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f6:65:ef:5a:7d:cc:8e:97:64:6f:02:b1:97:78:8f:04:dd:
1b:b7:a0:b3:46:e0:e1:8c:61:92:30:bc:83:02:e7:e8:ae:bc:
db:2e:a1:77:c4:b5:67:51:42:af:f7:4c:7d:b0:fd:7a:4c:4e:
be:f1:e5:d3:4e:c5:50:9c:59:d3:f9:56:8b:87:9f:a8:b0:41:
0d:e9:a6:c0:a8:dc:cb:04:e4:2f:e3:3d:e0:31:7e:25:e2:c6:
0d:f5:da:48:b4:63:84:02:c9:70:98:ff:a4:32:e1:73:10:22:
46:0a:3d:6c:f6:7b:65:4a:f8:2e:61:64:0c:98:15:8a:e9:39:
75:d5:54:d0:df:1e:72:e3:50:e4:71:63:27:51:24:7b:d0:e1:
cc:b5:17:d6:c7:25:46:07:e7:de:55:08:3d:00:d8:7a:ed:4b:
8a:a8:cb:67:50:7c:13:e1:f7:d6:97:e9:d9:ab:37:6b:4e:d3:
64:fc:ae:b2:8c:13:bb:4f:fd:7b:19:a2:f6:03:43:b4:cc:ef:
ff:a6:78:92:4c:3e:2d:6b:32:9e:93:a3:e4:74:7d:78:d1:29:
3c:b7:b5:7c:53:ee:c5:48:69:d2:7c:6e:42:dc:f0:60:d8:08:
f0:0b:ad:96:93:a4:1d:04:f4:51:f5:4b:01:34:da:76:b6:46:
47:f3:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:43 2025 by rpki-client