Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
File: rz9wBQP0ByCoL3bvFc2mICLx-ak.mft (raw, json)
Hash identifier: lc/84D1f4cctrzP9cp5IPgvXQpvrvK5xnJ88IxwJLYA=
Subject key identifier: E7:1F:1F:27:BC:71:F9:B1:45:A6:D6:28:C6:69:DD:06:CE:7A:91:CD
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial: 0194BC727F4B19BD85BAE2B0878CA249DF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
Manifest number: 0AF0
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: rz9wBQP0ByCoL3bvFc2mICLx-ak.crl (hash: NiLkbaIMtKMlG35a1f3Gv0AdtLk7Qip8UWi/FZ746m0=)
2: zHaHHwpWkvwMR4EBkRKLj2nL7g4.roa (hash: dEmOAj28ftGGpyQRnDV2quElsA9Yrv1JJIOo7l9XjEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7f:4b:19:bd:85:ba:e2:b0:87:8c:a2:49:df:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=e71f1f27bc71f9b145a6d628c669dd06ce7a91cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a7:f9:b4:b8:51:21:4b:a4:2b:c2:8d:2d:27:
74:83:49:92:3e:ca:fc:9f:54:1a:a3:f9:2a:bc:59:
29:b3:6e:63:79:ae:f8:bd:be:d6:3a:3c:f0:a5:61:
e4:e7:a4:24:65:1f:bf:cc:53:57:33:7b:4f:bf:a6:
fe:c4:ae:54:ad:00:8f:7b:a4:0a:34:84:ac:8e:0d:
08:5b:8f:de:51:da:76:8d:0b:7c:5f:00:9d:8c:57:
d7:2f:ab:7e:1c:b5:5d:72:36:b9:10:8a:55:af:a1:
fa:ef:be:04:da:b6:69:39:e9:5e:3e:a3:f0:7a:a2:
7d:79:1a:9b:9f:2a:df:d5:33:08:a1:f6:48:69:7f:
72:9e:33:47:17:71:35:17:b6:4b:a6:a1:85:14:f6:
38:6f:65:bf:2f:7c:0d:12:09:b5:65:83:fd:78:9f:
58:64:00:80:6e:2e:36:4c:74:d4:13:88:7d:84:c5:
69:88:05:24:52:d2:32:8b:74:d7:6c:b9:68:4e:08:
c2:eb:a7:3e:6e:c4:b9:00:23:17:6e:77:e9:bc:96:
46:a4:12:55:f5:93:81:f0:be:7f:91:41:fb:d6:9e:
6e:ab:0f:9c:25:11:72:3b:ba:03:a0:d9:98:54:41:
5e:a7:67:12:b1:da:4a:99:48:71:7e:94:c9:ec:64:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:1F:27:BC:71:F9:B1:45:A6:D6:28:C6:69:DD:06:CE:7A:91:CD
X509v3 Authority Key Identifier:
keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:51:ab:7d:25:cb:ad:4c:7a:18:80:85:de:cb:d5:7e:74:4f:
7d:f2:ad:a3:3a:c5:b0:05:dd:89:62:d4:95:9d:02:73:6b:50:
29:04:66:bb:67:5b:c1:6d:c3:40:cc:06:83:23:8e:c9:be:7e:
27:0e:8c:a6:32:0e:e5:55:6a:f9:ff:87:be:ce:0b:6a:d6:d6:
74:6e:c7:9f:1b:e3:f5:b2:9d:28:be:f8:cb:38:50:0f:d9:93:
e5:60:57:98:54:3b:23:c7:b7:d7:5d:70:ed:13:6b:de:fd:ba:
aa:a6:35:e2:6e:c3:ef:b0:d2:13:5a:73:c6:12:34:05:64:55:
dd:ec:7a:fd:13:79:ea:7f:c8:8e:33:b5:85:16:9d:13:22:aa:
a6:04:b9:70:ba:57:ba:17:ae:8f:02:c1:2a:a9:d3:9b:71:12:
8c:a2:71:2d:b1:e1:20:17:f6:cd:55:c8:60:28:43:33:3a:24:
57:ca:69:43:1e:4a:64:36:73:d7:fa:df:28:82:f9:03:63:16:
e1:c3:3c:19:58:0a:9a:ca:9b:b1:01:73:04:53:64:1f:e7:a2:
b3:26:52:2e:d5:33:a5:b1:a4:f4:a0:e2:fb:0e:40:aa:ab:15:
a0:42:2d:ef:65:52:51:4d:e8:67:7a:ff:11:8f:44:40:e0:6c:
f3:06:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:00 2025 by rpki-client