Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: FM0MUpjZe+w1T2onQHqE0+B0vrzxkymjsWipgYrSSAw=
Subject key identifier: C6:9A:53:01:40:89:CB:FC:9C:5D:0F:F4:37:37:F4:97:D0:7D:2E:FD
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 0194BC732392A359839AFD64054EC225FED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 0D67
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: C+BX2TJfx7ZtGYZn+QatXi6ANqij/q6zZ34WzNKUdjU=)
3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:23:92:a3:59:83:9a:fd:64:05:4e:c2:25:fe:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=c69a53014089cbfc9c5d0ff43737f497d07d2efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:d8:e0:2f:e9:6a:9a:7d:51:6c:60:c6:ab:
f9:5c:d5:1c:04:d3:cf:d7:62:f7:6a:cd:f3:33:0c:
f7:3b:3b:b5:a5:e2:cd:ac:c1:f4:a4:8d:b9:89:bb:
c1:f7:e6:1f:81:8f:3d:07:bc:f3:67:25:5e:48:93:
17:d3:89:18:26:90:26:01:f2:3e:95:43:af:ef:a0:
d0:98:67:13:d2:2d:f4:98:80:ff:57:60:e2:55:fe:
4a:12:cc:aa:a2:33:9c:94:e5:1d:d5:45:66:60:b9:
af:c6:22:78:7b:44:54:29:76:50:80:fb:af:7f:d8:
28:76:f4:7d:4e:7b:61:66:01:a0:69:1b:14:e4:d9:
d5:4e:07:7c:a8:50:41:8c:18:49:72:29:82:53:c2:
f6:91:37:50:e8:e4:f3:d6:59:c7:84:b3:8f:6b:c6:
4f:75:46:13:0f:4c:72:aa:4d:73:c4:fb:ac:0c:10:
83:24:91:f6:0e:2a:32:f2:d5:dc:ef:58:f9:f6:9e:
7a:e0:49:6e:52:61:4d:db:95:21:46:63:69:7e:78:
e0:4d:cd:7d:85:b3:a9:f9:6c:ff:15:e1:af:62:aa:
bf:aa:46:91:78:f3:38:07:76:62:f7:9e:ff:06:ff:
53:a1:47:91:68:aa:bd:ff:50:8a:89:8e:3a:f4:b5:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9A:53:01:40:89:CB:FC:9C:5D:0F:F4:37:37:F4:97:D0:7D:2E:FD
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d6:55:42:6a:82:ad:49:12:85:f2:e7:b4:91:d0:40:98:a2:
b9:2a:c9:ac:3f:a7:8f:aa:c2:38:81:98:4a:52:30:1b:12:79:
f3:2f:00:04:0e:c9:de:ff:95:8b:1b:b5:16:b0:8d:d7:24:66:
e8:53:b3:15:11:5b:18:41:25:22:f1:10:3e:ea:ec:0d:fd:eb:
12:ce:4c:18:ce:49:00:f6:b8:85:6a:37:43:56:ab:a1:51:83:
19:53:ab:c3:e5:ae:57:bd:54:e1:b2:75:f7:e0:79:62:37:14:
9b:fe:e9:d3:fe:a2:15:90:94:63:d4:58:f3:fe:5f:5c:bd:33:
15:77:e3:28:02:4c:5f:12:07:ab:0b:c1:bf:f0:2f:bd:df:66:
02:de:7f:73:1e:d3:45:2b:5c:97:a7:af:6d:f6:52:c5:a1:30:
2a:60:18:a4:f6:49:17:49:9b:18:4c:4d:74:cf:d2:65:96:a9:
08:36:d7:dc:b1:73:07:59:5a:cb:fb:f8:43:d7:a1:9d:27:eb:
e7:5d:6f:90:94:01:38:e4:03:67:79:3f:cc:ec:ee:93:3f:bb:
99:9e:91:dc:66:f7:ea:c1:d6:fc:be:79:86:29:0d:ea:bd:d0:
5e:38:7a:fb:a4:30:89:95:76:7f:09:fa:d8:af:f5:c5:fa:8c:
3c:85:6a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:20 2025 by rpki-client