Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier: LNjZEujj8hqsp+uLwgWsmoItYRs7K2rJ4BKtRMfYn7k=
Subject key identifier: 8D:1E:0A:B7:1A:AA:74:5E:B7:72:FF:6C:EB:F9:12:A3:EA:6A:27:09
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 0194BCAA30F1789625DD767D0637BD0928F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number: 03D0
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: AFY5FjyXS83QqXeOYKQWGPJd/K/DIvedxcS7ecsJ1yc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:30:f1:78:96:25:dd:76:7d:06:37:bd:09:28:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=8d1e0ab71aaa745eb772ff6cebf912a3ea6a2709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:3c:bb:56:2e:d8:ae:62:b0:ca:6b:1b:bf:
c0:93:27:3d:7f:8a:fd:cb:64:9e:0e:b2:24:ea:a4:
17:e0:32:38:7d:57:5e:0d:c6:d0:40:4c:e7:81:5c:
92:01:ea:66:5a:17:72:04:5e:94:ae:1c:93:94:e0:
66:94:b1:1a:47:8d:aa:6c:e8:bd:a3:77:8e:ee:b7:
92:01:45:fa:a6:b2:01:24:84:18:b6:2a:96:27:7b:
2f:46:09:7c:81:4a:47:cc:2d:e7:81:41:3a:ff:8a:
a6:83:4f:b2:5b:b4:a1:89:f8:57:c4:e2:90:2d:11:
06:ad:06:64:ff:dd:f5:1a:1d:47:eb:cc:23:ef:3a:
5f:90:73:a2:7f:dc:e9:53:f0:55:5e:79:1e:e4:42:
bc:d4:54:25:a1:92:d9:13:3d:36:92:c2:cd:a5:3f:
1a:a7:49:11:b6:d5:88:66:b6:32:08:02:74:4f:00:
b9:d6:ca:1b:2d:2b:ac:4f:61:6d:b4:41:67:10:41:
d6:10:12:c0:c1:a2:36:2c:93:e0:d1:4f:78:8f:d7:
d6:04:6b:95:a0:2c:55:b0:81:10:46:73:e0:72:30:
7d:2a:5b:87:75:4c:39:ad:7c:75:4f:ed:31:ec:fc:
96:d5:83:87:d5:61:f0:5d:5f:1c:40:96:84:5b:40:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1E:0A:B7:1A:AA:74:5E:B7:72:FF:6C:EB:F9:12:A3:EA:6A:27:09
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d2:a7:2a:83:dc:dc:39:56:bb:13:3e:26:ca:87:c1:8c:0e:
29:8b:5d:46:21:4f:fa:84:bf:6d:98:73:af:09:70:51:48:56:
12:64:b1:4f:63:15:37:17:7b:91:cd:90:8d:d5:99:fc:58:5c:
fa:c9:0e:cd:2a:2d:7f:4c:1f:f3:70:6f:d3:37:e5:02:23:c2:
6a:6a:cd:ee:a7:7d:f7:e0:f1:e9:17:66:62:bc:2f:73:bc:4a:
34:02:8e:72:19:35:27:74:d4:44:b2:e1:ec:5b:7c:48:89:32:
2b:3c:78:de:40:e9:fa:bb:a4:61:2a:86:04:d5:6a:da:be:ee:
9a:c6:30:26:17:18:52:2d:c8:63:2a:b5:f5:da:39:42:d7:99:
56:bf:4f:ac:dd:b5:5c:ce:15:5e:72:b3:36:2f:b8:2d:fb:5d:
35:6d:1c:41:f6:09:4b:cb:a8:2a:85:1e:16:94:71:8f:f7:75:
99:72:69:90:9e:6c:44:37:95:99:bc:26:37:81:dc:9f:a0:3f:
16:e7:7b:a6:8c:b7:25:73:08:6a:a3:e8:60:7b:09:cd:ed:ee:
1f:1a:af:53:1c:7c:5c:15:02:44:36:de:6b:5e:95:a5:56:f8:
30:0e:67:49:12:e1:ab:b1:24:e3:26:81:30:06:c7:97:56:7f:
0b:52:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:51 2025 by rpki-client