Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: C6EEfgB3YrX9ka06Zkf5clTN8U1xa/ocKG3RrvA6mYQ=
Subject key identifier: EE:86:B0:E7:24:F3:1D:9C:F7:85:5D:F3:58:FF:92:E0:E6:0D:E9:18
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 0194BD4E56C30CB0E818A3BDD173156E30B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 0396
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: umqSlZrFArBEb+oLUWuOU9w/OHj/K+VZQ/nW87qPewI=)
2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:56:c3:0c:b0:e8:18:a3:bd:d1:73:15:6e:30:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=ee86b0e724f31d9cf7855df358ff92e0e60de918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:94:6f:f7:8c:b4:42:05:2e:97:31:ca:ba:
04:42:33:c7:9e:6f:6e:b1:d3:b4:51:f8:c3:41:74:
e8:79:23:5d:2f:f8:2d:43:81:d9:f2:0b:ea:c4:2e:
d7:b2:d9:48:4d:86:cb:c9:40:66:f0:1d:87:0b:32:
2f:64:83:dc:12:62:66:e3:e5:f7:fb:68:89:39:8f:
0d:bf:31:5d:73:25:51:24:84:b4:60:83:af:e3:04:
00:49:d8:2c:9a:7a:4e:ba:2a:59:27:5f:c6:b1:d6:
d2:3f:08:27:bb:92:88:40:11:76:76:5a:08:f2:cf:
0e:bf:b5:92:74:a7:4b:b3:e4:1d:5c:5a:8e:94:df:
32:8f:27:09:d8:81:a9:cd:8a:f7:1c:cf:b5:17:b5:
a9:28:0d:2c:bd:f3:0b:32:d1:f1:c9:a9:62:c0:58:
bd:8f:1f:2c:0c:e7:45:ea:24:83:84:1c:d8:e0:b2:
9e:65:70:44:c7:c2:49:fd:7d:2f:d0:e7:26:00:21:
cc:f2:28:7f:72:82:b9:52:c5:8d:20:09:11:5e:32:
1f:5e:67:59:33:29:23:46:af:1d:cd:e9:94:fb:47:
a8:cc:62:a9:e3:8a:23:86:a8:6d:88:9f:fe:7f:0c:
fa:82:97:a7:f3:8e:c7:6f:a5:a1:42:4c:09:12:08:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:B0:E7:24:F3:1D:9C:F7:85:5D:F3:58:FF:92:E0:E6:0D:E9:18
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:97:69:44:07:44:c7:80:4c:89:08:48:52:c2:16:d6:07:d0:
57:a9:05:6d:03:fd:6d:b4:ba:13:dc:0d:d7:f9:15:82:fa:b5:
7e:73:42:e1:79:8f:50:3e:80:ba:7e:dc:22:a6:14:0b:46:07:
08:7c:60:ee:7c:a7:5a:fd:60:18:73:f0:13:c9:06:30:ff:40:
54:9d:d2:4d:46:9b:34:d4:b8:ba:75:3f:79:11:18:3f:05:ae:
50:4d:f7:00:99:85:f0:06:02:af:74:3f:5d:72:d0:6e:48:fe:
e1:ed:6f:5c:df:06:d6:d7:48:93:37:fc:ce:77:40:3a:c8:ff:
1c:c2:2b:41:c5:9c:0e:76:4b:fd:7b:20:25:62:31:35:55:29:
c7:57:7c:41:7a:49:52:85:f2:b8:fc:5d:d3:a6:fe:a8:0b:9a:
88:e6:4a:f1:05:84:20:e1:b5:70:5d:45:26:46:97:bd:de:2a:
33:88:91:33:e8:3e:62:41:34:f2:d4:c2:7d:3e:d6:10:a3:82:
b8:f8:14:8f:92:3f:fc:2c:c5:f3:68:22:4b:26:0c:e4:9a:a6:
8d:42:23:0d:29:35:9b:9f:34:d7:66:b7:e1:e1:c8:05:5c:cd:
59:30:45:24:bc:59:64:22:bf:83:74:af:87:4c:db:54:95:3b:
5b:98:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:37 2025 by rpki-client