Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier: c0aUsTOvvI65J9laUv/Szfw5eWWj04yHg2iKud/db+s=
Subject key identifier: 2D:67:0A:87:13:36:20:2F:99:5B:3D:48:18:A0:B6:AC:AD:78:CB:31
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 0194BC72F914A4AD72A53064449F4974802D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: xiOkYfjlaTaKy4pziiQYVe8I6IBAQMj2FudhUFQTvVs=)
2: o8etAG8wVZ5Gzgc5gvkz3AEmY5g.roa (hash: A2h09hDnc623pPAi/KarvXmKS91Xx49mtAM/lILxzFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f9:14:a4:ad:72:a5:30:64:44:9f:49:74:80:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=2d670a871336202f995b3d4818a0b6acad78cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:b8:2a:a9:2e:65:b3:75:94:97:d9:e1:83:
71:5a:3c:c0:83:07:1c:e3:59:56:aa:82:65:27:5d:
cb:85:f5:a5:39:45:6f:a1:f1:71:18:c6:fd:d7:f4:
8a:6e:2e:c2:d1:7e:8c:34:d6:94:50:84:03:ba:2b:
a1:5e:db:1d:47:83:c8:31:b4:fb:e3:2c:cb:6e:8f:
00:5e:5e:71:d4:88:f3:61:b1:5a:d0:dd:51:fa:c6:
8d:cb:84:67:0e:c2:2f:46:34:01:6d:f3:b0:c7:19:
c6:4b:94:c3:8f:c2:57:3a:d4:39:74:77:42:93:d9:
a8:1b:a6:17:34:fa:35:98:c8:6f:e4:98:3c:f9:0e:
43:b7:a2:49:74:0e:d2:f7:8b:46:bd:1a:91:53:d2:
13:3b:f7:19:71:1a:98:2f:5a:e6:7e:69:e4:88:e4:
17:76:07:2b:91:92:8b:ef:28:93:38:e7:54:22:ba:
e2:52:6b:d5:8f:d0:d3:51:b4:96:c8:eb:84:7d:e5:
12:7a:ea:b0:13:0e:51:cf:dd:59:aa:86:5c:24:76:
7e:6d:e0:45:39:d4:9e:a8:fb:5c:5e:40:d0:22:bd:
a6:b1:28:0b:80:55:89:02:df:39:a2:ed:d4:d2:d6:
6c:97:c7:7d:cc:c5:41:b2:d5:ac:99:9b:17:9f:cd:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:0A:87:13:36:20:2F:99:5B:3D:48:18:A0:B6:AC:AD:78:CB:31
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:25:d0:15:85:7c:ca:1a:5f:e7:9c:09:fd:e8:91:06:0b:02:
ec:35:1f:86:2f:63:ec:5e:d9:0b:7d:0c:ad:1c:e7:53:85:57:
85:40:49:76:22:98:41:c3:da:dc:38:fb:37:7a:4f:43:a8:1c:
ea:45:88:1b:cb:b2:67:f2:26:49:eb:c7:c3:0f:2b:1f:0b:73:
89:4f:7d:43:a2:2e:a8:04:3c:10:33:06:fe:56:43:4d:0c:0f:
16:3b:fe:7e:ea:aa:81:7c:5b:30:e5:57:bd:d9:ca:60:76:01:
76:74:d8:45:a5:18:d3:d8:dc:b6:af:4f:93:6f:d2:16:d4:e7:
aa:34:f6:45:5b:f8:09:84:52:0a:68:07:92:d0:de:2b:d9:ff:
f3:74:5e:19:d2:13:d9:eb:37:51:9b:77:f2:20:5b:03:bd:62:
c4:2e:83:cc:6f:9e:db:e8:1f:8d:41:4d:81:07:60:61:b0:06:
64:49:04:15:ae:0c:0e:69:da:88:c3:af:e5:27:9e:7b:06:be:
fe:94:ba:5c:a1:ac:f7:f7:54:25:70:75:fa:fe:35:16:2d:ad:
5e:84:a0:a2:18:17:cf:a7:a2:98:70:73:88:4e:ba:97:4f:04:
eb:ae:5d:a2:ba:e0:64:11:2e:e1:76:6d:2c:ba:13:72:6d:3f:
a2:7f:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:32 2025 by rpki-client