Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: UZg/2u808c+fOSSpAujGHqGKbhTDMQ6AC3b6WIj7jJ0=
Subject key identifier: 35:ED:84:38:2A:85:38:44:D7:1A:5C:3B:D3:EC:17:8F:7A:2B:33:69
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 0194BD17A6A878C51150B44C56EFB4747C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0781
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: dye8lYuS/472aa+b7cVxud8sh3pH+syLvtNgJHoUOI8=)
2: vDzT1MfGHy3qiiGgUF2NvHG69NY.roa (hash: /QoWZln+ZcMlohGoxqm79B+9B4Oq5GX6wiGGVl8wkGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a6:a8:78:c5:11:50:b4:4c:56:ef:b4:74:7c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=35ed84382a853844d71a5c3bd3ec178f7a2b3369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:8e:fd:30:84:7c:b4:fe:56:f0:ec:f6:62:
e4:e2:ca:02:2b:18:52:34:fb:70:1a:10:de:6a:68:
c2:72:a2:10:39:7d:b6:fd:34:0d:26:17:7d:a6:90:
5c:16:38:97:3d:f1:57:b7:e1:f4:83:e0:d6:30:b2:
04:53:43:0a:bb:a0:ba:8c:1d:99:6a:23:ad:d6:24:
4f:0a:28:c8:57:3a:9c:6d:95:0e:da:b1:08:7c:b5:
af:b5:8e:15:99:59:16:c5:db:64:93:46:67:9c:9a:
47:45:71:67:7a:40:70:79:6b:ca:0d:7a:01:14:9d:
42:12:06:bf:4e:68:98:76:60:ba:94:fb:5b:83:ca:
6a:40:17:f1:35:ac:1a:e4:46:f0:45:7f:ae:47:59:
a0:8f:25:eb:f8:b2:8e:b5:f0:2c:f5:b7:95:79:a6:
10:d7:9f:b5:31:0e:61:65:bc:fe:a6:99:7f:fc:bc:
e2:75:a6:99:96:38:2b:88:17:34:42:7c:c3:18:b1:
20:52:e1:ee:3f:35:44:c6:ca:0a:a5:76:9c:99:fe:
83:a2:6d:90:e8:ed:1b:d3:2c:ba:1c:42:00:f5:e5:
23:72:b1:26:f6:ac:8b:b8:6d:9e:85:8b:e0:b0:00:
24:4c:57:57:14:7c:6e:c5:c6:22:04:85:e9:4d:98:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:ED:84:38:2A:85:38:44:D7:1A:5C:3B:D3:EC:17:8F:7A:2B:33:69
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:08:06:32:4b:9a:7e:35:9b:2f:6c:48:20:5e:46:3a:88:
a9:7a:ce:c9:f4:ef:b3:1b:74:29:8d:05:60:3e:7e:bd:a3:cc:
a5:d0:04:69:f4:30:05:ee:7e:1c:d3:37:26:82:2d:78:41:d9:
77:f4:87:a9:3b:3b:93:29:b2:76:b8:b2:45:33:a2:02:85:cb:
9e:8f:c7:e1:71:0d:1e:63:ec:62:05:7b:7f:e2:f7:98:d4:1d:
33:16:1c:c8:1a:40:42:9f:af:cc:bc:4a:3b:67:77:55:c7:d0:
ce:10:ea:67:bb:dc:d8:6a:24:49:03:25:57:1d:cd:aa:99:df:
ff:86:06:c7:fc:b3:41:db:01:27:e2:88:a4:11:c1:d1:1c:18:
30:66:a7:5b:c2:6a:4e:1a:51:25:6c:ae:9d:19:7c:fd:c6:51:
cb:25:a5:9d:47:3b:e4:35:b6:ad:a7:d9:5e:46:6f:d5:ee:11:
fc:f9:8f:1c:73:7b:fe:80:eb:0c:56:b5:da:39:ef:e2:d6:14:
e9:75:af:eb:30:22:2e:47:a3:01:66:4a:74:cf:03:22:fc:ca:
b7:38:3b:72:88:e4:3d:bc:e8:9a:93:d4:52:7e:dd:6e:94:4f:
94:30:44:5c:ee:34:94:8f:10:2c:be:82:d5:52:d6:11:ea:7f:
0d:30:c7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:08 2025 by rpki-client