Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: VSSgR80smpHMP7JIRsJgN40sfv958V9ccd7gyxUq8PU=
Subject key identifier: EB:82:34:74:6D:26:A9:91:EC:64:9A:E8:B5:03:81:3B:06:6D:07:F9
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 0194BCE0A9B02A6B22500631E6384DDB1271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 068F
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: VOwE1oMNiWeL+f75p1yPKtraQsdkSkE5mwjHhPMLqa4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a9:b0:2a:6b:22:50:06:31:e6:38:4d:db:12:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=eb8234746d26a991ec649ae8b503813b066d07f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:b3:c7:71:30:bb:60:a6:2e:38:ae:80:3c:
68:d0:c3:4d:0e:2f:5f:8c:a6:9e:03:36:37:16:02:
d7:d9:3b:2f:ab:e8:fc:6b:94:a6:d6:41:1c:9b:d8:
b5:43:9f:83:6c:f2:80:1a:50:47:ce:f4:69:dc:20:
41:06:77:47:09:45:d8:a7:a8:56:05:5a:23:00:dc:
bf:75:3f:5f:5d:a2:4d:e3:d6:04:50:33:90:34:df:
84:7d:63:c3:a3:f8:7d:9b:c0:35:3e:ab:0d:a7:59:
2d:12:42:a0:08:ce:f5:14:c5:70:97:bb:ae:cf:14:
78:30:3c:5d:14:c4:e8:a6:8c:a0:4d:ed:1c:1e:30:
e9:81:35:76:12:0b:92:63:4f:56:42:a0:77:83:dc:
47:fc:fb:0b:20:4c:10:46:73:af:83:80:8a:19:43:
5d:08:5a:b5:3d:ae:78:08:66:ac:a8:77:2d:c5:bc:
3f:ec:2a:55:02:e2:c3:02:e5:b4:a1:bc:26:5d:49:
e4:2a:3d:70:a8:b3:42:f8:f2:d1:69:18:4d:af:f7:
3e:47:65:33:71:89:9e:59:01:5d:9d:88:db:e1:b0:
84:2f:37:bc:8c:8f:25:90:ce:e4:7e:e6:9c:5a:f4:
45:29:58:35:f1:29:b5:b8:f8:4f:05:d1:22:41:a9:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:82:34:74:6D:26:A9:91:EC:64:9A:E8:B5:03:81:3B:06:6D:07:F9
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7e:65:0d:24:7b:bb:54:db:dd:b0:ef:30:de:66:ae:45:7c:
58:96:3e:c4:78:33:22:52:1e:78:e6:3e:75:91:94:b1:6b:d6:
f0:d6:42:bf:00:55:7d:ce:e0:a6:6d:d3:1f:06:69:18:3a:03:
9d:47:c8:32:e7:08:bc:3c:96:46:3c:23:b1:49:00:26:25:d0:
ee:6f:de:3f:84:d2:b3:2a:49:17:29:38:33:c3:b7:86:a1:b8:
22:28:13:35:32:c5:3a:30:d4:41:18:33:d9:ca:de:d9:d5:47:
6f:8a:fb:0d:da:d6:a9:cf:4d:d5:a6:22:6d:7a:3d:6d:76:8f:
d0:47:65:d1:88:45:68:39:82:db:12:e6:59:01:60:6b:d6:11:
92:a7:98:e9:38:4f:4a:c2:20:d3:83:e3:2d:2a:e1:ed:a5:22:
8b:46:45:85:5d:29:55:72:cd:21:41:56:a2:a8:3e:14:9a:95:
24:dc:b0:44:b2:90:64:a1:13:10:12:b0:21:7b:0a:ca:07:ac:
1b:0e:a0:3a:86:3f:c6:0e:d2:17:87:b7:15:13:d9:d1:b9:1a:
d7:71:f6:43:22:8c:a1:ad:1d:e4:67:12:46:c0:f3:d5:29:08:
e6:65:cb:ab:93:0d:8f:0d:07:b6:4b:cb:c0:8c:1e:55:10:2b:
ea:b9:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:19 2025 by rpki-client