Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
File: rjzFZ_6_40h4rrkThhzwYAooOQM.mft (raw, json)
Hash identifier: 1AEt6hX9WulVrRs7f/eeQqF9YKLQZi/fslMXy//Et0Q=
Subject key identifier: E2:14:57:60:43:B0:47:26:8C:AF:B7:2E:9A:9D:0A:D2:3C:27:52:B8
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 0194BD17603677961FD00728545C9BDE529B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (hash: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=)
2: rjzFZ_6_40h4rrkThhzwYAooOQM.crl (hash: 3gDmV9Tv3ktSmz/vuh9sr9aSOjGj/rJnfHqeE0Xpi/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:60:36:77:96:1f:d0:07:28:54:5c:9b:de:52:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=e214576043b047268cafb72e9a9d0ad23c2752b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:d9:f5:f1:a9:ff:a1:05:3c:18:b6:45:05:
c3:11:cb:38:8f:e7:1d:6c:d3:dd:a2:60:eb:d9:4e:
92:57:e4:ff:48:f4:f9:01:ab:02:4b:43:da:bf:db:
55:ec:17:ca:e2:3e:86:1a:16:91:cd:0d:82:46:b7:
ee:ae:a8:e2:7f:f7:d6:56:3e:a1:ff:8c:ad:7f:e0:
26:54:8e:91:09:cb:e4:3e:5d:96:cc:37:aa:4c:5c:
7a:84:d6:b6:85:b5:2a:0a:99:5f:bf:9d:20:2b:1b:
61:b8:05:81:1a:9d:6e:36:b5:5c:0f:e8:bb:92:6a:
91:39:2d:1d:2e:da:0b:0e:f8:8e:e8:9a:5f:fa:fd:
f9:9e:82:92:bc:a1:90:b7:b1:52:f8:78:a3:df:28:
2c:dd:ff:17:d0:a2:bd:da:5a:b3:e0:53:a0:94:e6:
93:a2:f7:db:d3:39:15:78:b4:f2:82:33:71:aa:74:
f5:31:20:22:77:36:21:8c:d1:01:0a:fa:e1:d5:b5:
c4:73:30:78:a0:00:08:c3:9d:54:15:6b:92:69:85:
41:b2:64:c5:85:a2:21:3a:0c:27:47:b5:b5:be:4b:
53:21:fa:fe:11:24:a8:9a:1c:1e:fe:cb:3d:19:bd:
6a:ce:f2:b2:03:32:b9:84:66:f2:f9:4c:c2:c4:38:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:57:60:43:B0:47:26:8C:AF:B7:2E:9A:9D:0A:D2:3C:27:52:B8
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8b:12:5c:01:09:58:89:be:50:e0:51:24:78:04:c6:c7:a4:
70:68:86:d3:c4:bd:d7:f5:86:af:6b:c6:43:8b:3b:54:3b:2b:
16:c5:e5:7e:e7:af:ad:05:3f:c4:d4:21:f6:f4:64:3d:46:1d:
38:f3:4f:05:45:71:37:93:9a:16:a9:6f:1c:9d:65:1e:0f:2e:
55:37:c2:25:30:b7:af:8f:ff:f0:40:e0:2f:d0:90:3d:54:6d:
77:99:3e:e1:3c:86:a9:30:3e:2e:21:bd:bb:9a:8e:8c:fc:21:
94:30:f8:62:a4:c5:60:ef:26:84:ce:de:d3:f7:39:cc:61:fd:
6f:37:0e:31:7f:81:ec:d0:23:eb:e0:c9:1c:55:00:72:0d:10:
21:fc:43:c4:2e:4a:de:2b:01:84:6b:de:dc:eb:81:c7:9c:6d:
59:b2:7a:5d:d3:25:4f:ff:13:a5:ae:2e:90:9f:ae:58:ec:bd:
7b:17:68:68:b6:84:83:ef:84:10:cc:6a:c3:5d:22:1a:cc:27:
28:11:b9:75:c5:1c:dd:5b:a6:2a:0f:d6:db:87:f9:85:60:28:
27:3b:75:b2:fd:dc:cf:ab:08:db:21:f2:dc:35:be:6f:fc:72:
83:1c:f3:4a:07:ea:ee:3d:55:d6:c2:87:84:93:7d:20:44:c9:
8e:4a:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:35 2025 by rpki-client