Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: pEb2oArY3ltbuv/6pKMtgF5fkAd/cbqKiBivLVk6+Zc=
Subject key identifier: 00:38:C7:FA:1C:AD:57:C5:2A:38:D1:C0:F7:44:27:AB:6F:A0:D9:90
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 0194BD17C7BEB83AE87A98DE8509E5C7D8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: xHIQ5LD+qRA36RVDl4IqJs8Z3TmT1uAT1cAG52/9y3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c7:be:b8:3a:e8:7a:98:de:85:09:e5:c7:d8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=0038c7fa1cad57c52a38d1c0f74427ab6fa0d990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:a9:ab:b1:99:48:b6:05:af:2f:9b:12:74:
1d:13:33:3e:c4:c3:a7:bb:6b:ac:81:cd:93:02:2f:
1c:01:94:8e:9c:ee:2a:c8:d5:d8:a8:d3:dc:11:8b:
64:de:b2:c0:a0:27:1b:b0:a0:08:79:f1:d7:07:10:
57:89:ae:9f:cb:85:40:58:85:df:f3:28:42:d3:af:
96:35:dc:eb:ca:3f:45:20:05:bc:c5:48:05:d2:05:
e3:11:cf:be:df:d0:41:15:f5:b6:93:2b:dc:8f:ab:
ec:2e:58:1a:37:65:23:26:78:0f:9d:c3:5f:4d:96:
3e:a0:98:8b:76:e7:9e:44:0f:73:0f:55:d9:19:96:
85:f2:33:42:66:2a:ff:bf:24:12:35:14:ff:88:6c:
d8:a6:bc:02:ac:b1:62:9d:f3:1a:32:e4:d2:8a:9f:
d7:f3:e8:5c:cc:c1:f7:0d:f3:fd:11:69:c4:b8:72:
70:7d:91:4f:5c:db:ee:9c:bd:7c:1e:fa:16:61:d1:
ba:7b:a1:55:97:ad:59:7c:0a:dc:da:0e:b2:51:d1:
b5:b4:d2:8c:fd:7a:6f:b2:f3:8c:4c:fb:de:ac:87:
45:f1:f1:09:ea:76:01:e8:f5:c1:48:33:02:77:78:
10:6b:1c:16:b3:de:b4:13:9d:fa:98:7d:4a:a9:a6:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:38:C7:FA:1C:AD:57:C5:2A:38:D1:C0:F7:44:27:AB:6F:A0:D9:90
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6b:d2:1b:2e:d3:f1:6b:0c:30:c7:60:3d:ce:7d:c8:9a:b1:
7b:81:7a:92:cf:db:43:6a:98:57:7e:21:ad:1a:9c:51:83:e4:
50:8b:3d:34:e6:f7:3e:6b:e8:ff:45:13:b6:ef:9f:07:86:4d:
cd:10:a8:4d:6d:be:48:64:10:db:83:73:b6:50:2c:61:07:8f:
b7:83:b4:1d:67:8e:3c:26:04:36:ce:2e:ff:0c:e1:11:dc:9e:
d5:94:47:57:9a:48:da:ef:25:8c:48:b7:7b:b2:63:45:40:0c:
03:6e:29:8f:a5:e4:cd:0a:95:5b:96:9f:21:69:55:81:b7:94:
a3:1a:cb:52:b0:ad:8a:07:d8:a4:c6:f3:85:1d:4e:02:34:11:
06:82:b7:0d:ee:27:02:2f:e2:59:58:3f:49:79:e7:82:c3:26:
d6:f7:84:95:16:53:3c:9d:fd:f3:da:9e:f1:09:82:1e:a9:e0:
8c:b5:2c:5b:59:af:55:40:b2:6b:17:04:bb:35:82:c4:f6:4b:
d8:91:d1:67:8e:15:30:8e:35:b2:20:88:bd:03:13:c5:19:80:
53:e1:fd:8b:97:58:79:3c:28:f3:19:b1:ad:ce:8c:59:85:a7:
1a:69:5d:14:3e:31:0a:1c:89:fa:6f:8f:57:92:4b:8d:51:00:
03:ca:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:14 2025 by rpki-client