Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
File: zR5W5MTEpRjyOIpay1rwRSzCpZU.mft (raw, json)
Hash identifier: NCd+Jplu++BxJbXs/4iM84q/JhhS3aV9UKpZXWYyWbI=
Subject key identifier: 2A:D2:14:92:AB:9F:03:7E:36:F4:D2:8E:12:CF:E4:C0:AF:A4:50:5C
Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Certificate issuer: /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Certificate serial: 0194BCAA2B2FD939CE9F9C92B61237C70A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
Manifest number: 0BF2
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: ke5imTlr7fT0_-DE8h9O78Ggh4s.roa (hash: 05xyuy/re9IJXLD81+YTPEcHrtJ82VFe2mcpWEaKIAc=)
2: zR5W5MTEpRjyOIpay1rwRSzCpZU.crl (hash: /OAUzWxn0es1y+/8LFPGiWB3LL71TxwmjH3/20DrnuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2b:2f:d9:39:ce:9f:9c:92:b6:12:37:c7:0a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=2ad21492ab9f037e36f4d28e12cfe4c0afa4505c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:54:fe:c0:74:bb:18:c0:de:61:3d:6b:1b:ad:
ca:24:9f:fa:99:f0:7d:64:ad:8a:cb:73:1f:35:b6:
71:26:1b:e1:d6:b3:bb:a1:67:4c:5b:18:c8:ee:76:
9f:4f:69:f5:8d:c3:98:af:e2:7b:af:30:58:ce:ca:
6e:e8:de:26:62:aa:09:de:27:c4:cd:0d:07:58:c5:
9b:db:cb:de:12:ba:f5:0f:cd:5b:22:71:33:be:da:
53:68:a2:76:83:5a:5a:85:6b:46:5b:b7:04:e1:bb:
f8:f2:5f:e2:b2:43:5e:5e:0d:33:cd:8f:61:10:dd:
0c:47:f1:ef:9c:72:96:54:c1:5e:7b:7f:6e:52:92:
dd:7a:88:85:81:c6:a1:a8:ae:4f:54:87:a4:83:b4:
7b:23:2e:42:93:2a:f0:cc:0e:6a:0f:cf:b1:42:d5:
3d:36:77:a9:87:eb:72:51:66:8a:50:d3:a3:e4:17:
14:bc:d5:f8:6f:a0:cd:cf:f8:74:cd:09:a5:62:27:
94:95:5d:b8:7e:2b:af:8f:ca:b8:e4:c2:92:db:51:
7d:97:16:9b:dd:0f:4d:a0:e1:ce:69:a2:bb:db:04:
f8:cd:27:cc:48:0b:d7:25:c9:d2:ec:f7:c3:c1:d9:
22:f3:04:9c:51:dd:9a:f6:7a:b6:2c:84:2a:f6:c7:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D2:14:92:AB:9F:03:7E:36:F4:D2:8E:12:CF:E4:C0:AF:A4:50:5C
X509v3 Authority Key Identifier:
keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6e:77:d5:cd:c5:52:f7:56:44:37:a7:60:48:d4:4a:8b:df:
df:1a:4e:36:ea:e4:52:21:26:be:85:a6:34:7a:32:f7:ea:ee:
1c:10:3f:cd:a9:71:43:3a:87:b6:8e:4c:3a:8d:fd:35:e5:1a:
ea:6e:9c:c3:6d:c2:4c:64:80:d1:51:c9:27:4c:bd:d2:dc:02:
18:d9:6a:a7:fe:ac:ba:d9:45:1b:0e:d8:cb:e4:7d:b7:3b:44:
a9:8b:b6:48:49:13:b1:5a:84:e3:6c:d4:13:93:f7:29:df:ba:
87:ec:fb:ce:b1:c1:d3:2e:c8:3b:ff:0d:05:18:af:b7:a9:23:
fe:97:a7:03:03:e3:2f:d1:a8:d5:2a:a0:77:ca:79:6b:02:e1:
5f:ff:3e:b4:f9:50:48:ea:a1:1f:13:49:4b:22:64:ee:c0:19:
8c:b9:85:39:05:7a:f3:47:4f:1d:49:c0:11:ec:94:91:ad:99:
3e:f2:dd:7a:57:bb:e0:e9:e4:af:21:3d:0c:12:d7:ec:19:67:
9f:82:01:d5:b4:66:b5:fd:3f:a0:2a:45:ab:4e:21:8a:9f:4f:
82:a3:fc:2f:e1:2d:f2:8f:88:3e:7f:6e:05:76:93:70:92:8d:
e6:73:f4:45:49:fe:8f:65:01:d8:22:88:14:a4:9b:ac:a6:be:
6e:fb:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:44 2025 by rpki-client