Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: 80O3KtQRk8B5g6ncV7TANdu6a/RO57mxkrQZqtVgP1A=
Subject key identifier: 07:E2:44:11:00:00:50:5E:A1:7A:07:28:FF:32:7D:52:B5:7F:18:2E
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 0194BCA9992C8AF9B7A94934F1800D7E18E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0A3F
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: OjEkklAqZJBrJu8+4eIJ9IFIvkftou+JDm0YPxZ+ruc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:99:2c:8a:f9:b7:a9:49:34:f1:80:0d:7e:18:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=07e244110000505ea17a0728ff327d52b57f182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:f1:04:e0:64:36:3b:f6:39:d4:d6:dd:4a:
a3:cf:08:49:3e:dc:45:53:b8:44:e3:24:b6:63:32:
32:1f:29:e2:d2:af:e9:88:2c:f5:b8:1b:db:77:e8:
29:20:26:ae:b1:8d:39:cd:46:74:6e:82:b6:46:b7:
a3:34:e6:31:c5:45:8d:0e:54:5d:ec:54:1f:0f:8d:
6d:3c:e2:a6:3c:f7:35:1d:e2:e9:7d:f6:cb:57:a8:
b1:58:29:6f:b8:e7:94:e9:c9:25:f0:83:b4:3c:1f:
7a:15:16:1a:79:96:14:2d:13:0a:0c:12:78:f5:85:
12:3a:f2:4c:68:5c:8c:5a:21:b8:26:cd:b1:86:27:
4a:f3:66:f7:e1:67:7d:82:dc:f4:47:9e:a7:dd:c3:
22:0d:e5:bb:2c:4d:fa:42:cb:29:f1:4b:20:4a:bd:
38:24:71:6d:2c:2d:80:c8:75:65:1f:5e:f4:da:f2:
85:37:b2:90:c1:36:04:76:e2:ec:a8:5e:0f:35:40:
23:cd:fe:4d:56:26:f3:65:18:d7:5f:28:d6:5d:16:
9d:90:7e:b8:21:0a:01:12:bf:55:e1:44:10:52:51:
03:6d:73:2b:0f:1d:94:7b:9e:46:87:d5:66:6f:da:
f1:d3:8b:e7:9b:4f:d8:db:16:9f:b1:92:6d:19:cd:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E2:44:11:00:00:50:5E:A1:7A:07:28:FF:32:7D:52:B5:7F:18:2E
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ef:64:22:c1:f7:15:00:f2:ef:fc:e8:a3:95:c3:af:79:bb:
e5:70:f8:f7:90:48:cb:a9:ab:54:74:f7:bb:66:d7:2b:82:9d:
94:5d:79:38:dd:6f:21:be:ce:e5:bd:a9:83:1c:fc:c6:b8:46:
ae:38:c0:6d:99:9e:55:aa:a0:e4:f2:3b:6b:37:ff:e7:5b:11:
96:e1:f3:b7:05:85:92:3d:d4:b0:3a:32:8b:8f:8d:c9:a2:ae:
04:68:d7:f8:08:88:da:ad:92:78:3a:22:5f:50:d1:1c:dc:32:
f0:5d:82:be:f4:f5:ba:05:68:94:ca:ed:6c:5d:63:0d:fc:21:
1c:d0:db:f8:43:af:bf:cb:4a:53:cc:87:b3:08:8c:dd:22:d7:
19:c3:0a:0d:2e:96:16:6a:6f:d7:7c:b7:06:26:a3:04:1c:82:
eb:1b:5c:15:5b:6a:47:76:7e:3c:02:47:ff:56:ff:ba:33:2a:
ea:e7:d5:4b:2d:62:d0:c2:05:57:e2:77:d4:f8:89:59:bf:51:
99:c2:8e:4d:c1:23:bc:9e:98:ea:c8:8b:ea:15:06:d7:39:73:
30:67:ae:8b:5a:32:2d:d1:bd:08:d0:f0:4b:4c:b5:b5:39:1d:
43:f8:ec:17:f1:79:48:1a:01:86:82:b2:63:0e:b4:19:94:03:
33:5c:ae:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:56 2025 by rpki-client