Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: MF0YAMmpTngaWSvOickd1L92E2J2DSXxxDvZqeI1Wr8=
Subject key identifier: 1A:E1:56:C8:B9:95:9F:62:62:B1:98:F6:F1:15:36:3A:5B:62:0B:C5
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 0194BD85B1F7A9CDC536FF40CD4F4C6D373D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: s600KX36QIDpIJd05WFX61PbexBqJ/+BNnWotRiJ+yU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b1:f7:a9:cd:c5:36:ff:40:cd:4f:4c:6d:37:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=1ae156c8b9959f6262b198f6f115363a5b620bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:11:e9:44:a0:dd:83:fc:9f:46:b3:e7:20:
e7:92:72:25:1d:06:18:23:6f:9a:48:fa:48:c2:11:
3f:ac:7b:54:ae:30:c9:42:22:90:e9:b3:72:97:3a:
86:a1:ea:06:b2:0c:9d:b6:96:99:3e:1d:33:d9:98:
50:96:e3:5e:e3:97:a0:d2:68:73:7a:0c:9a:02:81:
cf:68:16:24:6c:d8:a6:cf:1e:36:13:7b:3d:10:2e:
e3:4e:44:6b:62:f3:30:88:41:0f:e6:73:27:36:92:
64:03:a1:b6:56:7a:11:d0:fe:e6:33:8f:a8:2c:99:
cf:05:3d:a6:1c:f9:92:73:2a:f6:ae:f2:db:fd:e1:
c2:3b:9c:5d:8d:0c:57:00:e0:60:55:d0:a1:26:73:
86:6f:bd:78:20:3d:65:08:b4:57:84:8a:ba:ed:25:
8c:36:ce:27:13:46:0c:2e:6f:1a:26:25:72:6e:55:
2b:29:21:4e:e0:bc:88:d6:16:ec:bc:d8:1f:4a:43:
27:ed:ca:97:59:b7:64:d9:b7:47:61:78:ef:a6:59:
53:a2:80:d1:87:cb:ef:c6:51:53:d2:02:47:a3:13:
21:8a:73:25:9e:a5:23:70:f9:b7:04:34:bd:96:4f:
6a:ad:6e:6b:ac:35:93:24:46:34:e0:2e:ee:6a:fd:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E1:56:C8:B9:95:9F:62:62:B1:98:F6:F1:15:36:3A:5B:62:0B:C5
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:97:0d:7b:5b:22:2c:4a:49:28:2c:b6:c1:08:7f:c3:aa:ad:
b9:45:5b:d7:02:c8:83:5f:6e:0b:05:c4:b1:7d:a6:70:2b:49:
f3:76:37:92:c8:fe:d0:69:67:db:96:7c:7c:55:cd:72:1e:3e:
71:3b:9e:fd:82:76:62:cf:be:0d:7e:00:47:ee:76:74:3d:f5:
65:9d:9e:b1:db:09:ce:32:52:ed:f0:7d:18:ec:a2:57:87:b7:
75:54:d5:18:0b:d5:71:d1:fa:68:b1:06:ce:69:e5:bb:01:67:
c1:5d:09:39:23:76:66:8d:ce:e5:f5:d2:b4:06:cf:0d:f2:43:
d6:9a:c9:ef:e0:40:dc:c4:eb:6e:57:21:16:d7:bc:e0:15:a4:
6f:6a:99:6b:10:d1:05:83:32:fa:ec:6c:5e:86:ae:ff:07:d8:
74:3c:4a:27:af:00:e0:69:13:0a:a8:0f:96:6a:9f:06:9e:0f:
7a:4f:12:7d:d4:cb:28:1a:b1:bc:37:b2:56:2f:f7:07:a0:76:
6a:67:5c:75:99:6d:99:4d:b3:31:82:4a:a6:f2:67:24:b3:9b:
4f:2c:c0:ea:cf:21:d8:a0:17:ac:a1:62:76:20:ab:08:fd:a0:
9c:80:12:08:66:49:03:1f:7f:e8:1d:b6:74:00:b1:bd:0b:38:
42:3c:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:37 2025 by rpki-client