Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: vH/GWyCJk/pCYT89lmFsO1u30yEI4xXZ55N9u/FO6BE=
Subject key identifier: 59:D8:77:74:09:1E:FE:C7:E9:82:B0:41:B2:7B:C5:2A:E0:30:43:EF
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 0194BD17BB3FAD1500646A64B8D556F5C8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 06B2
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: GGcdLIBsOyohqJHFC0x9oJ0be5z9oE2B7xUByqNL/ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bb:3f:ad:15:00:64:6a:64:b8:d5:56:f5:c8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=59d87774091efec7e982b041b27bc52ae03043ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:b3:3a:85:34:58:4e:03:b2:b7:70:ad:12:
b2:04:4b:3f:97:83:71:5f:a4:ae:51:72:b8:cb:c3:
b6:ae:51:1c:2a:6c:a0:c1:a4:10:73:60:b7:11:fd:
82:95:2a:c7:50:15:23:eb:60:2b:74:95:6c:24:9f:
81:1a:ef:05:67:26:20:07:46:bf:c4:b9:4a:cc:4a:
58:94:73:98:4c:52:77:7f:40:d6:44:69:fd:8d:23:
06:8c:41:78:d9:60:20:94:28:f0:7c:f6:5f:7e:df:
f8:92:56:f9:b3:19:7e:83:a1:29:62:97:c9:4d:b6:
e5:91:f5:17:21:17:c5:e7:41:7a:4f:37:ae:c2:f9:
48:22:b5:35:1d:46:32:f2:36:8f:51:18:e7:c8:f7:
74:c3:05:2e:15:fb:4f:e7:8b:35:80:5c:71:b7:7f:
e7:8d:fb:44:e8:94:2b:43:5e:39:50:28:e0:2b:b1:
15:12:1a:c1:ec:e4:62:7b:af:b6:30:6e:95:df:e7:
0b:21:7a:c7:5a:aa:cd:25:ed:d4:86:f0:f2:c9:25:
c6:5c:df:fd:ff:79:fe:66:6b:5d:03:91:86:01:35:
0e:55:f3:e7:ec:12:ba:04:49:68:23:ea:42:9d:43:
21:32:b9:e3:69:a4:d2:9f:ce:b4:e4:94:94:d1:bf:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D8:77:74:09:1E:FE:C7:E9:82:B0:41:B2:7B:C5:2A:E0:30:43:EF
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:91:9f:41:fb:71:13:ab:9a:3a:b1:fb:ea:21:c8:44:0a:08:
39:e0:20:69:38:85:ea:d6:94:96:cf:4c:b0:ab:4e:f6:83:14:
64:8c:e7:56:8c:20:36:10:92:22:7a:43:17:3a:b0:59:1b:d2:
79:07:9a:b1:d7:a4:c7:94:a7:b7:a0:a5:24:96:2f:9e:ae:0a:
4b:59:fa:9b:5f:90:4d:8c:3b:0c:aa:11:f9:b2:4b:9b:3a:cf:
5c:12:9c:41:a1:4e:83:3f:f1:92:1e:67:46:d4:df:25:16:7e:
c3:ce:64:4a:d6:02:39:7a:88:3c:26:3c:33:95:04:cc:3d:a4:
27:af:93:a2:45:56:22:a9:23:12:00:cb:46:f8:a8:39:6c:e4:
83:8a:2b:ea:2a:1b:c1:80:7d:0b:16:07:a8:24:16:dd:6f:6f:
75:7e:d7:39:87:ab:6d:4b:af:f9:8f:e2:c6:73:75:84:f4:c1:
d3:42:43:d5:db:6b:1c:97:f8:27:7f:b2:c3:76:8c:5b:c0:0b:
ab:73:0f:85:bf:48:2b:00:04:38:78:d6:7e:59:8c:c4:06:48:
28:c4:3a:da:a2:70:ee:87:2a:dd:db:3b:95:0e:11:2c:94:01:
ad:21:9f:dc:27:f9:d2:e6:7f:19:36:18:18:b6:f1:9c:56:ec:
66:89:37:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:23 2025 by rpki-client