Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: 9s/0RmUNVcdSVaLP6HwLmKE2mbQWlXwJ/sXpJtAt6Sc=
Subject key identifier: 62:BC:03:E9:0D:9B:F2:61:B8:8A:2E:5F:ED:43:1B:85:EF:84:29:E2
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 0194BC3BD4E7B9680DE9E6C772743EE4D7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 12FD
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=)
2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: nAemf4HNEl5Z+UlFVTRn+Uz+qdQDm8lheiDZ3XTq7cA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:e7:b9:68:0d:e9:e6:c7:72:74:3e:e4:d7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=62bc03e90d9bf261b88a2e5fed431b85ef8429e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:97:7f:09:3b:4d:30:8b:df:e1:27:d2:63:
1a:43:23:0b:9a:77:7f:89:72:fa:ee:e3:76:61:cb:
e6:6e:b8:d0:e5:dd:85:8b:cb:59:3e:f9:c6:3d:73:
3b:8a:2c:6f:e5:c6:0a:48:48:ef:f0:c7:87:4e:6f:
8d:75:69:80:1d:0c:44:f9:11:d9:1c:3f:12:e5:87:
59:5a:3f:53:05:09:7f:60:e0:37:29:aa:90:e6:f8:
2c:e3:4a:0a:76:0e:26:18:ef:1b:bb:2d:3c:97:b8:
52:6d:ab:56:d9:e4:de:d8:32:27:59:69:9f:42:b5:
e1:8b:fb:6f:51:72:cc:8d:4b:37:3f:3b:97:eb:73:
10:63:6c:d5:1f:53:c6:07:4d:32:82:cf:86:49:ab:
c7:f2:68:73:47:cb:03:fa:b0:d7:d9:50:9c:ab:c3:
a8:5d:56:83:02:60:63:bc:9d:db:d7:15:cc:c1:b5:
0b:0e:10:ab:da:74:3e:59:35:f6:74:1b:12:a5:19:
39:1f:81:49:ff:50:b2:e4:5b:a7:4c:24:af:60:52:
ed:9c:30:e1:a7:47:cc:78:36:a5:d2:53:8a:52:ce:
c9:d2:26:ed:a9:12:dc:b3:a2:ac:78:a0:02:a9:07:
65:1b:a7:7d:1e:ba:27:46:26:d5:56:ed:25:a6:32:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:03:E9:0D:9B:F2:61:B8:8A:2E:5F:ED:43:1B:85:EF:84:29:E2
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:94:ba:99:3d:ad:1f:84:34:b4:c9:d6:3f:26:ae:97:f9:03:
99:ef:4e:90:78:3e:92:5d:b1:35:c4:4d:03:1b:96:a8:ed:e0:
df:5b:76:b0:87:1c:3d:f3:ca:bf:82:ee:91:9d:8d:06:21:e3:
02:53:31:b5:d0:6e:85:0d:a1:88:dd:18:96:4f:4f:cf:ce:bc:
9e:d7:2b:3f:97:79:65:1c:52:1f:55:47:96:bf:a1:20:6b:e4:
11:d9:aa:8b:7a:0a:f9:ea:80:8a:d1:23:ca:c0:55:e7:3a:38:
1d:70:50:c4:6f:9e:05:c6:66:e4:e3:f3:53:8f:95:06:fc:e9:
73:e9:20:bc:df:9b:8e:cd:61:a5:8b:9b:e4:2b:c5:ff:74:ec:
1f:b9:8e:c1:d0:45:8a:8e:4a:32:2e:9f:8d:b4:55:5b:41:6f:
ec:96:50:8d:06:de:a0:b4:27:ce:c2:79:fe:31:08:34:00:2c:
f4:c4:08:00:38:46:b9:be:8c:7d:60:f5:46:ff:be:cc:65:23:
59:eb:ff:12:09:b4:c9:32:19:12:8f:5a:ff:bc:93:b5:2f:a2:
b2:43:97:b8:72:e2:10:27:ea:c7:bb:f9:eb:8c:70:a6:b9:fd:
f9:6e:18:26:52:2b:bc:cb:0c:59:94:37:05:26:20:bc:bf:31:
d7:36:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:27 2025 by rpki-client