Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
File: 0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json)
Hash identifier: rKWb3Iyvbz5xLK4rc0LGFgZyn2T4SHsQjilEK4k1n6I=
Subject key identifier: A1:1C:B9:7B:7E:7D:8F:6F:23:16:A1:5F:A9:50:88:E3:79:D0:AF:40
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial: 0194BC3C7BF86EA74196B1987089E2D631C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
Manifest number: 074C
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: HGIz1gAPc243qvQvEyTmdusQMusCUQHjTPoKceHeXG4=)
2: PMHzHrS6vvRZOElfdDEFLn4owdU.roa (hash: UQqloSoHMyhRkRNOpx686QqPQutsxYq/mxr1bVAeLpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7b:f8:6e:a7:41:96:b1:98:70:89:e2:d6:31:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=a11cb97b7e7d8f6f2316a15fa95088e379d0af40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:db:88:fc:1b:6d:5e:1b:73:8a:0d:c4:02:
84:f4:a9:9b:b9:7c:48:98:10:07:f0:0c:b8:a7:32:
83:20:b8:df:ab:76:ca:f9:99:b7:3d:96:d0:18:50:
12:c5:7a:2e:e3:eb:3d:4d:45:f0:47:c0:80:02:ce:
13:fe:29:0d:78:d7:33:1b:0d:e1:e5:69:31:d3:d9:
d6:8d:d1:e1:f6:ac:2b:e0:94:03:d8:b7:4d:8b:36:
0b:2d:98:df:04:dc:5d:c1:9f:73:23:ca:ee:02:17:
8a:7d:fc:76:f0:ee:d4:67:2b:49:7d:ba:02:3d:2c:
0c:b8:dd:3a:10:71:8f:e2:5a:ce:73:10:c0:d6:5e:
fb:7b:f6:d1:13:b4:18:08:25:37:ef:d9:c4:f4:53:
9d:e6:cf:02:4e:05:cb:1d:32:a6:5a:3b:4f:36:81:
f9:59:5e:e8:93:e1:a2:47:08:a0:40:b0:b3:87:c7:
1f:2b:66:b8:b0:65:e2:55:2b:93:a3:b2:e1:8a:77:
1f:ae:95:05:ce:cb:0e:45:61:94:b7:88:75:62:b8:
bd:bc:67:56:e3:17:82:b7:ec:85:e8:ab:a2:b6:0e:
87:63:a4:f5:b7:75:8c:9a:90:4c:d0:6c:c5:a0:4f:
3c:15:ca:25:fe:50:5b:2c:5a:6b:fc:f5:c7:3e:d7:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1C:B9:7B:7E:7D:8F:6F:23:16:A1:5F:A9:50:88:E3:79:D0:AF:40
X509v3 Authority Key Identifier:
keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:43:10:8f:c8:2e:ff:c2:0f:93:0d:b2:5d:fa:dc:12:4f:fd:
01:dd:96:6a:5b:65:8a:94:43:c3:6f:ce:b2:bc:cf:d9:6c:0e:
d1:0c:1e:e4:e8:6b:e5:74:96:a2:b3:bb:1a:2c:58:ec:8f:7b:
b1:64:94:69:6d:1d:80:0b:13:4e:cf:d5:04:fc:87:6d:57:f5:
e2:67:a2:04:5e:28:e3:27:82:3e:59:5b:44:61:23:47:b3:bc:
74:57:28:3c:c7:dd:86:e7:fa:f7:31:28:e4:92:e5:5b:e1:e2:
0b:c9:78:5a:b4:c3:29:fc:ea:23:32:a9:c9:cb:35:ef:2b:98:
51:31:63:0b:d1:90:c6:1a:13:3f:a2:ae:1b:df:e4:2e:c5:bf:
1e:bf:93:a6:d3:d2:d7:da:40:08:04:84:a3:06:04:a5:71:54:
69:34:e9:e4:0b:13:66:d1:4c:0d:65:47:e0:15:70:92:db:8a:
d8:9c:3b:0b:c5:93:58:13:2d:ab:f7:4a:b9:0b:9b:69:91:86:
d5:b5:b1:bb:81:04:fe:28:a5:8a:61:b6:e1:f4:26:f1:6f:b8:
93:17:16:00:dd:0f:c7:1a:95:7e:87:84:68:50:13:40:4f:01:
fa:71:14:a6:3b:79:88:8b:c0:31:08:4c:c2:67:d2:3e:0b:68:
9b:99:5c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:16 2025 by rpki-client