
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier: 62TAKfMxi4RBeTHxNJ7pOYXQtDHlrFw59jevYFTIIhE=
Subject key identifier: 2B:20:83:B6:77:0A:8B:45:0D:22:12:29:C0:43:0B:C9:A5:2A:3A:E1
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial: 0194BBCE09D95145EE721856A7A1814740B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=)
2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: BBRQFaqP8qfHztXDNzVP4ydAf4Mo7BxCScr6fcYWxEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:d9:51:45:ee:72:18:56:a7:a1:81:47:40:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=2b2083b6770a8b450d221229c0430bc9a52a3ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:91:23:a9:94:08:24:4d:5b:98:6d:03:f0:
c5:35:1a:b3:3a:e7:c7:0c:39:8c:b3:b7:34:38:6c:
22:31:48:99:2c:54:39:93:f4:70:84:45:07:3e:a1:
b5:85:87:74:72:b5:36:b8:65:b3:e4:d1:ad:e4:eb:
bc:82:1e:22:1e:3d:47:de:24:1d:b4:05:48:e4:c4:
4f:e3:6e:88:06:28:f7:dd:88:4c:85:2d:04:65:94:
c4:a0:8e:9d:1f:8d:fc:ca:ef:d6:94:d7:9c:03:b5:
65:b1:74:87:b7:48:89:51:9a:f9:7c:f4:1d:b9:eb:
3a:99:13:d6:5c:2e:c5:1f:8f:17:0e:07:16:ca:a5:
3e:4a:7d:5c:fb:83:08:46:1d:0a:58:5b:ca:6f:0a:
21:2f:0d:18:01:01:5c:1a:20:0e:c9:c5:7a:2b:0c:
e9:fb:1d:78:9a:5d:6b:a5:3a:db:f4:59:a3:fd:25:
7c:5e:a7:68:41:fc:48:4e:a5:b1:40:fa:9f:8b:39:
e5:07:11:25:7b:e6:75:2a:61:82:25:99:d1:fd:45:
4e:71:4a:03:e6:bc:54:69:09:71:ff:61:a1:7a:c5:
12:dc:8e:d1:28:19:68:ba:c0:3b:06:af:7a:69:b7:
aa:f8:2e:b2:7d:d8:cd:85:2b:5b:45:bd:17:6f:41:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:83:B6:77:0A:8B:45:0D:22:12:29:C0:43:0B:C9:A5:2A:3A:E1
X509v3 Authority Key Identifier:
keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:19:e4:b4:6f:e8:1a:d4:44:0f:f7:a5:66:27:cb:4d:83:b4:
04:a7:66:bd:b9:f4:69:b4:7d:37:c7:fc:ce:9b:ab:2a:71:6e:
7c:a6:d8:26:1a:2c:04:a9:f6:84:4d:1a:f7:d1:9b:73:4e:b9:
cf:2e:13:67:b6:d1:70:7c:ab:1c:81:80:e6:f6:a3:f3:39:7a:
b0:6a:92:1d:cd:f1:84:f7:b2:ff:00:3d:90:ac:fe:8d:61:62:
bf:d9:2e:09:25:09:e1:d0:41:1c:84:f6:35:7e:da:8a:6f:36:
84:42:3b:f6:81:6f:57:12:95:4d:d8:8a:b8:13:3c:0b:41:0f:
3b:da:86:4c:99:f6:3a:ec:01:8a:ad:02:72:11:fe:5d:98:2d:
c4:dd:e3:47:3a:a8:f4:2d:a7:ca:e6:a6:9f:64:a5:dc:a4:ba:
b2:d8:55:bb:37:0a:ce:8b:9e:91:9a:a4:a3:19:4e:69:67:68:
57:f4:b1:7b:e0:cf:0d:68:c3:f0:b3:8d:56:6f:99:3d:e7:ff:
50:e4:44:14:21:7e:ca:a8:57:eb:cf:a6:60:2d:ec:ef:6f:26:
91:40:9e:e1:6a:c7:e8:e4:61:19:a7:38:03:da:cf:65:8f:cd:
f6:1c:24:45:c9:b4:36:1f:49:c7:0f:cf:7e:d6:9b:80:d8:20:
8a:e0:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:03 2025 by rpki-client