Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: 4NEBliD2F3uVh7pUmXsGdooDswZGkjuCn6ryCpXeBIo=
Subject key identifier: F2:88:EF:0D:87:4E:20:4D:C9:35:70:D3:B2:BC:22:11:0B:A6:6E:CF
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 0194BBCEA2FE82067B48A0DE95F7E8D5F7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 0D7D
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: cQmo4yrUBGze+HCnbsykae6f+VBTR/tSjzf6kA1yp/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a2:fe:82:06:7b:48:a0:de:95:f7:e8:d5:f7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=f288ef0d874e204dc93570d3b2bc22110ba66ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:d0:10:ad:f0:eb:cd:80:2b:b9:85:0a:ce:
0d:56:e7:b3:3e:4e:2c:e7:06:da:99:71:d1:a4:c8:
18:04:df:fc:39:bf:cd:3f:8d:09:16:23:29:22:94:
a9:01:d9:d4:1e:b2:ba:cc:3e:d5:c5:52:b2:ad:ff:
31:cd:a8:c9:80:10:56:68:d1:67:85:e2:89:74:fa:
2a:55:29:8d:a8:6c:e9:bb:7b:f3:27:06:d6:46:cd:
6b:93:f6:0f:1a:ba:47:ac:74:b4:51:d9:57:a1:b8:
f6:81:f1:3c:4c:ee:fb:10:3e:f7:f0:ad:db:53:bf:
e8:61:37:a5:38:be:1e:d6:25:7f:59:44:b9:7b:81:
40:83:a3:6f:1d:69:a3:ce:86:43:3b:e0:fb:90:1a:
9d:a0:61:8f:0a:ab:09:e5:aa:fc:33:3f:a4:2e:33:
0f:44:b2:55:43:cd:b3:6d:7c:39:93:b6:13:3f:d4:
01:b8:f0:fa:90:6f:f0:a6:00:7f:2f:36:3e:30:d1:
80:93:8a:29:83:91:34:5d:74:e8:c6:d2:19:9a:09:
59:7d:71:8b:ea:74:d8:a1:66:c8:7e:b5:ee:d6:29:
9d:7f:4f:08:c8:7b:b9:7e:3e:1f:6d:d3:2a:bd:54:
42:a0:a9:4c:d1:1a:db:8e:e9:f0:16:95:3a:e4:98:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:88:EF:0D:87:4E:20:4D:C9:35:70:D3:B2:BC:22:11:0B:A6:6E:CF
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:80:4e:92:c4:2e:cd:e8:ec:8b:e0:78:4b:4e:78:a3:1b:a9:
0f:df:d6:04:9e:e1:05:39:8c:9e:07:45:f1:0d:ed:d7:ca:d9:
21:fd:7f:b7:e9:08:79:9e:c0:bc:a3:4c:15:d9:e9:f6:8e:90:
d7:65:80:cd:f5:22:3e:1b:cd:f9:fa:3b:e3:ff:9d:43:68:48:
02:0c:95:b8:61:7f:1e:4e:2f:df:4b:14:98:99:d4:de:27:fe:
6c:d4:f6:d7:0b:0d:f5:e1:3f:94:ef:61:94:8c:17:90:b4:1a:
40:a0:61:89:30:28:bc:da:e0:dd:37:17:6a:9f:f9:30:c7:82:
8f:13:bd:8f:70:ed:f5:cc:08:f5:71:95:92:6a:ec:c5:e7:12:
48:f0:22:e7:02:19:46:36:2a:9e:65:f1:59:71:f2:3a:bf:c5:
c5:a8:e5:5f:9c:84:0b:85:79:07:6d:2b:ff:30:7e:ab:4b:5a:
38:d4:ed:0b:50:70:ef:4a:40:08:59:63:e4:2c:41:14:26:63:
ac:27:1d:a4:e9:5a:66:a4:e0:c5:0d:0a:a9:c9:e0:09:9a:52:
0c:6b:37:0c:43:85:7b:65:b1:87:73:f3:a9:3d:95:a3:b9:64:
2d:61:00:9a:1a:fa:4b:1d:8b:02:b6:ec:c2:cc:8a:4b:0c:90:
a8:4f:32:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:31:42 2025 by rpki-client