Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: g3GZ3V9wjmMVif3Xpa2RDp077ZGooCPSBDzEAirm5Eg=
Subject key identifier: 2E:F4:19:75:57:FA:79:68:54:3B:DE:23:1A:D8:A8:85:7D:49:D3:34
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 0194BCE0B2DDBDDC31F249C58137A44A99A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: VlpzdMOUJJrgjdV2HWUGb33TI+Pr/FhtdZCgVc2MC14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b2:dd:bd:dc:31:f2:49:c5:81:37:a4:4a:99:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=2ef4197557fa7968543bde231ad8a8857d49d334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:16:95:86:e7:fb:48:bc:10:a9:76:8e:89:
03:11:12:86:bf:9d:75:bb:71:f9:6d:59:e4:ba:76:
f6:70:5a:85:50:64:c7:16:b3:0a:2e:1f:b7:1c:eb:
4d:de:98:0f:c1:53:75:75:f9:8e:97:2a:a1:ab:62:
82:8a:0a:a8:e7:f5:95:bc:25:0d:e2:3d:75:83:2b:
ba:83:21:c2:c0:87:eb:ea:ec:ee:79:9e:03:cf:47:
fe:08:50:5c:0d:8b:1f:f4:88:36:0e:c6:05:5b:53:
9b:c6:27:27:c3:2f:16:63:3e:bc:70:33:3e:fb:9e:
98:72:0f:aa:af:ae:64:3a:70:b0:9f:01:50:7d:7b:
28:be:4f:c7:88:16:f7:d3:59:9e:3a:59:cb:21:13:
ac:18:cb:81:95:22:ca:a2:b0:15:13:d8:93:b0:db:
02:5e:e8:67:9b:52:7a:e6:a0:ed:0b:9a:1a:4c:ee:
12:b8:77:90:69:99:99:bf:df:16:fa:55:85:96:85:
60:61:0a:c5:72:bc:9f:63:b7:1a:13:7c:f9:22:9f:
b1:f7:3c:4f:4e:63:fe:2b:f6:bd:07:d2:83:2f:63:
c3:1a:79:6a:f0:0f:2c:ee:83:ab:42:11:a3:bc:83:
31:d7:c7:d3:38:7d:b5:b1:0a:fe:0f:a4:2d:05:9b:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:19:75:57:FA:79:68:54:3B:DE:23:1A:D8:A8:85:7D:49:D3:34
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:51:94:ac:b0:fd:0f:37:0d:74:09:c9:53:39:14:9d:73:51:
a8:b8:db:75:5f:b4:af:17:28:63:e5:f7:67:fc:55:2e:ec:07:
0d:3a:e7:fb:76:31:3f:b9:29:17:96:8b:7a:ea:3d:61:7c:2a:
f6:f4:9a:99:a2:78:6f:a8:22:77:a9:24:e2:79:0e:36:39:46:
3c:01:33:c7:3e:52:3e:57:69:55:4c:b0:2c:e7:4b:1f:ae:b6:
bd:92:ab:9d:e8:c3:63:17:46:51:db:c2:b3:bc:a0:8c:cb:0c:
9d:db:72:ec:ee:52:b5:14:f4:72:98:8c:67:b8:1b:5f:70:f0:
1a:e5:36:23:32:04:eb:7e:d7:17:5c:95:93:3e:e6:62:75:dc:
04:6d:42:da:c2:75:ba:43:74:7f:9c:52:09:67:f0:1c:89:55:
c7:f3:e2:c3:96:1a:c0:89:a8:88:1c:99:e4:ab:ff:3c:13:3c:
0c:ee:e8:6a:c5:ff:fc:5d:49:4a:56:1f:0e:54:8c:4f:89:a0:
93:cc:b1:71:0a:14:ef:f9:28:78:17:1c:4b:da:9d:41:81:a0:
95:91:a7:62:f7:a4:d6:5b:25:bc:18:c6:c8:92:4a:c2:8f:c7:
73:b5:de:0d:33:45:ba:0c:f0:fe:4e:72:8e:f8:0b:94:b6:73:
d0:d3:7b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:58 2025 by rpki-client