Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
File: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json)
Hash identifier: bOhZ1H3iSk17WQ+FCbEdqhFt1e/YmqCyF5W+RCWemdk=
Subject key identifier: 5C:3D:93:8C:15:C3:51:B6:A4:33:C8:D5:F3:55:B3:92:7F:42:BA:6C
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial: 0194BCE0BDBBD2F213159EF6742BAD700589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
Manifest number: 02D7
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (hash: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=)
2: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: qyJWIGHUnCcERjsndZ7Qk+kLJVwbJ6QrfdABru5wiEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bd:bb:d2:f2:13:15:9e:f6:74:2b:ad:70:05:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=5c3d938c15c351b6a433c8d5f355b3927f42ba6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:09:e6:37:60:40:32:fc:b3:83:02:e0:4a:
3d:ff:cf:b1:36:a8:27:86:ff:16:2d:fd:1d:97:73:
01:bd:54:56:8e:a2:04:76:bf:cf:ce:4b:4a:11:c3:
eb:1f:fe:15:47:dd:d2:4b:d8:ff:a4:5e:7d:70:45:
2a:07:b2:79:59:91:5d:1d:b0:a5:1d:6a:95:45:d1:
f4:a7:d3:86:72:42:97:f9:08:7e:28:5b:cd:39:73:
41:0f:05:8c:1f:ff:2e:10:2c:37:a1:cf:5a:af:fd:
b9:74:13:58:75:ea:98:32:82:cb:8f:4a:28:47:35:
1e:7e:0a:84:38:2a:c2:60:bc:42:a5:97:f3:6f:47:
7a:89:b2:43:15:23:56:3e:85:fa:52:2d:20:99:48:
4c:b8:88:49:08:2b:92:4a:82:0e:36:c8:04:57:f1:
98:ca:66:27:51:d1:01:34:c6:e7:61:c9:49:93:78:
27:be:48:1a:04:1d:fc:1e:0b:9d:0a:a5:36:eb:05:
af:e1:3f:13:bb:59:92:ed:ba:d3:c7:ce:fa:40:60:
e1:95:3d:4e:7b:6c:30:ce:29:68:72:79:92:97:1a:
d8:ac:6f:58:db:f5:f2:81:c9:fa:51:dd:8a:4e:d4:
21:0d:39:e6:33:3e:ef:d8:0b:46:7c:18:03:46:cb:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3D:93:8C:15:C3:51:B6:A4:33:C8:D5:F3:55:B3:92:7F:42:BA:6C
X509v3 Authority Key Identifier:
keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a6:70:3f:da:8a:af:55:63:eb:49:2b:77:d3:0c:c3:22:00:
b9:97:0d:e9:aa:ee:f8:ea:03:3e:72:0e:64:f9:41:60:17:b3:
bc:2f:d6:ca:00:0a:85:39:85:f4:32:41:ef:21:cc:62:aa:57:
58:56:17:bb:8c:d8:af:c0:ca:70:f0:ce:39:fc:c2:2b:3c:6a:
93:19:76:1d:8a:63:c4:7e:5c:cf:8e:23:70:af:63:91:a8:34:
be:e4:0f:2a:71:f0:d8:f5:25:12:a1:32:4d:13:5e:e0:b3:91:
b9:a2:8e:62:4e:b8:12:c8:e9:4a:42:df:7e:34:8c:eb:3e:3b:
c3:53:5f:ff:d6:0e:79:31:42:be:73:c7:80:13:8a:f5:3c:d3:
44:1b:f6:11:b1:b4:53:7f:e5:0d:7c:53:f1:dc:2b:44:f3:3a:
a2:0d:d0:95:af:61:a8:87:05:f0:06:6e:b7:60:09:27:45:ad:
43:1f:ef:da:8c:b2:87:00:cc:73:b0:e5:37:5a:5c:cb:a9:14:
90:91:c9:bc:1c:6a:c9:70:9b:6d:e1:6e:60:e8:74:76:2d:fe:
f1:be:cb:cb:04:d7:ca:c7:63:af:74:1b:c9:c7:e1:26:dd:e0:
74:d0:e1:e6:bb:74:1c:fd:46:6d:1d:16:16:03:ed:fd:07:eb:
1f:f0:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:00:07 2025 by rpki-client