Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File: RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier: FL5zoUVUTfqep33qjsbelhMPc5PMMaH/Q+i9rh2Svoc=
Subject key identifier: A6:A9:45:4D:76:DE:65:6E:D8:72:32:F1:C4:19:57:E5:CC:E8:04:26
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial: 0194BD17E7C8CACC6D572C4B28E522EA424F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number: 0431
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: q66JvPMn/KrQTQqa/hDCmng0ksu2T0QJHaNv7vM6vng=)
2: vtks1RpdqgJjRnpqZTuHlojpnC4.roa (hash: oX7oOIAU1k9nkdCgElwN7eGh9pUqSpohl3tUy6kjtQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e7:c8:ca:cc:6d:57:2c:4b:28:e5:22:ea:42:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=a6a9454d76de656ed87232f1c41957e5cce80426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c7:89:ba:c2:93:38:b6:40:4c:bc:63:f1:d3:
04:9d:cd:ad:13:77:4d:32:ed:5d:19:be:11:03:7c:
1a:0e:16:fd:d6:89:8c:5c:de:79:3b:82:93:c3:25:
f6:26:e5:1e:7b:e9:c1:73:3e:32:5d:8a:06:df:7b:
42:d4:42:56:73:8d:42:dc:ba:b7:c5:3d:42:d7:9c:
1c:76:df:75:84:68:f9:46:9a:c7:ba:42:80:5c:5a:
c7:3e:61:8d:83:01:5a:78:17:04:ad:3f:10:aa:34:
ce:15:93:2d:7a:8a:e1:b7:63:40:5d:aa:d5:9f:72:
bc:ce:cc:60:28:10:e8:f5:b2:df:6c:d6:46:f9:05:
56:c1:46:82:f7:16:69:18:77:a6:00:4d:47:d7:7b:
14:14:24:c1:19:6e:be:94:a8:94:4d:6d:54:c4:71:
a0:f1:e4:f9:78:2a:90:20:f6:ce:b2:8f:2d:5e:6c:
8c:16:6c:f7:a0:17:49:6b:d1:9d:92:02:49:89:8e:
13:d5:30:4a:3a:35:36:d6:93:33:64:f3:75:39:be:
c4:f8:1e:3d:cf:16:88:8d:71:eb:f7:0a:6f:18:94:
76:32:ef:72:7f:11:7f:2b:a7:0b:63:dc:a4:33:25:
4e:1e:fa:72:d8:2f:04:d1:44:24:71:ec:8b:20:14:
6f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A9:45:4D:76:DE:65:6E:D8:72:32:F1:C4:19:57:E5:CC:E8:04:26
X509v3 Authority Key Identifier:
keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0b:7a:56:8e:e7:bf:a0:af:ab:38:3c:8a:68:ee:7a:87:0d:
a4:fa:f2:83:9b:88:d1:57:c1:6c:8c:45:c2:e4:6f:97:bd:42:
46:d5:5a:31:aa:d3:70:7d:31:13:73:c0:06:6a:57:08:14:8a:
ff:b5:37:88:15:d0:ce:0f:47:e9:7e:89:d1:80:83:ef:33:fa:
e5:52:a0:f1:1f:dd:6a:a2:11:a1:aa:ff:62:6e:7b:79:ce:17:
b6:26:30:e0:f3:1b:84:b9:6c:cc:eb:bf:15:59:ca:91:dd:d7:
2f:9e:19:f7:f7:22:53:0b:ac:56:e4:23:01:3c:7f:58:e9:80:
ca:0e:11:77:fb:8f:3d:7d:fa:ff:7d:50:3a:70:4a:4c:ca:c8:
c1:55:bc:c6:b8:35:eb:9d:60:38:96:94:bf:8c:b2:41:75:01:
9e:a1:1d:a8:81:44:56:7f:00:d6:c6:b6:ff:da:49:40:64:bb:
ea:f2:3b:83:b9:d6:d2:e4:6e:5d:fb:d5:90:c2:81:ee:51:51:
63:a4:16:17:1d:f7:e0:1d:ae:df:22:88:de:e9:10:a7:25:3d:
fa:34:ec:55:f7:fa:e5:3e:bd:d2:93:c6:de:9a:f8:dc:71:8d:
81:60:99:af:70:45:30:3c:e0:c6:76:29:1a:d1:1d:99:0a:27:
a7:43:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:01:46 2025 by rpki-client