Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: hCRDVimRvU3P9dFmrNWeeUIjv7KIj5MfjsRc9UEe9cg=
Subject key identifier: F1:7C:4C:3D:8F:B9:9B:66:FF:AD:7F:AB:71:83:0B:1E:86:70:3E:86
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 0194BD4EA9A05D8E033EF5F03EB39C62F8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 113A
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: dG22DsZ8oRVWXxvdMCkSdiSZejDpGGaXCw65RZs7fNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a9:a0:5d:8e:03:3e:f5:f0:3e:b3:9c:62:f8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=f17c4c3d8fb99b66ffad7fab71830b1e86703e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:17:31:d6:f8:fe:54:31:e8:57:8d:da:7c:
11:82:bb:c5:fa:6b:56:2c:81:0b:f9:d3:b2:df:2c:
90:0b:6e:46:d9:8a:f6:8d:85:02:d7:78:f4:22:92:
44:5b:92:0a:59:3c:f3:ed:75:5d:7a:e2:06:6f:e7:
ef:eb:bf:f5:3d:7d:a7:d1:36:e2:ef:58:ae:72:c1:
0b:12:17:2d:63:2c:94:22:4a:0f:a8:fb:a9:69:d0:
75:f4:4e:d3:36:5a:31:c9:dd:00:12:cf:a4:d3:71:
28:7b:87:cf:d9:f6:61:b8:6d:0a:4e:bf:99:51:43:
27:ec:3d:07:82:19:07:b5:52:9b:f5:4a:5b:c0:ce:
58:9b:38:65:88:16:42:53:bb:8c:c1:95:d8:fe:a2:
67:65:ff:9b:fb:d0:63:ce:9f:18:95:f7:ea:3f:68:
9c:ff:9a:69:44:34:44:cb:88:eb:ca:8e:27:f3:41:
40:20:db:d6:47:f5:63:e5:51:d2:97:99:4f:55:d4:
40:25:82:66:c5:8a:80:46:62:93:3a:a4:ab:90:2f:
e8:e9:1b:41:49:ba:b2:f3:ae:f3:e4:80:4d:62:1a:
6b:48:84:59:85:3f:5c:72:28:c5:42:10:c3:29:7c:
d8:4d:04:8b:ee:c1:bc:48:50:70:e3:f9:e2:ff:71:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:4C:3D:8F:B9:9B:66:FF:AD:7F:AB:71:83:0B:1E:86:70:3E:86
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:05:49:a4:5b:2a:a3:e5:d9:f1:fb:e2:1b:4f:d8:1f:7c:1b:
2e:b9:24:f1:8a:14:65:95:6c:85:ad:20:48:38:48:5f:3d:dd:
db:09:1d:0f:a9:db:ce:74:77:0b:9a:6a:37:f3:2c:78:1c:b1:
34:ac:b5:da:13:92:47:f4:12:95:27:49:28:90:a3:75:5a:f9:
20:1d:e4:bf:cc:ef:1f:00:01:e4:7a:1a:b0:d8:f8:b8:2f:b3:
34:aa:b1:45:d9:bc:f4:47:0e:46:29:92:cf:78:df:97:02:56:
db:a7:32:f7:61:3c:9e:cb:10:65:5a:21:8f:65:96:22:68:ba:
53:c9:45:03:4f:e3:9a:16:4a:27:02:c5:bb:50:58:9c:1a:7a:
8b:b3:a7:ef:dc:ee:eb:50:25:c8:95:a5:dc:81:1d:27:b1:a0:
5c:90:81:0e:de:42:19:95:aa:ca:9b:53:dc:bb:3e:64:09:63:
b0:91:b3:b6:6b:ee:9e:57:d9:99:f6:a4:b5:3c:2d:6b:2a:9f:
2c:cd:05:52:57:ad:c6:56:0b:bb:19:0f:ec:e6:71:2c:a4:6b:
fa:8d:0a:9a:d2:1e:47:69:ff:52:58:7f:45:1f:5e:51:97:ec:
01:80:b6:5a:96:df:a7:ac:e2:5d:0c:05:b8:ce:1b:58:26:7c:
50:c9:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:35:24 2025 by rpki-client