Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: I1E1x3750ZLoOptfQ9w/4r5dSrNOswMX24/h+WbuXuI=
Subject key identifier: A3:19:C3:FD:56:D6:E1:B3:FA:35:4B:3C:74:29:43:B7:EA:EC:FE:BF
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 0194BC05251876674009649D3297C80A8936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: Ug4zvaORzdN0p+5sUjOmK1nC3GHQopqkb+F0eT8wufo=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:25:18:76:67:40:09:64:9d:32:97:c8:0a:89:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=a319c3fd56d6e1b3fa354b3c742943b7eaecfebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:57:b0:c5:66:fb:f9:be:d6:9f:2e:e8:6b:
66:04:65:ad:64:22:fb:a5:9c:77:86:36:03:bc:61:
d8:69:b7:58:4f:1a:7c:9b:58:b6:69:6d:28:c3:ed:
52:df:ac:98:0c:14:82:f7:02:62:c7:22:30:98:94:
23:07:27:c5:db:66:c0:87:18:95:c5:71:6d:60:b8:
86:b4:52:03:c3:a2:c1:3b:3a:c2:c2:a4:89:a1:83:
1f:1e:a5:b0:02:b2:5b:ce:17:27:9a:1b:b9:44:d0:
fb:f6:86:65:5e:e8:51:c9:38:ed:4a:a6:4a:8f:7c:
dd:f3:ed:60:6e:a5:42:f5:66:76:e4:d2:1a:55:aa:
38:84:2d:de:6a:dc:a9:55:82:b9:d8:ff:9a:fa:84:
b4:d5:1e:07:d6:03:58:38:d9:56:f4:57:9f:f1:9c:
f7:f9:39:5c:46:be:3d:68:c0:13:b8:64:5e:51:23:
7a:6c:c1:93:90:19:2a:ef:97:1c:e3:30:34:16:16:
11:bf:20:a9:a1:12:b7:a4:19:61:67:2b:be:92:e2:
f6:c1:4f:57:65:ca:b4:5d:a4:36:5c:c7:d4:f3:d8:
55:a6:9c:42:a2:56:94:a8:d4:9f:fb:b6:d9:5d:6a:
3f:1d:16:7e:1a:c5:dc:2d:ff:54:09:4f:76:50:69:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:C3:FD:56:D6:E1:B3:FA:35:4B:3C:74:29:43:B7:EA:EC:FE:BF
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:15:46:62:18:13:fa:43:33:bd:85:0a:e1:01:bf:20:3b:72:
ec:af:8d:90:25:c5:16:4e:a3:7b:16:5d:b8:a9:b7:43:6b:81:
c1:6d:29:9c:5e:81:a5:e5:b8:6a:f8:a5:db:31:d8:7b:3e:bc:
63:78:a8:2f:24:1d:18:72:5f:9f:d4:94:56:8b:d3:e9:c7:88:
00:9a:07:e2:79:0b:75:cb:49:54:7e:ec:07:0d:d6:75:fa:ef:
b4:84:13:2c:74:2f:f1:94:ba:1b:50:50:0c:5d:71:f9:8f:5c:
e1:05:a8:1a:8c:84:ce:82:04:f4:2b:8d:fb:8d:73:31:1b:ae:
f8:bf:c6:0b:f3:46:2a:ac:f5:b2:50:43:5c:c8:24:84:dd:e9:
b0:00:eb:d9:4c:cc:b1:30:0e:e3:01:f8:84:fa:06:f6:5d:6d:
b1:3e:af:43:fa:55:48:87:c5:27:a2:c8:e4:4c:4b:86:bd:81:
8f:42:a5:75:00:9a:98:2e:8d:09:5d:e1:d1:f0:03:7e:00:20:
7e:e9:3d:d3:66:4c:82:95:2d:a5:96:78:b4:d8:c7:f4:68:79:
6c:02:27:e9:16:dc:2f:ea:9d:79:af:c4:56:d8:a0:16:ba:1e:
fc:a4:81:e5:c9:45:b0:e6:ea:23:e2:f8:de:68:d8:b9:3f:ad:
52:e3:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:55 2025 by rpki-client