Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier: BLRnzxkTJ6voBJYu6OSv9ucDFrFS+HILCInFkqm8KWE=
Subject key identifier: 79:E8:29:8E:9F:6D:8C:A6:8C:05:98:CB:71:29:2D:27:C6:43:CC:2E
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial: 0194BCE0EC63ACBB6B89C0525C403F3BD8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number: 01F0
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: BBmeL_y8dFZnZVsyof-5HOdh9rM.roa (hash: l+ylGzhBzhl0JipTi0n6QhNTnBVAyKKM7zWtPfY+z3s=)
2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: yCgkfhZ7kVdgsI6YfxIB8EqdbA1CBQZiDzQftEWe0YY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ec:63:ac:bb:6b:89:c0:52:5c:40:3f:3b:d8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=79e8298e9f6d8ca68c0598cb71292d27c643cc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:0b:ad:d8:11:00:7d:2f:6b:8f:c9:6f:94:
ec:a7:5f:f1:5f:f6:9e:42:ec:a0:2c:4e:11:60:c9:
14:9f:f5:d3:50:54:70:20:26:03:12:d5:86:98:cd:
10:00:c2:4e:95:e8:93:f3:a7:32:c1:9a:97:6c:87:
ce:1c:59:e7:a4:20:89:ce:9c:2c:b0:b7:e6:42:16:
e7:8b:3c:c1:f3:e0:09:67:fa:18:2e:08:52:e4:ae:
ef:82:a3:91:c7:29:1c:ec:45:23:1e:5d:66:cd:f4:
ea:77:8e:91:a4:85:5b:9a:16:d1:d8:4f:fb:4a:d5:
03:01:79:e4:9f:69:98:50:29:7f:f2:88:0e:d4:dc:
88:f6:f2:52:8f:73:22:3f:3d:3d:d7:40:a0:95:84:
fc:41:6f:99:9e:39:17:7d:74:20:6e:bd:40:2f:b1:
c2:13:77:f6:56:32:f0:6e:70:67:da:b4:e8:e0:45:
21:a4:8d:2d:7f:a2:97:91:2a:af:65:f2:6c:b7:8e:
e6:3a:92:3b:30:c6:d7:fa:69:31:ce:d4:de:65:62:
f2:c1:a9:8e:00:df:0a:4a:83:93:a7:db:6c:ce:ad:
43:0d:0f:23:20:9f:a4:94:ac:56:28:87:a9:39:56:
21:21:99:b6:57:9b:03:31:0e:1d:91:42:c8:31:92:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:29:8E:9F:6D:8C:A6:8C:05:98:CB:71:29:2D:27:C6:43:CC:2E
X509v3 Authority Key Identifier:
keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4c:25:5e:de:a2:4d:d7:01:9e:f5:34:27:58:0d:09:7e:cf:
69:d2:ee:72:a1:fe:67:14:a6:61:59:c1:ac:8f:cd:7a:0f:da:
06:60:b5:40:1e:89:5d:25:79:3f:00:39:2b:62:cb:ca:80:9e:
fd:d8:dc:c5:0a:a7:d4:71:c4:45:9b:d2:84:a6:8d:fe:5c:52:
8f:a5:11:a7:c8:84:f6:a3:9e:66:17:c7:fa:ff:89:28:11:12:
97:e0:5e:65:13:9f:49:24:8c:25:c6:a2:19:14:14:de:c9:5e:
f0:a4:3c:78:45:ed:c1:c2:d2:af:d3:b7:11:28:b5:2b:82:7c:
31:70:15:2c:c7:5e:88:08:ce:e3:67:4f:cf:2b:d9:fc:3b:35:
34:43:2d:4e:ce:e5:df:a1:8b:85:d9:12:77:01:de:ec:09:01:
a1:03:2b:98:a4:c3:fb:48:47:d1:19:be:ea:ca:7f:31:ee:a9:
61:c4:09:69:13:cb:2a:85:ed:9a:4a:fa:3b:76:2f:40:0f:72:
26:d7:9b:b2:23:ef:70:04:7b:69:a5:92:28:c5:0b:32:08:ab:
92:c5:05:02:77:cc:bb:49:5b:75:81:a9:4e:de:b5:e0:c8:f6:
f9:7b:06:28:bd:9b:65:d5:5f:21:45:4a:3d:de:ec:b1:e0:f6:
ba:ce:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:24 2025 by rpki-client