Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: XCc7ia+wxPyD2oslTIHkBsWyrPcm6K1E2lq3AIPUp18=
Subject key identifier: 94:F6:E3:21:88:B7:9D:FA:8E:B0:7E:69:1C:D7:04:77:BD:40:C0:E0
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 0194BD174D1A32CCC97F927A30D65E3E08F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: mx0XPM/bBJlRolhcRx0fG1r3uo1b6prBkxcjEHTRTT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:1a:32:cc:c9:7f:92:7a:30:d6:5e:3e:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=94f6e32188b79dfa8eb07e691cd70477bd40c0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:61:01:ab:a7:59:27:23:6f:45:01:f9:7d:
01:1d:13:8e:0e:10:49:89:06:9c:2b:83:b3:cd:b4:
06:85:5f:c6:62:65:5a:44:25:3d:ac:15:eb:56:58:
fe:a7:b7:d8:77:e7:08:ef:1b:48:12:a7:55:f7:4c:
1a:1a:b6:a0:2b:ff:4d:f2:d9:06:64:0c:ca:2f:5f:
05:49:d3:e7:64:64:09:9e:04:a4:3c:fb:5b:60:5d:
e3:dc:52:63:d4:3f:62:e5:a3:43:b9:bd:e9:5d:64:
be:ab:eb:cd:98:d4:0f:70:0a:3c:63:4c:78:bb:07:
85:99:ac:a5:72:65:85:da:d6:13:34:17:df:32:80:
0d:ae:62:13:18:fe:b5:5d:bb:fe:bc:fa:9a:2a:04:
01:14:91:ba:f9:07:32:f4:af:57:a1:85:8c:d0:00:
1f:d4:ae:8e:b1:58:a0:3d:f0:92:eb:a6:40:f7:90:
b6:24:f4:62:7b:30:39:f0:7e:e5:2f:f8:c5:5c:71:
5d:25:02:08:d8:48:42:3e:91:82:f4:5a:ff:1b:eb:
77:fb:d7:b3:db:99:f2:33:6c:be:9a:cb:8f:66:1c:
71:3e:b4:f5:ad:64:fe:e8:fa:07:eb:76:0a:44:3d:
73:9d:3b:10:c9:bc:4f:bc:16:7e:fc:e2:b7:21:ff:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:E3:21:88:B7:9D:FA:8E:B0:7E:69:1C:D7:04:77:BD:40:C0:E0
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:49:ff:b8:d1:95:1d:77:a6:d0:45:c9:8c:9f:95:d4:27:9c:
fe:dc:4b:0b:96:5e:1d:5f:9e:1d:7a:32:dc:55:16:8a:1f:b7:
68:1b:9f:df:66:cc:61:da:a0:88:30:c9:72:08:ed:47:87:73:
ea:8f:f3:96:55:e1:96:50:1b:94:47:6a:1a:52:7e:2f:10:60:
86:f1:ac:a6:13:2d:f8:c9:e6:44:f4:3f:7b:e0:e5:f4:c5:57:
f5:3e:91:89:5a:88:71:29:9b:1f:95:61:0d:a4:29:8e:ec:c0:
4c:a4:a9:f8:c2:db:d4:62:c7:c9:54:13:12:c2:a1:4a:4c:21:
c5:6e:4d:70:12:f5:b1:c7:d3:d7:b0:07:02:e4:9b:19:97:ad:
87:c3:02:09:c7:42:f9:1d:31:99:eb:0d:0a:0a:78:23:cc:4d:
63:e3:12:98:7f:8c:12:77:a3:ff:42:aa:41:63:23:9d:4f:e0:
55:f4:d4:6e:ff:4e:46:84:c3:f1:e4:09:c4:99:8f:c1:eb:7d:
d6:4f:47:dc:7b:b7:07:1c:ad:0f:a0:32:e1:16:c1:c1:26:02:
8e:a4:c8:fe:dc:40:02:06:be:40:bc:b0:d5:18:94:51:b6:44:
34:a0:2a:5d:ab:d5:7c:03:38:92:5e:eb:66:eb:e3:f9:bc:90:
57:8f:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:20:06 2025 by rpki-client