Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: bBaSYkhGWCYcJxBIwWHmdAEE/3b3LvlPXMV7X5xRJOY=
Subject key identifier: 6D:01:0F:FB:25:65:06:41:62:64:1D:E5:F7:68:9B:92:E7:31:63:32
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 0194BCE071A860273420DF26B40E082E073F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0245
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: patK5obvtghQC4KrGr+sWfsMc8vi0pcVnxCJj2VTY5I=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:a8:60:27:34:20:df:26:b4:0e:08:2e:07:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=6d010ffb2565064162641de5f7689b92e7316332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:90:40:24:a7:c5:9d:20:2d:7c:f0:e1:cd:
25:b5:8d:07:76:17:b6:44:3f:6b:1a:7d:e0:0e:8b:
d9:17:20:ec:2a:01:0d:98:51:45:f9:6d:5a:d9:5d:
4d:35:8b:f9:1a:5d:ed:3e:3b:dd:b6:8c:cb:cc:50:
97:88:da:57:c0:5a:5e:32:5f:36:bb:9d:4f:e1:30:
09:a3:91:8d:38:7a:57:c1:4b:ab:5e:25:ae:49:87:
37:c2:b8:9c:02:3e:4a:ae:18:86:1d:40:0c:a6:a5:
08:dc:6f:be:17:6c:44:0c:3b:5f:a6:90:85:c6:34:
f2:31:83:7b:9f:e8:8a:1f:7b:0d:5f:e0:a6:05:76:
42:62:90:af:07:59:f3:e1:b5:85:00:73:7a:5d:7f:
20:78:ee:da:91:6f:86:8a:8e:fc:af:f5:ca:2a:21:
ac:86:0f:15:68:ee:45:9d:4a:2a:ec:ee:98:23:59:
c7:c7:f1:50:1a:0c:80:e9:9b:f4:e2:49:f3:2b:cb:
90:ab:dd:f9:f6:ce:52:c3:2d:15:22:e1:bd:ee:7a:
b4:79:da:72:e0:f6:83:c9:4f:aa:a0:04:d6:40:6a:
bf:f8:e3:d8:be:16:87:8f:f3:c5:4f:c7:fa:d4:a5:
01:01:9d:eb:fb:7b:aa:69:36:04:a6:23:ab:f3:6c:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:0F:FB:25:65:06:41:62:64:1D:E5:F7:68:9B:92:E7:31:63:32
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2d:59:39:51:50:99:cb:78:cd:76:de:e2:66:24:ef:01:03:
af:cf:4b:d8:50:6a:99:6c:fc:ac:c2:da:90:82:06:7c:d9:6c:
54:fa:a2:e6:74:fd:2b:0c:40:17:17:1f:92:f8:3c:b0:00:55:
0f:7a:21:9e:0f:c1:1d:d3:4d:84:9c:14:74:bd:61:f4:c7:7f:
29:67:d8:f9:31:a3:c3:c4:0f:74:18:89:73:9a:19:02:1e:7f:
4c:08:89:47:1a:fb:e0:9f:cf:a1:e1:62:0d:55:e5:86:5c:b0:
a9:c1:86:2e:dd:0e:54:09:15:42:47:fc:81:55:d7:d3:6d:69:
10:b2:b7:96:66:c9:4e:dc:0c:14:db:82:a3:e0:d8:da:ee:59:
e5:f3:06:b0:cd:c5:d6:50:80:aa:32:0b:20:d3:dc:0d:a6:9e:
7e:59:04:9d:ae:76:bd:3d:a4:ae:e7:a6:71:1c:93:c9:1c:cf:
ea:f9:a8:7c:be:4e:bd:49:48:71:9d:86:35:96:01:ce:cb:db:
7c:44:a3:08:a0:b0:c4:1e:ad:bf:e2:8f:13:64:5e:56:35:bb:
00:f0:60:b2:42:e4:62:f4:20:fe:73:a4:97:60:ac:d3:dd:dc:
3f:fd:03:62:67:d8:81:6c:b6:ac:be:f8:92:07:e0:2a:dc:1b:
72:13:a0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:28 2025 by rpki-client