Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File: zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier: tuEF0tsP9aJUxSXcU+Rpv+/jZPSBs0+8548ujNdzjyE=
Subject key identifier: C1:B5:95:FA:DF:5F:6A:D7:EA:94:BC:9E:B7:8B:3A:82:85:0C:39:08
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 0194BCAA164C648A428F0588A9CABBCA1F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number: 09C4
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: _2rlTorI9d4EskVB3Q2AELQgntg.roa (hash: MJ/JOjkufW/i3x6kFr8d78WsqqTFtkNpKnXIQ8qokdg=)
2: fsiSKtfr1vd7jNqGvz2rWlb2WGU.roa (hash: JYUZh82zsCTaCv7uAVxiuRXoppFvfB/m/R6UI/2LG30=)
3: lTK57WKRl8JHYSn3Me1JiHVYX6c.roa (hash: OsSENyDZ+wkTwyFgI+grH7k0F+jqVnxydXIxiH9U0Ng=)
4: oJSpmKHDBTQennb3bFM-AUri38c.roa (hash: gaj/8isA/Vy8LzqeD5fj8KpWVmIYxfupI+6YOWca7WI=)
5: yroUuw1scM5vJqw9L2C1NZloBMg.roa (hash: tq+65QQs/oxlmOUT1sm7YA/yaQJk+Rn+QS41OHsKCiw=)
6: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: csHkK54teVOggjQur2R27IdpxzUGC6wkH5DWq/JD81M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:16:4c:64:8a:42:8f:05:88:a9:ca:bb:ca:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=c1b595fadf5f6ad7ea94bc9eb78b3a82850c3908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:70:3d:6c:f0:05:84:95:bb:a2:e6:4a:73:
77:cc:56:9e:fd:4c:4d:cd:61:8b:67:c1:bf:31:90:
05:41:13:bf:f7:ef:eb:02:24:f1:9a:56:bb:1a:f2:
6d:2b:64:9b:16:95:c6:07:e3:13:bd:02:12:03:5d:
c7:62:6d:87:a9:ba:67:83:cb:42:e2:e2:6a:bb:02:
89:ee:8f:b1:82:ec:20:6c:52:96:63:5e:70:bb:ff:
4c:ba:59:f1:f5:7a:65:a7:48:ff:49:bf:83:fc:b9:
3a:78:b3:c5:96:b0:d7:4f:9d:4f:af:65:ec:c2:66:
af:3e:df:d1:aa:49:20:43:9b:ad:a5:43:90:20:f5:
5f:f2:5e:a5:5a:be:7d:fd:de:1a:a0:7f:cf:82:48:
27:18:27:78:08:2e:07:43:a6:a5:6f:32:5f:73:ce:
38:7b:b7:8e:6c:e5:46:0a:24:98:08:1e:d8:4a:d4:
3e:ec:e5:80:01:37:b6:31:d6:ab:71:b1:5e:24:72:
d0:c9:53:ab:de:0b:84:e7:12:b3:70:6b:29:9d:97:
e0:5f:88:ca:e1:6b:83:48:c5:fb:c9:5d:26:89:88:
43:58:51:be:18:3b:0f:60:3e:1e:6b:1c:e4:6a:7f:
17:a4:ed:b1:64:de:c4:69:dc:cf:9a:6c:d6:ae:fb:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B5:95:FA:DF:5F:6A:D7:EA:94:BC:9E:B7:8B:3A:82:85:0C:39:08
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bc:ed:0b:37:48:14:a3:79:59:63:93:83:41:74:6a:05:38:
e3:71:8e:51:34:1d:74:e8:e9:79:36:2d:ac:c4:19:01:1c:c6:
e0:d0:da:f4:cf:cc:37:19:a3:e2:9b:1a:48:cc:c9:cf:8c:ab:
78:48:70:60:71:36:e7:98:7b:f7:05:92:31:be:c2:8b:4d:47:
72:8b:1a:b5:4b:37:ba:d0:94:77:06:3a:7b:7b:74:1e:08:b7:
21:4d:8b:2f:ec:e1:6d:be:8f:53:ab:ef:45:47:86:89:57:cc:
9b:01:e5:1f:f3:ca:69:d7:b6:cf:c1:15:8e:a9:5e:77:c4:81:
8d:51:db:06:d5:72:c5:32:36:cf:5c:2c:91:f0:0b:0d:e6:42:
75:5c:e1:ac:de:77:2d:e8:c2:10:22:df:ff:32:40:9d:81:76:
71:94:e2:16:37:e7:99:4e:02:bb:e9:f3:d4:e2:d9:26:db:71:
42:24:59:41:8b:1b:15:01:f4:40:88:26:be:c9:6e:a1:57:ea:
19:aa:3e:96:0e:63:e2:50:5f:67:68:17:4f:d0:cb:ce:b8:37:
fd:90:68:3c:b4:7a:b7:46:d9:86:15:6a:bd:ad:9b:3d:23:7c:
cd:e5:d1:77:7b:41:a3:d8:e1:62:03:5d:26:3c:43:af:c8:6a:
5c:2b:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:42 2025 by rpki-client