Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: 07L4ZPxbOakfim7+2R99hutZXwmQzqT2tKTz/ewX21o=
Subject key identifier: BF:0B:23:6A:9F:E7:FF:4A:61:B4:29:1F:64:20:A9:B0:F0:59:3F:84
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 0194BD8579BE0BE1CAC79A777DEB6A506C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0562
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=)
2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: 504uxey5a9GkyXUgVo/ySA5FMiwHFhvR+3q1yaUY+hw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:79:be:0b:e1:ca:c7:9a:77:7d:eb:6a:50:6c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=bf0b236a9fe7ff4a61b4291f6420a9b0f0593f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:f4:00:76:9d:65:72:2e:16:4b:11:b7:ee:
28:47:f9:33:07:14:8f:a0:96:dd:36:8d:b6:78:fc:
fa:1d:76:93:2d:81:c2:4c:78:aa:c1:de:57:44:6d:
94:2b:06:5d:7c:ac:1f:a9:11:c9:9a:65:5c:ba:30:
97:28:55:da:df:99:e4:f4:da:8a:ea:9a:3f:63:e9:
b9:03:47:94:aa:0e:ed:d9:3e:1f:94:d4:f3:64:93:
da:fb:04:aa:fa:87:d8:0c:3f:54:6a:31:64:26:3f:
4d:71:37:f6:9c:85:de:b3:7f:e9:c6:30:9a:7e:46:
48:54:07:5b:41:6f:83:a6:8a:05:0e:7b:a4:58:45:
6d:72:78:e0:60:fe:39:96:ce:35:84:11:4f:4f:f2:
06:7a:45:9a:c2:e4:0c:59:f3:b2:5a:bf:8e:7b:8e:
dc:07:d6:e9:d3:bf:d6:fa:25:4a:81:ba:96:d3:33:
d6:fd:ab:7d:bd:8b:f7:ba:dc:03:e8:d5:21:38:56:
4e:38:41:5e:ca:c3:dd:c5:0a:41:df:77:2a:9e:6b:
2a:31:55:a6:e2:c2:39:9a:29:ea:aa:1c:1a:f0:1f:
d0:f4:ff:ce:74:76:f4:ed:b6:04:3a:9d:1c:23:45:
12:13:13:a1:64:9d:3f:30:11:6f:72:9d:7f:53:12:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0B:23:6A:9F:E7:FF:4A:61:B4:29:1F:64:20:A9:B0:F0:59:3F:84
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:66:d8:6b:e9:0a:bf:5b:f5:8c:7f:43:8c:a6:9a:d8:cb:cd:
77:cd:79:6f:9c:85:49:a1:94:bc:c3:52:61:0f:0d:5a:f0:04:
9e:5b:8c:24:ff:86:48:41:bd:9e:5f:6c:99:85:57:e1:1d:6e:
10:b9:7e:75:23:f3:c1:f4:29:06:cc:83:85:dc:89:cc:12:5f:
42:1d:fc:05:16:20:a3:7a:f2:f9:92:bd:78:4b:ce:a5:a0:22:
97:6c:b8:fd:1b:67:fb:80:eb:4d:2a:6d:ce:61:af:ed:05:87:
c5:0f:2f:63:d3:16:34:f7:93:52:d4:3e:59:3a:39:34:28:b7:
e3:02:31:e2:ef:21:44:9c:fd:58:f6:52:22:d1:92:f8:2a:98:
fe:dd:17:f4:c0:5d:0d:86:15:09:1f:96:a7:47:6f:f4:de:13:
63:71:9e:d9:db:c5:39:18:7e:cd:a4:29:fd:25:7b:4e:6e:4a:
bd:67:0b:63:f5:1e:85:7b:bb:85:44:7d:6b:8d:24:1a:46:95:
b7:b2:75:90:ba:5b:26:3b:2c:29:48:da:ac:9d:ec:1f:43:68:
05:c5:16:f8:9c:a9:22:2a:16:cf:27:97:2a:35:0b:76:f7:77:
2b:12:73:52:2a:db:4f:fc:2b:8f:81:da:2a:ef:63:3e:6a:46:
80:8a:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:43 2025 by rpki-client