Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
File: fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json)
Hash identifier: 0BUz7Eu8R7Mxd6Mg5a8sQoc+TOsBtY0OX0kUwnz29Ks=
Subject key identifier: A1:A7:49:46:B0:14:7C:9C:5A:D0:B4:44:F6:E2:9B:84:9F:2E:AB:CF
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 0194BBCE787D3D0E74020727A6353AA24F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
Manifest number: 0D04
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 60SN0C5WIf6xee2zdPp6NtBUZT4.roa (hash: 4gepFS/5lwBJIpO8Zj2TAgVElFJH/stJp2iOcS189VA=)
2: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: v9ni56ldSyxqFc5oHrhx/eNF2n8HmdhfVhliFtA+OJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:78:7d:3d:0e:74:02:07:27:a6:35:3a:a2:4f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=a1a74946b0147c9c5ad0b444f6e29b849f2eabcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:15:1c:c1:2e:42:70:bb:07:83:b4:b5:30:
47:52:01:7a:bf:59:9f:72:7d:36:22:5b:b8:f7:e0:
2a:8c:c5:5c:51:ef:fe:59:be:1b:a9:b2:41:d2:62:
1c:64:43:a7:a0:36:4c:c0:a1:7a:ba:2b:6d:58:a4:
ee:67:08:75:44:ee:e8:69:63:04:4b:92:e5:3e:14:
d8:ef:74:d1:b9:b7:a8:31:c7:4e:e3:9e:3c:73:0f:
01:54:f5:cd:e9:03:95:43:5f:7a:cb:87:bd:1b:4e:
ce:6f:64:1a:3d:b6:c7:57:17:dc:d2:ae:d6:c6:6a:
22:a9:b7:d5:da:15:4b:bc:8e:56:fc:70:23:39:e2:
3b:b9:8a:00:99:a2:b5:ae:34:d1:65:55:6b:b6:75:
84:e4:c3:f2:c7:2e:4a:d6:ce:b8:ba:0e:74:f3:1a:
7e:2a:42:28:38:9d:1e:f6:1d:1d:d3:fb:82:1b:a7:
ec:18:a1:5f:ed:39:43:a6:b3:d9:01:48:fb:59:a3:
4d:cc:c9:51:8b:73:52:a1:7e:76:a6:10:04:4a:4c:
0c:ff:db:15:24:6a:5a:14:75:67:35:0a:b4:6a:0b:
a6:2a:0f:f9:1c:1c:ce:12:8e:6b:3c:b4:b6:a3:85:
ca:2c:24:b9:2e:05:c9:82:54:c7:e7:a1:41:07:59:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A7:49:46:B0:14:7C:9C:5A:D0:B4:44:F6:E2:9B:84:9F:2E:AB:CF
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ac:be:e1:51:e7:f9:62:fb:3f:26:b0:70:ff:1b:e7:70:90:
41:68:ac:d7:fe:a7:ce:bb:e4:64:d7:06:e0:f0:af:42:a8:38:
98:43:e6:f2:48:c8:47:97:13:d7:30:08:b0:e6:51:9d:f2:6a:
31:92:ba:b1:89:8b:f6:d0:d5:4a:35:e8:0b:2a:6b:db:68:26:
3c:95:37:08:ca:bb:8b:e5:5a:1c:ee:56:88:ca:20:0f:32:d6:
ac:9f:9d:ed:ab:6c:74:fa:c8:c5:51:56:cc:e2:68:05:1b:ad:
fe:d7:0e:dd:c1:50:db:33:0a:78:bf:6c:fa:6f:bd:b0:df:98:
de:a4:8e:fd:0d:98:e9:92:9d:6b:12:83:5e:b2:56:8c:08:63:
4a:1f:b6:47:ba:a3:f8:32:96:a5:66:76:5a:ee:31:9d:bd:68:
6b:20:c9:dc:4d:03:1f:b6:c2:d4:7d:81:25:a4:89:f0:9d:06:
b5:68:12:94:27:f3:4f:cc:82:7f:0a:39:a8:e0:10:e2:40:b6:
62:d3:4b:23:07:ce:29:e1:97:58:31:33:59:57:70:f7:f6:e7:
b1:31:f2:9d:f6:81:93:ee:b6:93:74:13:57:35:72:5a:4f:46:
22:8f:a9:a3:30:e8:61:6b:ad:a9:df:82:fc:b9:b5:d1:91:3c:
7c:db:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:56 2025 by rpki-client